Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02b4d207-4778-39b9-94b9-997e6c70bdf2.roa
File: 02b4d207-4778-39b9-94b9-997e6c70bdf2.roa (raw, json)
Hash identifier: 1CCseI1dm+Ycbf/aWByrwskCaWPUFs3U2lE2PVICfEc=
Subject key identifier: CE:22:00:8E:2C:AF:BB:92:47:B9:9F:32:56:D8:EB:11:E6:51:51:91
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC150D08CECD16E86FE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02b4d207-4778-39b9-94b9-997e6c70bdf2.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.233.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c1:50:d0:8c:ec:d1:6e:86:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=2bbd9f1b-0203-44d9-897c-d0f1c565e863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:85:06:d4:1e:50:5b:5a:85:cd:bc:4b:fe:
36:d2:23:d8:2b:b1:61:82:2f:c5:39:93:9d:3d:91:
5d:25:02:34:19:0b:1c:4d:b1:89:34:93:33:1e:1b:
c3:d1:f5:a2:82:b0:90:d7:31:46:63:23:89:9f:63:
39:ca:c1:73:a4:e2:13:9c:1c:0c:4a:d7:4a:48:9e:
04:ab:a1:17:93:f7:65:65:d5:5b:98:82:df:7a:5c:
b7:01:c8:2f:a9:2d:e8:c3:0a:30:85:d6:b7:57:bb:
00:4e:43:0e:eb:28:6e:3e:19:ed:73:d6:1b:19:bf:
31:ba:df:d4:b6:6d:cb:d8:c1:fc:98:8b:e4:c4:f6:
34:a2:72:19:56:62:24:d3:d5:30:f5:b8:c4:32:d0:
ee:5f:80:30:65:55:db:2e:55:ef:b7:b3:13:b1:49:
aa:b7:36:94:8a:cd:23:0a:91:62:e6:aa:cd:4a:be:
24:15:5d:0d:96:df:ea:c5:e0:2f:ba:18:11:91:1f:
e4:7f:a3:53:c9:5d:5d:1a:c0:34:aa:a0:e0:07:ea:
98:38:4b:51:80:be:95:81:2b:61:f2:e2:f0:63:8c:
31:40:83:f4:d9:ef:e0:19:2a:90:8a:f3:62:3c:05:
fb:9b:fe:84:e0:ec:32:63:67:5b:4c:64:67:9f:0a:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:00:8E:2C:AF:BB:92:47:B9:9F:32:56:D8:EB:11:E6:51:51:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/02b4d207-4778-39b9-94b9-997e6c70bdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.233.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:97:a5:5b:9f:d1:31:92:00:80:5a:da:53:4a:af:71:36:be:
6a:df:3c:fb:cd:34:b3:ca:ef:02:6e:76:0f:fa:52:cd:cc:41:
66:b0:d1:3f:ed:ad:54:49:c9:f3:6b:50:36:68:cc:9c:0d:8f:
d3:ad:60:57:db:3f:fe:0c:47:ec:96:10:55:af:7c:d1:1d:41:
53:80:d5:a6:00:3f:0b:f9:95:c1:9b:ef:da:bc:30:f2:e3:20:
d8:4d:df:a8:74:a7:08:3a:ec:54:fd:00:98:08:45:79:e6:9e:
35:92:8e:52:a1:f5:2f:ac:cd:61:2e:4b:fe:bc:77:84:c8:ab:
ff:b9:d6:75:c2:bd:c2:63:ac:7b:d7:a9:f7:a1:7f:d0:e0:74:
9e:c3:b7:87:45:2e:c4:8e:5f:49:67:a1:1f:f4:8f:19:0d:bd:
22:d7:5e:13:ef:86:0b:b8:bd:8c:76:d0:0f:e5:47:9b:e3:6f:
12:00:36:ed:18:26:af:20:f5:99:90:ab:52:1c:fd:8f:b8:25:
dc:32:ca:bc:0f:17:9a:fc:9b:6f:82:f6:9d:b7:a2:83:1a:3f:
5f:27:c9:20:12:23:09:fa:da:64:70:ae:bb:14:e3:67:1d:17:
e2:46:e2:30:3f:35:a5:af:6a:25:71:77:83:88:26:e7:f0:74:
b6:12:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:50 2025 by rpki-client