Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/12bd37f1-3f31-34aa-bfc6-f0ed59072b28.roa
File: 12bd37f1-3f31-34aa-bfc6-f0ed59072b28.roa (raw, json)
Hash identifier: jsfNAsSNpXthb2L5aE7QgLhVti/PfNEaRoOr5e/kQhU=
Subject key identifier: B9:3C:E3:3A:3C:7C:0E:35:2C:26:BB:23:14:11:1A:16:F9:42:51:2E
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F4328584894A5EC0DD905E7C172260F20
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/12bd37f1-3f31-34aa-bfc6-f0ed59072b28.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 237
IP address blocks: 35.50.0.0/17 maxlen: 17
35.50.0.0/18 maxlen: 18
35.50.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ec:0d:d9:05:e7:c1:72:26:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=470a75f5-3b79-44eb-9bf3-81d7e6bb3fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:c9:53:5b:8c:43:34:39:7e:8d:50:84:3b:
f3:0b:de:b4:a3:8e:5c:0b:72:0f:5b:cd:07:b0:f9:
f7:d5:19:68:77:7a:53:8b:26:df:15:f7:dc:00:e9:
f6:4e:6d:bf:3f:7a:18:49:b3:9b:12:4a:12:3a:f8:
c4:c5:43:3a:3f:d8:18:6a:fb:a0:03:94:52:ed:6e:
5b:7e:3c:34:51:3f:05:24:55:c4:00:49:8f:9c:e8:
70:67:a1:be:ef:4b:a8:cb:0d:90:a7:f3:61:e0:b9:
0a:ed:13:f7:4d:1c:6e:aa:78:dd:05:fc:cc:6d:4a:
aa:99:ef:2e:b5:d0:50:d6:4c:e3:18:1c:35:16:f9:
d1:95:52:bf:14:7d:ea:41:02:a1:2f:02:d5:1d:12:
8b:e1:80:87:d5:21:0d:3a:88:08:47:7c:34:f2:61:
7c:3c:d6:aa:ad:c5:61:f7:ef:4b:1d:ae:28:d3:8d:
b2:00:43:04:ba:7c:90:b2:6b:8b:4e:c3:71:de:92:
7e:1d:aa:62:4d:b2:b3:05:4b:47:5d:3a:c8:7e:8e:
8c:09:03:e8:b0:b2:c0:b0:8b:9d:f5:dd:61:eb:26:
4a:75:f5:55:32:61:ec:f8:66:cb:c0:6b:a5:2b:3a:
cf:d3:af:54:ab:25:1d:7f:20:28:29:2a:bc:7e:d5:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:E3:3A:3C:7C:0E:35:2C:26:BB:23:14:11:1A:16:F9:42:51:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/12bd37f1-3f31-34aa-bfc6-f0ed59072b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.50.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:7a:c2:c5:42:3e:77:67:e5:8e:b6:41:ea:98:b8:51:41:20:
1c:ff:dd:87:77:f8:28:26:53:06:db:41:6e:4f:03:5a:d1:e8:
a6:01:cd:96:c6:15:ed:b3:38:e1:a2:09:18:c1:7d:d8:b3:00:
dd:08:0d:5c:ed:98:2d:05:d2:b9:27:3e:25:6e:9c:69:64:85:
ff:94:3a:0d:1d:01:43:91:64:dc:8d:c7:f1:69:61:98:59:73:
c5:20:66:0c:61:a0:27:8c:14:32:d8:9b:2a:13:6d:18:8a:85:
22:f1:68:16:5d:55:5f:0a:27:8b:9c:29:c0:20:d2:29:8b:cc:
32:dc:3b:5d:18:fe:e6:84:92:f6:44:e6:10:5e:33:51:0a:67:
94:24:dc:ca:a1:cc:80:bb:27:39:3c:a9:f9:2f:db:f5:a1:b8:
15:db:38:64:c8:6e:90:2d:f6:cc:9b:52:43:5c:2d:0d:d2:eb:
cd:ce:3f:72:0b:6e:a7:4f:db:51:68:66:45:46:a6:ec:71:84:
25:36:cf:59:90:42:85:21:96:a3:3c:f8:54:c9:7f:42:94:f7:
48:25:b7:cb:07:42:2e:cf:33:50:2e:4d:2d:eb:1f:64:e6:1c:
2d:aa:d9:44:41:b8:d5:d0:bf:c6:10:59:f3:a4:91:e5:f9:7f:
77:f6:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:28 2025 by rpki-client