Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa
File: fd1da0e7-c104-31de-9278-54b4327a6491.roa (raw, json)
Hash identifier: 81s5PHs2h8s4ZJhaT9p5y0r/kehRRKkUBKAOYC8v7wg=
Subject key identifier: AD:5D:89:5C:11:B1:8D:D3:C7:8F:72:6F:57:D6:E4:FC:1E:39:9F:21
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51CF7474DFAA1E0B017A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.242.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1c:f7:47:4d:fa:a1:e0:b0:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=4c1a86d8-6d9e-4d3e-9d60-66b4c9a47e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:38:62:4f:d2:70:31:04:b6:51:f2:48:bd:
6e:1d:2a:d0:7f:14:f2:30:76:21:40:ea:6e:05:be:
44:44:72:7a:31:46:63:c4:19:d4:97:01:5d:02:a2:
18:71:3d:9e:f3:32:1f:69:4e:41:16:92:08:1c:97:
8f:1b:0c:85:3d:64:e0:a2:26:a2:d0:20:b5:06:81:
d4:33:5e:fd:38:00:96:7e:7f:3c:b8:17:a9:3f:e2:
ed:5b:fb:ba:3f:9d:6b:6f:35:d9:60:fe:f5:05:44:
f1:11:c8:1d:c1:af:af:85:c1:83:a2:96:d7:de:f1:
34:35:66:d6:4a:be:33:df:5a:27:85:13:63:f7:08:
9e:58:e3:28:7d:54:1c:7f:fa:95:8d:b6:4f:22:ec:
ac:b9:b5:48:62:bb:85:8d:44:76:ea:cf:25:77:ed:
ed:03:9e:2b:4a:d2:5e:04:00:b0:b1:87:19:72:95:
a1:59:10:59:98:a4:a5:ed:5c:56:9b:b2:bd:01:50:
50:28:e8:45:05:bc:b0:a7:6e:35:14:56:b3:32:54:
6e:7e:c1:dd:92:0e:b5:ab:d5:74:67:06:83:65:29:
32:51:d0:7d:46:53:ca:16:b8:43:5a:85:1f:9e:e5:
d8:32:b7:06:15:31:dc:7a:ef:ce:7b:1d:d5:0b:f4:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:89:5C:11:B1:8D:D3:C7:8F:72:6F:57:D6:E4:FC:1E:39:9F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd1da0e7-c104-31de-9278-54b4327a6491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.242.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fe:aa:9c:5f:4d:a4:ca:7f:ad:7d:81:5e:5d:fd:a6:d0:da:
35:dd:64:0b:1d:f3:56:39:75:33:38:e3:d7:86:e2:49:ab:89:
cb:61:83:e7:e4:7a:74:de:54:5c:07:ad:63:75:58:d7:da:78:
8e:d6:fb:63:24:22:a0:51:9e:51:2d:ae:f3:80:eb:2c:6e:b1:
88:17:66:29:d4:f5:5b:ec:9d:e4:ea:5d:01:54:ff:f3:78:05:
cc:0b:ae:95:00:15:01:a0:f8:89:e1:0a:11:45:43:df:bd:99:
1e:15:fd:29:02:24:83:1b:ed:9b:dd:e2:e6:84:20:48:a4:66:
04:f7:51:ac:1d:b0:d5:0a:d8:7c:16:f6:4c:37:3f:69:ff:24:
ef:88:28:88:b6:43:1e:98:05:48:43:40:68:50:9c:7d:0e:51:
d2:fd:09:44:b6:02:73:d3:d1:20:a0:60:b4:81:1c:31:ce:d7:
d3:86:99:ea:2d:be:d5:74:a5:99:a2:cc:ce:1f:41:28:f0:c0:
88:bf:f4:7e:3b:e4:b5:13:a7:00:fe:ba:3f:63:44:93:23:52:
d5:fc:c0:8d:3f:26:39:cd:d4:76:18:52:84:87:53:a3:8e:e5:
4d:b4:c1:01:54:f8:2e:5a:cd:4a:fa:0c:f5:0f:2e:ed:cd:f5:
1d:04:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:47 2025 by rpki-client