Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa
File: f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa (raw, json)
Hash identifier: p1YxWQHXXqgwQRIwHejQufu56dDlGxlCVDsYWXxCUbI=
Subject key identifier: AA:C9:F5:99:37:3A:94:6B:C1:2E:D5:B5:6F:4F:38:73:E2:8F:22:50
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52246E4B3194666F42580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.185.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:22:46:e4:b3:19:46:66:f4:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f8243534-dc89-403c-9754-6a20fe667cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:07:a5:1c:b7:73:a8:39:9e:6a:5b:e2:bc:
17:c5:6c:63:7a:ec:e3:f6:73:9a:69:b2:5e:69:12:
4a:cf:7a:f4:65:6a:ab:a8:3c:ea:b6:b3:07:27:4c:
28:8c:cb:cc:0a:e4:32:f2:da:ca:16:fd:68:bd:9b:
09:6a:e1:65:a1:13:2b:c2:25:64:24:c9:ee:f6:80:
6f:61:0b:a1:09:4b:09:58:9f:c3:c2:fc:1b:50:3f:
ba:6c:c9:c7:d0:02:4f:f2:1a:b3:de:90:65:d9:a4:
07:18:ef:98:49:d5:10:f6:52:76:f7:b7:fa:bf:cd:
bb:6c:07:25:73:ea:e4:af:5a:19:45:6b:ce:41:75:
05:4a:bb:4b:8d:87:65:44:63:0c:a0:48:13:cd:9c:
32:68:d1:99:e5:99:8c:29:f0:f4:e2:cf:33:2e:c4:
bd:b7:ef:db:8b:ff:83:84:5e:8d:34:8a:fe:ae:55:
85:5d:eb:d7:8d:ad:2a:0a:c8:c1:b0:58:b3:00:66:
65:d3:c6:8e:4c:7a:f2:71:19:d8:ef:21:09:24:8d:
0c:ab:17:e2:8b:50:bc:35:47:1a:39:d5:a2:55:04:
6f:fd:10:51:33:2d:24:cc:52:89:45:44:bc:6c:db:
1d:49:7b:5b:bd:7a:0b:49:c0:ef:e4:a5:67:f0:fa:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:F5:99:37:3A:94:6B:C1:2E:D5:B5:6F:4F:38:73:E2:8F:22:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8d963cf-b5a1-3542-a11e-019ff28d3fba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.185.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:1c:27:54:0d:b7:69:62:d3:66:b6:49:21:53:dc:01:ba:8a:
40:aa:57:b0:3f:31:59:10:6e:d8:03:a3:22:fd:93:fe:11:11:
13:6d:9c:1e:d7:c8:5d:5a:df:f7:e3:59:0c:c7:11:dc:35:1d:
6e:c2:8c:28:2a:ef:82:40:5a:36:6c:f5:a3:e9:94:c6:9e:3e:
b0:b2:17:fc:08:89:3a:a8:73:d9:11:7a:70:90:40:5a:eb:90:
5b:3a:74:d3:60:98:1b:d4:fd:aa:5d:8f:cb:14:6a:56:a0:86:
c0:68:94:1e:62:db:b6:2e:b8:75:e8:35:fd:23:d0:90:3e:a0:
fd:5c:e7:57:24:ac:c0:32:71:97:a4:71:4e:0e:c1:81:6c:fd:
6e:82:32:1b:3c:8a:ab:d9:49:85:2a:42:c8:a2:e7:45:a5:bd:
18:59:1c:74:17:11:d8:49:cf:58:6e:27:ed:a5:c0:36:46:27:
89:76:aa:6b:3b:d4:15:9d:c5:9e:67:a8:9f:db:66:08:64:eb:
e8:a2:80:05:28:1d:1a:d2:79:ac:07:71:9d:e6:e5:3f:dc:f0:
76:69:33:e1:11:42:bb:43:f2:87:32:2c:da:ae:6f:18:f9:05:
a7:91:06:e5:43:a8:71:c5:4b:b4:31:44:40:60:75:d6:dc:39:
65:99:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:39 2025 by rpki-client