Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dfa0538-6b93-35b6-890a-baf2a8a2591f.roa
File: 0dfa0538-6b93-35b6-890a-baf2a8a2591f.roa (raw, json)
Hash identifier: 83hqBDO+9Mrj4sRbX+L2bjQUZ8gZpX37rNw6kpBN/Vs=
Subject key identifier: 7B:F5:8E:FA:C7:14:76:AE:EA:D7:BC:EC:27:92:8B:B8:C7:71:CA:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C049419B413BA74E4C200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dfa0538-6b93-35b6-890a-baf2a8a2591f.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.184.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:04:94:19:b4:13:ba:74:e4:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=1f76669b-ce18-4e08-ab1e-d7cca51e6ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:6f:65:30:9d:5a:d9:22:66:72:6a:39:31:
7d:2e:62:4c:d5:f5:d6:6b:71:45:03:b6:4d:92:b5:
83:d7:6a:ed:96:12:b9:8c:6e:02:3e:83:57:a2:1b:
8e:d6:4a:e4:5b:73:7e:01:0c:36:54:67:4e:76:83:
c0:68:27:af:7f:fa:10:73:9d:33:5a:a3:01:d9:90:
58:80:72:c9:4e:e5:ef:44:85:33:5e:42:09:a9:8f:
66:a1:69:46:bf:d6:6f:44:9b:73:d2:7c:3e:76:d9:
58:36:24:10:f1:dc:3e:aa:df:ff:a0:f4:be:b5:7e:
4e:77:4e:10:22:bb:86:a9:35:a8:f5:32:a6:67:9f:
00:1e:3a:3f:25:1e:4c:46:0f:42:e7:20:e1:e9:59:
32:9c:5e:1e:ee:45:7c:4b:68:83:f7:ce:fd:4a:a0:
36:28:9c:6c:a4:c9:ab:61:e5:21:22:25:c2:6c:fc:
cc:69:b6:cd:67:b4:3c:cd:96:99:19:ff:68:d5:7d:
61:74:7c:58:97:16:17:1e:73:a4:ee:eb:82:2d:1e:
74:86:9e:64:6c:3e:69:41:78:b8:8b:01:71:34:c4:
90:81:09:50:b4:56:26:c7:0b:82:01:68:a2:b2:72:
c1:23:5b:a9:1b:6c:b4:7a:24:b3:b6:2f:53:30:e0:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:8E:FA:C7:14:76:AE:EA:D7:BC:EC:27:92:8B:B8:C7:71:CA:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dfa0538-6b93-35b6-890a-baf2a8a2591f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.184.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:46:b7:0d:99:5e:c4:fe:38:db:4a:6f:fa:20:24:46:13:c6:
66:5d:70:b7:36:35:e3:29:0b:18:e3:d7:69:9b:db:d7:d7:b9:
e9:3e:ff:23:6a:63:54:54:f7:52:18:03:57:5b:ff:46:76:9c:
b5:da:81:f4:6e:e3:f7:9d:43:fb:d6:52:13:e8:f6:08:c3:77:
eb:f6:a5:97:3a:8e:2c:c3:84:79:62:10:15:e4:d6:87:94:2b:
b6:bd:bc:87:8f:b4:5b:c8:90:06:cd:a7:01:43:33:ce:23:66:
d9:c7:0e:a3:3b:95:12:40:03:30:28:db:c6:4a:6a:a8:d8:3b:
78:73:61:82:5f:44:de:27:97:c7:ec:a3:49:1e:b2:45:f3:7c:
8a:b3:25:65:4e:40:9a:84:d4:6c:8e:ed:62:d9:80:cf:4a:28:
73:0f:6a:e9:a8:7d:ff:b5:d4:8d:12:e0:9f:92:69:bd:0a:b0:
3e:b0:36:5b:26:8c:88:a8:45:05:47:e7:73:08:72:bb:c3:93:
ec:be:55:64:fc:80:a2:13:8d:08:56:22:b8:c1:e2:7f:aa:dd:
15:3e:7e:44:b8:7d:f0:c0:e9:51:6b:f2:25:ff:50:25:70:df:
a8:d4:ab:22:f6:6f:38:8a:59:67:dc:19:23:f3:a6:27:6d:39:
09:b1:c8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:36 2025 by rpki-client