Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5a2568f-6046-333b-b4f2-dd13dd03556c.roa
File: f5a2568f-6046-333b-b4f2-dd13dd03556c.roa (raw, json)
Hash identifier: qlhZs1sHGmMdg7i3G++LCWaV87zmi7GrpguHP2v/CH4=
Subject key identifier: 75:4A:B3:C9:CD:1A:A3:D4:79:06:9E:98:A6:BB:BE:AF:82:33:BD:2D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4E1A227680D013A67FF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5a2568f-6046-333b-b4f2-dd13dd03556c.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.240.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e1:a2:27:68:0d:01:3a:67:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5c0b0f22-3497-46fe-97bc-183055c51610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:fc:e9:0b:8f:25:b1:85:5b:be:de:8c:b3:
f4:0b:da:6e:4c:21:06:bc:0f:17:ac:73:47:1b:ec:
02:38:ba:58:f1:24:13:3f:78:3c:39:90:97:4f:0d:
32:b3:c2:e3:c2:fd:96:df:53:d0:76:db:4a:57:15:
3e:81:e8:88:0c:ba:6e:3b:cd:22:5f:57:4c:61:e8:
ae:52:a2:33:5a:39:2b:13:6b:0a:5a:23:1a:e7:62:
45:f4:ab:08:0c:58:0d:6a:48:72:39:4b:5b:3a:ed:
e3:64:b4:fb:1b:a4:a6:d6:d1:9e:37:36:a5:c4:c4:
10:a3:86:57:42:aa:4b:3d:4f:e0:ab:cd:5a:fc:e7:
e5:89:e1:0d:25:bd:90:41:c5:f2:f6:15:59:cf:fa:
91:65:b9:56:29:49:49:af:a3:5b:4a:81:b0:14:2e:
e4:97:82:2c:59:80:83:99:66:ab:95:76:86:33:53:
92:5a:13:1e:ca:48:9e:8d:ae:2e:ea:1d:b3:3e:d3:
d6:e7:6c:96:93:64:00:83:69:30:71:2a:df:19:1c:
73:33:ea:3b:c8:fc:3b:bd:9d:18:ba:d1:23:ac:7b:
e1:7c:0a:b6:82:20:63:cf:9f:0b:89:cf:7f:33:d3:
34:ae:4e:9c:3f:f1:37:4a:7d:9d:89:6f:3b:69:6b:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:B3:C9:CD:1A:A3:D4:79:06:9E:98:A6:BB:BE:AF:82:33:BD:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5a2568f-6046-333b-b4f2-dd13dd03556c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.240.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:26:f3:56:f0:98:9a:30:50:ea:39:2d:6c:5b:45:41:a2:ca:
bb:e6:fa:0e:1b:b9:b4:2f:34:17:a1:08:d2:c7:74:1f:26:5f:
da:02:cd:e6:98:8f:a0:3c:1e:41:4b:0c:7a:1d:d7:72:c2:f0:
f1:45:b8:6a:66:de:b4:7e:30:11:44:45:15:59:ad:02:10:5f:
fc:7a:dc:34:67:46:50:fb:2f:30:31:3b:21:0a:c7:92:52:21:
4c:24:58:29:c6:b6:81:a3:3f:9a:5f:de:69:99:0c:07:0e:91:
7c:1a:28:2f:43:2b:f2:64:f2:9b:bf:bb:87:dd:d3:5f:7b:7a:
63:43:39:7f:c5:60:48:22:0c:88:27:16:42:42:e5:bc:6b:e3:
0e:83:9c:58:a6:50:58:11:99:da:6f:bc:b3:0b:0b:11:0b:b4:
a2:17:7f:83:2f:a1:df:55:a3:e6:8c:a4:06:7a:6b:00:6c:b7:
a7:1e:7f:44:4c:ed:1c:9c:02:07:44:32:e6:c9:d2:5b:c6:2c:
1c:d3:25:41:75:5d:4f:4a:26:76:51:6f:e7:3d:5f:4c:51:e3:
21:c5:18:c5:0d:eb:4e:ee:c5:06:b5:9e:c8:97:aa:21:66:c4:
7a:72:ad:00:23:28:12:7a:63:a7:e3:cc:70:81:4f:58:4e:18:
63:49:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:35 2025 by rpki-client