Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa
File: 3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa (raw, json)
Hash identifier: 8DpdQuMNizM6UUtEslw1S0l/zPsBsRqIFofKMUNS+mY=
Subject key identifier: 29:A1:03:93:5A:68:D8:1C:F5:2B:47:72:8C:F0:B5:04:9F:B1:8E:BA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C1E02333A2267B2582800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.204.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1e:02:33:3a:22:67:b2:58:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=dbe4816c-90c0-474b-bd0c-fd27d9acc2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:99:7c:88:b6:03:02:59:5b:46:24:a2:26:
95:4e:25:b7:0a:b9:77:6e:28:7e:7c:a8:ad:1e:64:
31:6e:42:b1:62:6d:34:f2:07:29:a5:f2:71:36:f5:
6a:72:d3:8b:75:fd:ad:0c:b9:5b:45:04:46:05:1f:
7c:2d:81:d1:e7:e1:61:1a:fe:cd:78:c2:43:ca:c2:
8f:5b:4c:be:3d:9b:26:df:2c:ce:6c:a1:1a:6a:ab:
ae:7e:0b:a7:ef:95:7a:7b:3d:ac:3b:a3:24:e6:1c:
ef:25:25:ca:59:9c:97:71:8e:87:bf:bd:b2:a5:12:
91:1a:43:2c:1f:97:48:a8:1d:bc:ba:6f:6a:82:33:
29:6c:16:88:d5:be:b6:f7:d3:e8:cc:52:49:67:7e:
b9:e2:17:7f:74:a9:e2:21:bc:9f:6c:49:ca:c5:53:
09:8e:ff:0c:9e:cb:c4:7d:f0:21:71:a0:9a:cd:8b:
c9:f5:5b:3b:32:60:9e:7e:6e:d7:a0:d9:09:51:34:
97:58:d9:ee:a1:cd:dd:bc:29:76:00:c2:72:a7:de:
2a:23:a3:62:20:43:b7:1a:68:33:26:bd:d0:66:44:
28:33:1c:a7:83:5d:0f:c3:94:4c:9c:79:35:ca:3e:
14:7a:48:0d:b4:1c:3b:bc:60:c0:cf:74:e4:61:b6:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:03:93:5A:68:D8:1C:F5:2B:47:72:8C:F0:B5:04:9F:B1:8E:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:28:27:84:5a:00:c1:a8:94:e8:98:bb:9f:f9:a5:0e:36:0f:
52:83:ed:ab:b0:1d:35:28:a6:00:dc:ac:df:73:e3:75:eb:05:
4d:10:03:6b:a9:6f:05:06:df:a0:25:b0:05:0f:1d:87:66:40:
0e:da:0a:f1:a7:5b:0c:26:66:03:a6:6b:b3:7d:29:49:21:dc:
fa:3d:bc:11:c7:24:3f:b3:b9:8c:b6:af:8d:07:71:35:0c:7d:
88:7f:68:37:7d:45:d4:dc:e0:0d:f6:aa:1e:fc:a9:1c:6b:b5:
37:2b:1a:f7:ed:fc:73:95:a5:ae:a9:be:c3:0d:8a:ed:6b:a8:
ed:a7:17:eb:ec:1e:3a:ec:92:08:44:fa:65:84:07:87:63:4e:
44:10:f3:7c:05:fb:a9:cc:3e:8d:01:03:8a:87:dd:fa:a8:66:
5c:97:a3:73:30:16:8e:8b:6e:69:a3:63:38:77:77:78:85:b2:
24:30:64:04:5d:41:6a:82:0e:4c:1d:8e:33:43:2a:b5:fe:64:
be:a5:1d:89:79:55:d9:ea:b1:90:16:74:5e:46:dd:fb:60:d5:
2c:5a:22:a9:2d:a9:85:bc:60:bc:a9:ae:c0:27:2d:e3:c0:ad:
58:df:f3:ad:d5:56:d3:df:2a:27:72:db:1f:44:a1:e0:9b:2e:
e2:4e:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:29 2025 by rpki-client