Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
File: bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json)
Hash identifier: eRurbgqbtDB+wzKe+lxULDdBjiDeyUkkR1BMVQYaM7c=
Subject key identifier: 0B:6F:A6:F2:87:ED:D2:3A:52:89:2C:D7:70:35:02:A7:C3:9B:79:C8
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F4328584894A5EC570B2D45B2D4755600
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 237
IP address blocks: 35.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ec:57:0b:2d:45:b2:d4:75:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=530ac239-043f-49b1-91e0-a011ddeb6b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:9a:0c:17:63:40:f1:ef:48:02:f0:6a:71:
7a:a0:c1:00:0e:cf:d1:70:45:36:49:03:e6:1a:7d:
08:66:8f:92:5f:e9:87:17:bf:48:b7:4e:0d:4d:4e:
08:9a:56:03:7e:8a:81:c3:da:cb:fa:58:30:3a:cf:
7a:d2:cb:12:07:47:88:83:ce:6c:68:8a:0c:78:b7:
dd:89:72:5a:f9:66:98:28:18:28:a8:40:9b:ec:c4:
9e:c9:3f:0d:48:3f:75:78:83:11:e9:55:3e:79:db:
03:a8:f9:c5:d7:7c:4f:e8:98:86:b3:41:23:61:ca:
3e:a4:4f:b7:b7:ee:70:39:e8:30:f5:cf:8a:a9:d0:
9e:9a:5d:77:a8:87:4b:59:c2:f4:47:49:0a:c9:eb:
b1:c7:31:bc:84:07:df:6f:fc:09:d2:d4:2b:37:1e:
3a:6c:18:b5:77:a1:23:85:ac:ea:9c:ea:94:94:68:
aa:79:c5:47:89:2b:4e:7c:f3:fb:1e:87:27:ef:86:
d8:35:05:dc:10:c0:9d:7a:2f:4f:08:64:b3:64:53:
1f:e0:83:8b:45:0f:54:72:41:cb:18:b6:37:1a:96:
83:f3:18:64:b6:6e:b2:74:ae:d6:d7:ef:6c:f2:80:
f2:e7:01:6f:5b:87:f4:e3:25:29:c5:2a:20:2f:3c:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:A6:F2:87:ED:D2:3A:52:89:2C:D7:70:35:02:A7:C3:9B:79:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:48:bc:e5:ee:ae:83:ea:5d:12:77:93:4e:1f:4f:1b:63:d0:
b1:80:aa:df:ca:35:a3:13:9a:c9:71:fb:61:ff:f4:bc:7e:c1:
40:8e:3c:26:be:54:3d:45:71:23:95:70:91:90:b9:6f:f4:71:
21:57:69:f9:f0:dd:9b:88:e8:42:c8:9e:fd:48:c5:d4:95:cc:
69:ed:74:f2:c2:6d:60:7b:d0:99:3b:d4:56:f7:b1:21:a3:ba:
35:0d:77:82:1a:f6:a4:19:54:2f:e7:1f:8e:12:28:48:d3:54:
e1:55:0a:10:10:cd:fb:56:c8:c2:cd:49:01:d9:b0:89:d0:93:
71:8f:a2:86:c4:50:0c:b2:6e:1d:05:e6:a7:00:29:01:70:9d:
2e:a3:5d:72:bf:f5:f4:2f:e4:17:95:b9:22:3a:85:55:2f:24:
65:41:f7:ad:15:c1:6c:1e:a8:02:23:30:4b:ee:78:a8:ae:d3:
e8:df:6a:dc:90:e5:fd:11:0b:b1:fd:c4:6f:23:47:4b:8e:4a:
12:c2:42:69:99:c3:7b:51:e9:1c:fb:ec:24:58:d3:60:89:d2:
f5:19:33:74:14:c3:e1:d8:aa:11:c3:ff:c2:6e:da:7f:04:84:
f7:27:e5:e9:86:3c:f4:11:d0:07:41:d4:ee:12:7d:56:9b:b4:
9f:18:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:37 2025 by rpki-client