Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa
File: 20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa (raw, json)
Hash identifier: sSB7XiFnK91aoDfu+L6dYGKI0/QpI6QeTGIfVDoMxUU=
Subject key identifier: 03:71:61:8C:6F:59:13:35:95:6C:B3:5A:D9:DD:D7:1E:26:5D:0E:D5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BEBB97669F2747BDAAD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.235.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:eb:b9:76:69:f2:74:7b:da:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=e99adc64-7ab3-425a-80d1-4e9377c87cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:90:64:72:18:be:b2:21:7b:42:d3:69:74:
27:aa:c5:f5:70:6b:75:ac:34:3f:34:81:44:b3:6d:
f7:ec:17:df:19:cf:b7:f2:29:23:b5:9b:52:66:c6:
c3:8a:a4:71:c2:e2:03:a3:30:3b:57:14:ee:89:39:
7b:46:77:59:2d:20:da:9b:79:ab:2e:01:cb:98:5c:
cb:d2:7d:2e:16:fe:83:5c:2b:e4:ed:28:18:88:00:
f9:79:f4:be:3c:87:a0:32:90:e1:a5:4e:79:9a:23:
18:aa:7c:be:3f:06:82:85:bf:94:5c:25:d7:eb:28:
77:c8:19:3d:1b:45:62:7f:6c:92:ec:af:fb:ff:01:
1b:6d:03:78:ea:05:dd:45:fe:85:26:4a:97:3b:69:
8c:39:e5:ac:08:42:36:da:67:0d:4b:78:7a:c9:5a:
72:3b:f9:8d:a8:e1:25:2d:a3:73:5f:03:5a:fa:6a:
ca:3b:64:e1:5e:83:db:c1:2c:5c:63:fe:20:ce:f7:
63:26:08:3e:cd:e9:25:e6:a7:e9:d9:95:5e:b1:3b:
4d:dc:e9:7a:d5:62:f4:0d:81:4e:bc:c8:0c:e6:37:
fa:2d:b8:25:37:6a:16:9a:fe:ab:c2:43:b3:84:8a:
6e:01:e8:73:5a:00:dd:b9:9a:76:1c:56:a3:9e:95:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:61:8C:6F:59:13:35:95:6C:B3:5A:D9:DD:D7:1E:26:5D:0E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.235.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b6:25:ee:7f:8e:33:69:a2:d1:80:55:92:ee:42:33:a5:28:
14:54:2f:e5:f8:44:ae:8e:59:43:9e:fe:72:76:61:67:d2:46:
f0:81:5a:aa:ca:e6:47:85:2c:0f:75:1e:d8:ca:91:cb:72:0e:
24:ec:e1:a5:3a:37:21:6f:b9:27:6e:77:a8:8c:60:18:97:a0:
02:66:d6:8d:6d:1e:5a:f4:58:32:01:32:ae:08:d0:1b:60:25:
d9:97:b1:50:69:70:af:bb:c1:54:6c:f8:f8:b8:81:07:5f:6b:
01:ee:d3:c0:cf:8c:4a:cd:97:6a:c8:90:06:3f:c2:c6:a7:88:
1f:13:8c:bd:8f:8a:2a:5e:f1:8f:8c:73:01:a2:41:ec:e5:a3:
d6:40:f0:b5:47:5e:50:5d:f1:78:18:db:9b:9d:a5:18:df:aa:
ea:d0:18:03:b0:2d:b1:31:5f:cb:92:8c:c6:78:70:51:8c:0c:
4f:04:6b:31:42:3a:b3:d0:db:ac:ea:da:5b:d3:be:eb:2b:5f:
89:09:19:f4:c9:a3:d8:9b:77:fc:ac:ff:ae:36:4e:90:93:eb:
15:36:c9:c4:1f:0e:f4:38:f2:f1:ed:7b:bc:00:f3:08:2a:53:
6d:db:d3:fd:0b:d0:e9:45:d4:f7:ff:cb:a4:3c:77:c0:50:be:
73:ae:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:12 2025 by rpki-client