Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/35b36db1-db1f-376c-ae0e-79fafd55c056.roa
File: 35b36db1-db1f-376c-ae0e-79fafd55c056.roa (raw, json)
Hash identifier: sIadyF/P6Nr7l0qzpenD9G/KLg0nE2nFRytZUK7lnWs=
Subject key identifier: B4:14:09:14:B5:8D:87:93:5B:C0:98:91:73:34:3D:F8:E9:20:BC:EF
Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial: 010D0C9F43285848100A8B743097C23DE0342504
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/35b36db1-db1f-376c-ae0e-79fafd55c056.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 134.195.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8b:74:30:97:c2:3d:e0:34:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=70834f13-435f-442a-b3be-e13bff9a2976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:d2:23:63:1e:88:62:a1:4b:56:b2:56:71:
a6:b6:8a:00:9b:1b:0d:af:85:9f:df:5b:b5:b2:d9:
35:b1:a0:b3:e0:ae:98:3d:a9:ad:e0:aa:2d:41:e2:
56:f5:e5:d0:5b:df:c9:18:f2:e5:34:c7:39:c3:0e:
3c:a7:d7:2a:c2:04:84:d8:00:71:54:61:e2:a0:b3:
a5:8f:15:93:9c:40:68:6f:61:42:b9:92:1e:1e:c3:
a8:4a:52:64:3b:90:a1:19:72:23:93:d3:02:18:fd:
39:52:00:33:2f:af:82:8d:fa:8a:10:b2:d3:f9:1e:
14:33:99:dc:b4:ef:9f:96:36:32:d8:b1:81:1c:10:
6f:ca:cd:99:bf:15:49:09:1f:4a:37:18:e9:b5:48:
d2:b8:28:5f:a8:e9:62:7c:16:e1:fa:a6:2f:d9:53:
a7:ac:07:ae:d4:0d:57:09:2f:8b:da:01:92:58:62:
b0:bb:3b:f2:ed:41:66:69:b4:22:7d:38:68:ab:fc:
4e:3e:c1:06:29:f2:0d:5f:44:1c:53:dc:65:01:66:
84:5c:01:34:72:58:f7:1d:a7:7d:d9:5f:ca:db:a3:
e6:d8:a8:0e:46:e9:2c:ea:fd:92:79:01:05:c3:56:
83:e2:61:0d:5e:dc:02:c4:1b:a3:45:2d:6d:b6:b9:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:09:14:B5:8D:87:93:5B:C0:98:91:73:34:3D:F8:E9:20:BC:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/35b36db1-db1f-376c-ae0e-79fafd55c056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
X509v3 Authority Key Identifier:
keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:21:ec:9a:df:e7:16:3f:85:70:47:0a:00:d2:05:ee:6c:a5:
0d:a2:d3:cf:b4:6d:3b:e2:cb:85:8d:59:d2:f7:b6:a6:53:62:
a8:53:4c:56:e0:cf:05:11:7a:2b:90:db:4b:be:d2:cf:bd:e8:
0e:27:38:87:0b:ef:36:ff:d4:35:ee:c1:45:9d:86:2d:85:81:
9a:f0:e1:a8:07:4b:40:2b:70:1b:86:6d:c8:4e:05:c5:dc:65:
56:75:b1:cb:8b:00:21:c2:c4:2a:fd:f6:e4:c9:03:96:f9:92:
a3:9d:9f:c5:8b:4b:d3:8f:6f:5b:a0:af:f9:7c:48:3d:01:2a:
6c:82:9e:7d:d8:84:89:55:11:6f:76:22:88:d6:29:df:d4:80:
d9:76:ab:40:8a:94:b1:79:71:89:c9:1e:d6:78:86:4b:95:08:
9b:25:83:f0:f2:35:b4:45:fe:ba:ab:ba:46:92:2e:4b:ac:13:
ea:3d:7a:41:99:98:d4:05:e8:18:74:20:4e:be:e1:b9:94:96:
82:e4:e3:29:e1:95:ad:74:98:92:76:dd:37:cd:65:b2:f7:91:
95:2f:87:e9:d1:fd:6d:c6:cb:f6:1d:62:13:b9:eb:3f:6d:82:
58:28:53:76:c3:e8:7a:d2:71:7f:b3:44:47:7e:ac:fc:b7:5c:
f0:b7:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:27 2025 by rpki-client