Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c9114e-4187-300b-b84b-0a51e1b5944f.roa
File: 42c9114e-4187-300b-b84b-0a51e1b5944f.roa (raw, json)
Hash identifier: ug1dHqFVVuC26F9BO0JET3U+WEZMHYIqbAzs+Gh7wLw=
Subject key identifier: AA:62:9B:F8:5D:01:CB:CF:D3:86:C7:7A:83:20:97:39:8F:32:01:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C19F8662BEF2143015E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c9114e-4187-300b-b84b-0a51e1b5944f.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.221.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:19:f8:66:2b:ef:21:43:01:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=f75eb9ad-a0b2-45fa-ab07-26d198188b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:61:4b:cd:3d:19:a7:9e:78:3d:7f:4e:2d:
5b:67:48:7e:b4:d4:f9:71:e9:59:c3:26:cb:12:6a:
0b:57:fe:42:68:7f:e6:6b:2b:34:ed:64:b9:31:cb:
ac:29:a0:d6:80:24:98:99:5e:4f:a6:24:0a:7f:33:
9e:8e:d1:99:12:5d:2d:79:2a:88:85:af:06:3c:7c:
e5:1b:3b:fc:7e:f2:96:9c:36:46:09:80:5a:67:8e:
e3:9e:95:cc:06:70:dc:b2:b9:d6:8b:0c:c4:dc:1f:
9f:25:68:1c:e5:5c:63:26:25:cf:cf:4a:71:48:4c:
fc:f3:55:bc:81:69:8a:45:f7:a7:ff:5e:0e:3b:e9:
04:f9:43:c1:a4:a7:79:72:63:c5:b6:b0:d0:17:15:
b7:70:d3:c3:a6:72:fa:9b:e6:6e:84:d5:0d:80:ab:
94:7c:91:37:35:15:2d:05:58:e4:89:d0:c0:e2:3d:
d3:ef:6e:e5:db:29:9d:71:90:99:f9:0e:50:ec:99:
3f:7a:b4:f3:8d:51:01:a4:4a:f6:7f:cf:fd:3a:de:
df:07:a4:96:f5:af:15:e7:65:0b:5d:7b:c7:5a:24:
5d:47:fb:fa:b1:82:9a:ab:94:ae:6d:57:29:96:1d:
90:93:9a:85:70:15:58:27:cf:23:2a:a7:78:01:ee:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:9B:F8:5D:01:CB:CF:D3:86:C7:7A:83:20:97:39:8F:32:01:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c9114e-4187-300b-b84b-0a51e1b5944f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.221.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:92:c3:b1:74:cc:54:c8:04:3c:c0:24:8d:b6:a5:b5:ba:00:
fa:e8:06:9e:34:bb:be:70:0f:5e:7e:35:e8:77:5a:a1:e5:d3:
c0:a2:96:34:7f:76:e0:d9:77:bc:6a:f5:5e:71:a0:bd:57:56:
b2:55:10:11:57:a3:64:5e:48:45:80:b3:8e:09:ad:62:5d:1a:
25:b9:9a:b3:a7:c9:72:2f:23:b2:28:5e:04:b3:37:a7:31:a3:
3b:9d:75:60:18:ea:75:e4:dc:af:c4:24:b9:1a:43:2e:6d:df:
0b:6c:b9:b7:04:95:ec:13:35:56:53:dd:00:12:89:b4:c2:bd:
28:39:bc:8e:e7:11:71:99:51:20:2f:0f:7d:7b:ab:9b:9d:9a:
8d:80:b0:75:d2:85:e8:79:91:03:c6:b7:8d:9f:69:5b:2f:4d:
5b:70:a9:22:97:d3:a4:72:28:d4:08:75:23:52:b3:fc:d7:10:
5b:73:07:0e:d7:09:33:a2:0c:a2:0d:2c:b4:d1:10:a8:e0:d9:
dd:0e:c6:eb:dd:db:39:b8:db:18:e3:4a:93:74:c4:bc:d8:d6:
a7:97:6e:10:91:ce:b8:6c:e2:81:7f:14:ea:0a:a8:84:a2:c3:
3c:5f:70:2a:46:a5:8c:9d:c1:9b:de:b8:5a:5c:b9:eb:1f:58:
40:20:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:51 2025 by rpki-client