Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa
File: 161d2218-a9be-3c8e-b719-b8cb4143902d.roa (raw, json)
Hash identifier: BZEcU3YN7sTW/WLpTzq9vMTLpi5M7bzdnLwhJzUwv+Q=
Subject key identifier: D5:06:ED:CD:1C:74:52:A4:EA:1A:DA:FC:52:B9:3D:BF:D1:1D:96:4A
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F432858488AE0A69452C9FF60E9AA93C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 237
IP address blocks: 35.38.192.0/18 maxlen: 18
35.39.0.0/19 maxlen: 19
35.39.32.0/19 maxlen: 19
35.39.64.0/19 maxlen: 19
35.39.128.0/19 maxlen: 19
35.39.160.0/19 maxlen: 19
35.39.192.0/19 maxlen: 19
35.39.224.0/19 maxlen: 19
35.40.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a6:94:52:c9:ff:60:e9:aa:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=b3ce2529-cda2-42c3-a578-ab67e18b3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:bf:93:73:5b:ae:63:f9:62:4a:33:2f:f0:
60:a7:a2:8e:48:bf:a5:a9:73:1a:c5:69:ac:35:82:
ce:0c:a3:08:a8:fc:d3:be:84:d0:bc:bf:bb:56:7f:
0d:af:f9:1b:50:ac:4c:a3:31:f7:59:04:48:c4:28:
1e:cb:e1:70:4d:42:49:ed:02:9a:97:20:42:6b:84:
1d:4c:0e:2a:a3:34:54:37:d8:8a:64:66:20:f2:bd:
55:b1:ed:c5:d8:b9:af:13:1e:70:50:ed:91:ce:f2:
8e:ce:8d:24:fb:37:94:23:72:8a:ae:37:91:82:05:
d3:ec:38:98:eb:16:02:3f:2f:28:7b:53:88:c5:52:
8d:b9:50:8b:1a:65:b1:a9:36:c1:c9:5b:90:eb:c6:
83:b0:9c:74:d8:3d:9f:29:fb:92:13:3c:d7:b4:f5:
d0:2f:2e:2c:ed:d8:ac:27:b2:ce:f9:f9:61:ab:f7:
d1:d7:15:14:49:bc:03:99:6e:b8:ad:d8:4a:5a:3c:
42:3c:8e:68:58:7a:46:d8:b4:61:13:35:0c:df:ab:
3a:ec:f6:ef:57:9a:6f:19:ed:0b:3e:1b:fa:62:4a:
87:0d:a5:20:4b:3f:78:9d:7d:fe:77:99:19:0a:84:
7a:80:6a:3a:7d:75:b8:5f:0b:3c:09:ce:59:1b:3b:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:ED:CD:1C:74:52:A4:EA:1A:DA:FC:52:B9:3D:BF:D1:1D:96:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.38.192.0-35.39.95.255
35.39.128.0-35.40.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e9:d7:05:6c:1c:29:51:0c:ce:02:f9:50:31:99:07:a1:b8:
60:17:2c:83:78:a6:35:40:55:c5:49:06:b6:47:6c:27:b6:e6:
32:db:1a:4a:c6:3f:7b:d7:66:06:52:1b:5a:1c:33:78:55:f0:
1c:48:52:ab:f2:14:78:d0:da:73:aa:f9:d2:e4:d2:50:df:70:
81:03:51:64:7f:5c:26:67:ff:07:0a:a0:69:d0:f1:17:1a:9b:
4a:e0:4e:fb:a6:7b:eb:b4:cc:ab:23:2b:27:b1:e1:05:e1:89:
a7:71:b9:25:9e:9a:0b:db:fd:bd:ea:7a:e3:6e:f2:8b:6d:ee:
e4:47:e9:c0:e5:c4:ac:0e:90:2c:56:3c:e3:27:00:8e:4b:54:
aa:e9:2b:7c:04:a6:f0:a4:52:1e:30:ff:14:ce:f0:40:60:ab:
ef:37:ad:4c:1c:d8:0a:80:d0:7e:d6:90:3c:16:9a:03:eb:29:
37:ac:22:62:f6:2b:28:b1:3f:f5:36:3a:01:e2:e7:fb:60:f3:
ef:ca:bb:08:5d:bf:0f:57:58:37:f3:56:57:4f:db:0a:89:e0:
37:95:14:0c:92:34:55:76:59:19:fa:83:dc:38:38:de:ce:12:
f7:66:27:56:1b:a1:de:70:7b:71:32:a7:d3:aa:02:4e:6e:0d:
2b:f6:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:09 2025 by rpki-client