Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42a98c03-1f15-3442-b70e-ab8d172db6ca.roa
File: 42a98c03-1f15-3442-b70e-ab8d172db6ca.roa (raw, json)
Hash identifier: U4Ak9SPygmG+DJhAAgL9qipb/Kj1aD73C+DyKKJcVBo=
Subject key identifier: 34:0B:E3:5A:1C:E0:FD:98:AA:C0:97:02:FD:1C:C8:73:BC:E0:FA:F3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BEACE2D13F3048A2EA9C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42a98c03-1f15-3442-b70e-ab8d172db6ca.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.223.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ea:ce:2d:13:f3:04:8a:2e:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=9f2e3b97-7c8d-48e0-9520-b211d4d2b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:89:1c:19:b5:0f:a4:44:56:fe:a0:18:43:
c6:7e:cb:5e:76:70:66:2c:0f:d7:ae:2e:ab:ca:07:
0d:b5:61:31:b0:46:9e:32:0e:bf:8d:6f:13:ce:5e:
01:1b:fb:e9:ed:a5:da:7c:11:0a:12:9c:7f:2f:c9:
1e:92:43:d1:91:67:8d:dd:86:d5:94:83:28:bd:55:
69:bf:42:d9:95:6f:9f:c8:a7:10:a4:ac:ff:8e:54:
b0:33:22:fc:39:23:82:16:35:b7:09:a7:79:0c:7b:
33:cb:8b:f1:74:4c:10:92:e3:43:c8:7b:b4:bc:92:
5a:17:fb:43:71:5f:d6:2b:93:27:d3:81:56:69:ef:
06:05:7d:2f:94:52:23:27:8c:c7:7a:0a:0b:a6:af:
39:89:db:ac:2e:72:a3:15:e5:c7:f6:08:43:43:4d:
e2:2a:64:c7:d3:bd:ec:95:14:1c:c9:10:d2:e0:e6:
73:89:a8:1a:a3:1c:51:c4:3d:9d:79:b3:ad:32:25:
00:9a:5e:db:af:21:55:84:04:31:b1:d2:2e:b0:07:
54:50:e8:fe:55:6b:21:4e:23:3e:61:ff:c8:69:cb:
bb:c6:14:87:6a:ec:5d:de:dd:c0:d1:c5:87:4e:8d:
af:6c:8c:59:ae:e9:b1:3e:67:d9:74:7f:a1:f5:67:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:E3:5A:1C:E0:FD:98:AA:C0:97:02:FD:1C:C8:73:BC:E0:FA:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42a98c03-1f15-3442-b70e-ab8d172db6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.223.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d1:d8:fd:a0:27:e0:a4:b9:eb:24:52:aa:67:ee:3a:4b:8c:
96:4d:68:51:c8:46:8a:08:d3:4d:fd:81:58:a0:b2:67:7b:05:
93:9f:29:ec:ac:42:b5:c0:76:8e:fc:94:05:41:eb:58:d9:42:
42:39:06:61:67:b3:93:78:4c:d5:b1:a6:9d:5d:ee:43:ee:2a:
2f:7b:05:07:4e:bd:b6:0b:7f:63:52:81:db:ad:b3:a5:15:62:
99:54:34:46:5c:a2:a9:ed:86:e7:06:6a:4e:1e:e8:9a:40:aa:
fd:f8:3d:db:e3:7a:6f:7a:37:45:66:1b:ce:56:45:b2:7d:b8:
89:65:f2:f1:9c:58:96:bb:11:85:73:bb:b0:dc:77:3d:14:5c:
c9:6d:30:5e:be:f9:e6:9b:4f:11:aa:d5:a7:47:b8:b0:07:ba:
bd:47:cf:86:65:c9:29:46:a4:f8:f3:29:f1:e7:ae:d6:40:1e:
74:af:47:8d:6d:55:58:95:b5:f0:ce:af:53:d5:4b:05:f6:27:
61:57:8c:40:85:8f:a2:35:d0:21:d3:98:af:d4:94:27:7b:0b:
2a:e3:6a:71:97:6b:4b:d7:fd:6d:42:94:79:0e:28:9d:fd:3a:
95:5e:ea:7b:6a:e9:b1:8f:16:6a:54:c9:e6:4f:8a:dc:c5:e4:
fb:1c:4e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:03:49 2025 by rpki-client