Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/639aa138-d3fb-329a-a68a-854f3ecd62e0.roa
File: 639aa138-d3fb-329a-a68a-854f3ecd62e0.roa (raw, json)
Hash identifier: YDweh+WWX6ns9jvhbQXQYjuNz2Ni0gZyzs0NYNy8kQo=
Subject key identifier: 42:4D:95:D0:57:0F:DE:7A:FA:00:2C:92:38:CE:44:A9:7F:DB:B4:E0
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D16C6E6A2E49EB655AB200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/639aa138-d3fb-329a-a68a-854f3ecd62e0.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 35.135.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:6c:6e:6a:2e:49:eb:65:5a:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=775615f8-4f64-458d-9868-de3ecef97acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:a0:76:42:8e:75:71:60:ee:53:ea:71:be:
32:39:bc:9a:ed:07:6b:50:8c:13:39:98:f3:52:39:
81:a0:b9:b6:2d:d3:c4:33:a0:c5:1a:5e:13:e3:4a:
21:fa:c3:0d:b9:32:f4:f9:59:b6:06:e6:ed:99:87:
a4:1b:b7:e1:af:79:49:5f:d7:5a:50:f3:38:0e:56:
b5:57:90:7e:42:3e:7a:ae:9a:a2:26:21:32:16:98:
93:6c:27:d9:5a:44:c2:f7:6b:07:e4:5f:95:e8:03:
79:b8:fb:94:f4:0e:71:d7:8b:1d:cf:f2:64:da:4a:
49:cc:f3:bf:70:87:1c:48:48:6f:1d:1f:ac:16:14:
a4:e5:b9:1e:99:08:41:a5:42:eb:b8:2c:35:a3:3f:
07:19:1e:cf:34:c7:9b:41:3e:52:cb:8e:e8:23:7b:
39:2c:c7:cb:5c:af:83:90:0f:4d:ac:73:a3:05:a1:
69:95:bd:8b:37:09:f4:eb:7f:f2:f8:6a:54:04:9d:
0c:f1:4a:b3:9d:e1:28:ee:38:16:1d:fd:d6:b6:c1:
8a:70:81:a9:a7:07:cb:bd:bb:02:bc:20:f5:f2:22:
02:0d:7f:c5:c0:a1:e9:bb:ac:27:30:a7:51:7c:1b:
ee:c0:dd:61:03:aa:bc:84:8a:a8:89:9a:c5:90:1c:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:95:D0:57:0F:DE:7A:FA:00:2C:92:38:CE:44:A9:7F:DB:B4:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/639aa138-d3fb-329a-a68a-854f3ecd62e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
35.135.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:84:47:ea:2c:22:0c:16:18:46:4b:98:78:81:2b:dd:9b:8a:
69:3f:df:58:48:bc:ff:ae:64:0c:10:f3:86:92:27:62:a4:d0:
42:98:2c:cc:37:74:7f:78:08:89:9a:22:af:92:9a:eb:c4:a3:
48:56:bb:89:de:8b:25:4a:77:63:2d:8a:6c:c1:c4:16:85:91:
0e:ac:1e:98:07:0c:84:b7:eb:a0:e9:cd:f9:53:22:dc:44:f6:
79:61:07:bf:47:66:f9:d1:68:f5:b9:fe:64:1c:ca:c9:83:e4:
aa:be:4c:96:cd:48:ab:47:63:d9:f2:95:6f:ba:f3:78:57:c7:
46:ec:5d:67:8c:e5:25:91:64:5a:e9:98:09:04:c9:5a:20:6c:
87:5d:72:8a:4a:00:9c:be:e6:b1:cc:a9:56:82:ec:07:3b:ef:
1a:48:b0:58:93:0b:65:bd:75:54:f9:35:9a:16:1f:63:39:58:
a1:02:93:1a:05:30:50:c8:d1:56:a0:21:52:0b:07:96:b2:6b:
9a:43:4b:84:fd:47:d2:a4:6a:96:f4:26:f2:f4:11:ec:e2:65:
a2:19:21:bb:d6:f1:e8:ad:a8:ec:2d:c7:72:59:4a:1d:d7:22:
28:5a:ef:b1:a0:6a:5a:c0:1f:f7:53:be:a0:84:27:f6:3f:66:
c7:78:9e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:05 2025 by rpki-client