Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa
File: 250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa (raw, json)
Hash identifier: uSTHeLHGK21kO1mhryZqL9yuWGfTVMuqw7gi1cMXgz8=
Subject key identifier: 81:DB:2D:03:9B:69:C7:F1:88:31:34:C5:F9:DA:CA:26:F9:73:1F:A1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C1977EF70F9A2574EB740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.205.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:19:77:ef:70:f9:a2:57:4e:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=64e91a86-5c67-4595-bff0-a10cbb39cae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:2d:1b:fa:6e:4c:56:6b:7a:95:5f:c9:26:
2d:b9:48:69:f0:52:fe:47:2c:30:18:81:c0:44:4d:
b2:c7:f6:b7:86:2e:fc:34:ea:f8:01:ba:12:70:2e:
3e:66:09:13:13:00:a7:4e:2e:b9:e6:b5:87:08:44:
ef:bd:8f:e5:10:63:75:6e:59:8e:98:32:a8:ab:42:
bb:48:9d:35:6d:85:69:3f:92:14:ad:2c:22:d6:b6:
e8:cc:90:9d:4c:43:8f:fb:d7:9a:15:7b:fc:7a:83:
36:3d:d4:58:19:33:a3:d7:55:bd:b2:30:c3:ce:cc:
8c:b9:eb:7c:f4:4d:a5:f0:43:a3:e6:10:fd:a5:9f:
d3:35:ba:9e:de:9f:bf:c8:b1:d1:5e:7a:d0:22:74:
12:9c:5f:f7:e7:ae:7c:e4:f0:81:ad:10:e7:1e:4f:
a2:63:7d:2e:83:5a:34:32:75:bf:ce:1d:30:75:e4:
f1:f8:91:1c:c6:0b:ca:b6:ce:8a:e2:6e:e0:54:85:
a8:f5:30:01:00:4e:cd:19:0c:a6:88:ec:18:ca:fc:
a3:d5:b8:89:26:cc:18:07:a8:ca:cc:64:f2:6c:38:
4e:a7:95:3a:fa:30:1a:79:45:80:bc:f3:37:dd:0d:
ac:26:56:cb:a2:f6:da:60:88:d6:c3:ab:50:8c:21:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:2D:03:9B:69:C7:F1:88:31:34:C5:F9:DA:CA:26:F9:73:1F:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.205.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:7c:ca:18:a6:bf:51:01:c4:84:a0:26:dd:db:6f:d0:13:a9:
fb:a2:55:d1:dd:60:ed:40:02:d9:2d:cc:11:34:ef:eb:c7:d1:
a9:cc:2f:e3:a9:53:4d:79:07:fe:c6:04:b4:80:0d:d8:1f:0b:
44:61:c3:5f:31:b8:98:62:0c:47:8a:f8:58:ed:ef:5b:b7:73:
93:54:73:07:14:21:0a:69:a3:9f:8c:9e:69:0f:cb:c8:b4:45:
c8:8f:2c:e9:1d:7f:a3:6a:06:09:70:7b:0d:56:de:17:1b:b5:
b9:53:21:6b:7e:7d:b2:93:4b:f7:be:55:06:b7:c5:16:46:72:
40:eb:2a:e6:25:f8:86:46:04:8e:10:f4:9f:ba:e5:69:4b:35:
cf:d1:d2:51:a5:26:19:6c:a0:1d:8e:f4:16:79:cd:ec:a2:8a:
34:03:b0:00:80:c8:2d:d8:1b:05:cd:9f:6a:99:15:b9:2f:88:
b2:d1:41:3e:b1:a9:70:a5:26:3f:14:b8:18:9a:29:73:b7:c8:
7d:26:a7:97:59:15:11:99:a6:06:38:90:12:e4:9e:1d:47:b6:
5d:cd:51:dd:00:bf:f4:29:7b:40:b9:ce:51:0d:c4:1f:7f:67:
de:4f:57:11:c0:47:42:44:45:d0:2e:cb:e6:97:43:10:cb:c1:
c3:60:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:08 2025 by rpki-client