Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffa9f9b7-3aca-349a-9364-f01b86c90070.roa
File: ffa9f9b7-3aca-349a-9364-f01b86c90070.roa (raw, json)
Hash identifier: ClT19iASDh4Sb4lYhb4ER4P1sWjQSl4QGFsWXD5Qp9I=
Subject key identifier: 9B:F1:F8:93:7B:85:3B:75:52:26:69:CD:1F:E0:12:4B:2D:E5:BF:E1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F53E75B90A3D24E6054280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffa9f9b7-3aca-349a-9364-f01b86c90070.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.244.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:3e:75:b9:0a:3d:24:e6:05:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=0642b6a3-eb34-476c-a20e-bcb6840009c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:6a:39:2b:a9:42:bd:19:b9:f4:db:ab:26:
1f:81:74:6b:f5:16:10:5c:19:3c:03:47:cc:b8:86:
a8:27:54:35:b3:4b:35:46:6e:c4:bf:7f:c9:a6:63:
40:8b:95:49:47:0c:30:c4:e4:37:78:a1:14:84:3d:
58:c5:2e:fa:3e:00:83:67:bd:44:83:a5:22:22:18:
68:f1:55:65:84:1f:d6:5c:87:70:a9:7a:fe:58:dd:
4a:1c:0d:9a:ad:52:1e:9e:0c:bc:3d:ae:47:53:d2:
31:07:32:2c:e0:2e:31:b1:60:d4:89:d2:38:75:77:
e7:6c:06:b6:21:4e:01:4f:ec:21:b4:fd:b2:06:e0:
18:8e:ad:fa:2f:b9:7e:d4:08:c4:cd:3d:31:c6:ae:
4c:df:50:82:b3:3e:41:76:bd:04:a6:9d:de:ee:cc:
52:cd:ca:c2:98:db:bf:8c:08:fb:4f:d5:a7:b9:07:
8c:c5:5e:92:d7:bb:6e:59:8c:ce:7b:89:1f:06:a7:
f2:14:a5:f2:27:9f:e2:72:d8:71:57:1f:67:41:ac:
8a:93:72:34:06:26:03:da:80:53:8d:d5:c1:c3:42:
08:be:cb:23:e4:72:66:9f:fe:0d:ad:7e:79:c6:00:
9f:2d:2b:f5:b8:ff:e2:1b:f9:2f:4a:83:67:7c:d3:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:F8:93:7B:85:3B:75:52:26:69:CD:1F:E0:12:4B:2D:E5:BF:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffa9f9b7-3aca-349a-9364-f01b86c90070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.244.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fa:c3:11:6e:40:7b:ef:fb:5c:bc:2b:59:b4:d9:36:32:42:
24:5f:31:7c:00:e6:4f:20:49:41:86:e3:8f:18:1b:44:90:df:
87:89:23:af:7e:00:5d:00:30:74:5b:9f:38:50:d3:c1:ff:b9:
20:5d:b8:de:6f:d6:c8:74:e8:c9:df:c4:49:04:fe:47:bd:20:
db:e1:dc:a8:b0:5f:e7:68:8d:27:e8:56:8b:78:49:bc:3b:1b:
45:a2:15:8a:42:1e:8d:07:d3:9e:e1:e4:5f:39:6c:2e:ec:f6:
b4:5e:a9:9c:86:6b:70:f4:07:e5:45:01:2a:f4:4c:35:89:ad:
84:24:0c:f7:08:11:cb:83:74:68:3e:2d:43:6a:b1:1b:ef:00:
4f:60:29:d1:3a:11:c1:91:d6:1e:44:65:c2:c2:63:05:a0:48:
a9:79:b6:89:2a:60:1f:85:df:41:83:1c:6b:db:37:bf:e7:f6:
c7:27:93:b2:a1:7c:b4:8d:52:2d:91:84:e6:0a:04:10:21:27:
cc:96:74:7a:cd:98:5a:da:0f:59:bb:b5:d9:11:c9:c3:ff:44:
32:d2:e6:60:27:4e:c5:e4:c1:02:da:0d:09:a6:b3:1b:2e:b5:
77:c3:9f:4c:c3:fa:c9:79:19:2c:ec:3c:2e:f7:ca:a0:c3:fd:
9f:a1:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:53 2025 by rpki-client