Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/239789cd-3b47-3791-a91d-be647bab47e7.roa
File: 239789cd-3b47-3791-a91d-be647bab47e7.roa (raw, json)
Hash identifier: yBlZb/sbMOnKbOEnWfbWQgWn7Qa/hABwYsA6wQ+6p5o=
Subject key identifier: 37:81:34:76:84:F7:B5:45:1F:50:0F:F6:EA:4C:90:C3:C0:7A:0E:02
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1E5B034B4F31397B43700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/239789cd-3b47-3791-a91d-be647bab47e7.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 35.133.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:e5:b0:34:b4:f3:13:97:b4:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=2a0739fb-b45e-45d5-8c47-850ba588235d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:64:5b:3e:f1:9e:1c:90:c6:77:a6:b4:49:
35:64:4f:92:af:7d:fd:d6:95:c9:1e:03:12:09:c7:
b5:d2:4a:5c:89:d0:58:c9:23:6a:be:f3:dd:5a:fe:
eb:68:61:0e:2d:0e:07:02:58:51:54:b8:e2:24:43:
db:cc:19:8b:30:84:3c:ef:05:2a:b9:a1:66:2c:9e:
ac:ec:56:08:ec:19:84:fe:21:69:42:34:26:38:ad:
69:7d:d4:39:a6:bf:1d:e5:3b:cd:2a:c9:36:db:8c:
a9:36:b6:13:2f:24:31:9a:a1:e6:f3:cd:8d:82:b8:
ad:c7:07:4a:82:17:0b:57:74:64:d0:7d:be:0c:dc:
e4:6d:5c:8e:63:42:a2:d5:3d:02:e7:c3:69:c0:cd:
af:56:de:ed:c2:bd:fa:bb:c5:57:99:a7:e6:77:74:
a5:fa:39:28:be:c4:26:7a:6c:0f:6f:4f:14:90:d4:
c0:07:04:29:ff:7a:22:69:ae:bc:b8:8e:1c:94:ff:
be:04:05:ed:eb:c3:89:f7:7c:1d:67:c6:e0:5a:45:
5b:f1:a5:50:86:ee:28:00:34:36:19:5d:e2:be:53:
04:f8:ad:e0:a9:2e:66:79:d1:7d:a6:db:ad:8e:17:
fd:3b:ca:30:14:76:df:4e:7b:ba:10:c5:36:12:9c:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:34:76:84:F7:B5:45:1F:50:0F:F6:EA:4C:90:C3:C0:7A:0E:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/239789cd-3b47-3791-a91d-be647bab47e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
35.133.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:20:ae:89:aa:5d:ff:8c:cf:04:73:7f:c1:90:90:17:e8:2b:
fc:46:c5:be:97:57:c2:fc:ed:2d:61:8b:89:04:0f:0c:74:19:
a1:77:d3:df:23:5d:c4:bd:d0:40:ab:7f:95:77:3b:6a:f6:49:
dd:e6:d1:2a:c0:c6:eb:77:9c:cb:66:07:26:17:24:44:6c:d3:
45:86:c9:79:93:47:9b:51:ad:c0:1f:50:42:bb:7a:28:01:aa:
f1:54:9b:67:7d:93:88:74:2c:32:a1:01:49:f2:86:b8:9c:e5:
b8:f5:55:c7:68:b0:36:71:92:37:48:95:6b:54:48:6d:ac:b0:
de:d2:4f:f0:48:2a:ec:7b:79:4f:60:5c:b8:2e:61:a8:55:a8:
70:43:b7:d3:c8:71:91:f3:f9:c4:f9:23:f2:19:be:a8:6b:c8:
0e:cd:2b:83:73:14:17:d4:1f:eb:4b:fc:07:1c:03:46:6c:42:
69:a0:63:e4:24:b1:61:d5:96:1c:d7:7a:52:0f:49:1e:c5:b1:
ee:a3:86:a9:94:36:40:75:96:57:7b:52:75:c8:75:5c:af:2c:
bb:68:0c:df:fe:cd:de:c9:ce:a1:25:db:8e:8e:2c:26:47:fb:
c0:ab:ae:f5:e3:37:36:5d:aa:8e:10:68:ed:0d:65:48:df:a5:
c2:b7:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:36 2025 by rpki-client