Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa
File: 3f340104-27ea-3248-b605-b7052e970967.roa (raw, json)
Hash identifier: Gr6u6xmQnpJXD3tmI2qKUPwkIdl72Ampkj1/l8KbU1s=
Subject key identifier: 6F:85:4A:43:C2:8C:78:F0:00:E8:1D:57:92:5D:91:CA:2D:BE:0D:12
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC710958AA0A7A2A8E058
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 35.206.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c7:10:95:8a:a0:a7:a2:a8:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=dde27971-e6fe-4a23-90ce-04195a37c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:1d:69:e3:43:6e:42:ef:d8:6f:8d:60:6a:
ca:77:3d:84:3f:41:14:2b:44:79:08:67:3e:d1:ab:
5d:74:d7:2a:ed:5d:73:9a:25:e9:3e:97:5a:98:07:
8f:b5:16:05:97:be:d4:de:09:15:2b:36:68:3a:25:
2f:67:74:fb:1f:1b:06:be:14:8c:3e:cd:1b:76:3e:
c1:90:7b:4a:ea:e9:04:5e:91:04:06:ab:21:5c:09:
95:ad:94:fc:30:f6:67:ad:7f:b7:0d:0c:ad:be:26:
22:aa:19:cf:6c:bc:d8:94:ba:dc:19:cb:14:2e:ba:
2e:fb:34:6b:bc:c9:21:8d:96:ad:c3:a9:7c:00:be:
a3:b0:e6:12:74:10:28:90:ce:14:09:77:e2:06:3c:
56:69:6c:72:d9:00:8b:28:60:55:42:a9:9f:57:12:
10:69:00:bb:85:c0:2c:4e:11:7b:fb:c2:ce:72:27:
4e:e1:9f:8f:9d:bb:32:90:a6:09:45:f0:13:53:36:
ce:84:60:ee:76:3c:d1:63:ff:fa:13:f7:a4:e9:99:
c5:ec:22:67:9b:c2:5d:90:47:4c:9f:38:8b:fa:1e:
92:08:82:b9:65:ff:86:66:ea:db:e9:00:b9:79:5d:
db:4c:e9:46:4b:00:39:5e:46:32:ee:c2:6e:c1:3a:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:4A:43:C2:8C:78:F0:00:E8:1D:57:92:5D:91:CA:2D:BE:0D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f340104-27ea-3248-b605-b7052e970967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.206.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:18:76:cb:1d:69:29:14:4d:c7:b5:91:cc:e4:59:51:96:c4:
02:b9:e5:80:46:0b:92:bb:67:04:2a:77:02:43:96:fc:10:9b:
ea:0e:dc:88:f0:b4:7d:e8:a7:0b:9e:6f:b2:c8:e3:6f:a6:9f:
e1:32:a3:99:36:74:5d:33:23:39:92:ad:f2:e7:16:d0:c1:07:
2d:c0:c3:97:5e:d0:5d:2c:4e:77:c3:00:18:a8:eb:09:70:58:
78:7d:fb:f4:ff:8c:2e:7d:3e:3c:7e:b4:6e:e3:62:d8:9b:4a:
a2:ab:04:92:b3:e6:aa:ad:eb:ca:9e:b3:50:2e:1a:10:51:1b:
be:a8:4e:81:f6:65:c1:38:f0:ec:2b:e0:81:10:90:f3:9d:62:
cf:d0:3d:a0:90:7a:b9:62:6e:f1:af:96:f6:e5:60:82:a4:ce:
dc:9b:bb:8e:3d:06:e7:1c:98:63:70:60:c9:9b:25:9b:43:5f:
0a:ad:0a:7a:f3:c0:d0:58:65:a8:53:f9:91:2a:3a:65:49:a7:
83:06:ef:64:0e:1e:6e:a8:d5:cc:c2:8c:7b:3e:a5:7b:6f:cc:
44:d3:a8:48:42:45:87:6c:c1:dc:f1:f8:57:1a:37:07:bf:27:
0b:38:88:7a:49:0e:40:12:33:22:b4:e8:a1:1f:8f:ed:9b:2c:
a3:bb:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:35 2025 by rpki-client