Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa
File: 491d92ac-1ea7-36bc-9147-49134bad70d4.roa (raw, json)
Hash identifier: JrdzVvJZLd3gr8GMka4gznw5VkV8GhqVQSjq5MlHOX8=
Subject key identifier: FF:65:4A:15:81:2C:6A:0A:43:F8:E9:D4:A9:3A:29:76:8C:75:44:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BBFB89822BE71BF108900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.238.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:bf:b8:98:22:be:71:bf:10:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=d950c06a-10ac-4ad4-b995-d6fe75bd3926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:c1:23:f8:f2:a9:0e:ef:4e:ed:ee:79:7a:
34:9b:b4:47:0f:9b:06:96:d9:f4:df:a8:9d:8f:19:
a0:9c:17:61:2c:c7:fa:39:7a:d5:9c:71:39:cf:41:
89:1b:ca:d5:79:4b:38:c9:69:c4:77:22:d3:e6:43:
29:dd:a2:ab:d7:7c:c8:91:6c:b9:dd:d0:31:cf:c7:
4a:3d:a6:51:43:92:24:c5:f3:5b:7e:df:d6:a6:42:
60:ca:04:a4:89:e4:00:07:66:a6:d3:d7:cf:15:1e:
cc:15:dc:5a:cb:56:08:7a:19:a2:7a:73:3a:03:c9:
90:19:47:76:d2:ee:16:73:e1:e1:7f:c7:4e:8d:4a:
83:b8:33:46:78:af:61:de:a1:52:a9:0b:3e:b4:17:
ed:40:75:fa:1d:1a:10:f9:46:96:84:1a:2b:70:26:
5c:8b:ab:c9:f2:a0:96:6f:6b:53:2a:9c:d8:9c:e7:
b7:fe:c8:a6:3f:29:0a:90:11:f4:14:bd:a7:19:d3:
4b:29:ea:a7:0a:40:c9:3c:2b:5c:d1:15:c4:ba:42:
42:cd:7b:f7:be:95:58:fe:a9:75:07:d9:16:ab:73:
78:c1:98:24:1b:c5:e2:99:b6:fc:96:e6:35:b0:0f:
f2:ef:0c:37:81:d5:f5:7e:16:f4:d2:bd:6e:8f:f3:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:65:4A:15:81:2C:6A:0A:43:F8:E9:D4:A9:3A:29:76:8C:75:44:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.238.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:5a:45:53:ff:9b:20:e9:d8:9d:50:2c:e0:bf:d0:9a:2f:61:
88:4b:3e:39:c8:c4:c5:88:5a:54:03:08:b5:c8:c3:46:43:9a:
d9:41:dc:bc:4d:55:9e:f2:b1:18:b5:04:6f:2d:af:fb:8b:e3:
c1:69:6d:a5:27:69:16:d0:67:00:3d:fd:b0:41:ed:0b:2c:ac:
ce:6c:a3:cc:56:e0:eb:f9:cb:b4:b3:eb:82:8b:de:80:ea:2a:
02:90:39:a2:4e:5a:e3:45:ac:85:6b:5c:98:be:ea:8e:68:53:
c9:48:f6:45:1b:5a:3e:21:38:29:82:78:83:32:97:b1:12:45:
f1:f0:ab:91:d7:22:f0:3b:c8:3b:d3:8b:08:a7:60:db:1a:b5:
5a:04:8c:0f:75:29:f5:04:12:54:2a:7c:01:a4:ca:1f:e7:2a:
91:37:c3:94:c6:75:4a:44:9d:58:3e:2c:7e:2b:a7:62:18:d7:
7d:5d:cd:71:6d:b9:21:38:bc:2e:9e:1d:f3:27:fc:fb:2b:fa:
c6:d2:0d:76:bd:87:1e:ef:bc:12:33:3c:cd:ed:bb:69:5d:c6:
1b:f3:23:0a:fc:60:a7:8d:95:74:d9:5b:4e:e6:63:5b:7f:08:
ab:2c:f5:b6:95:f7:84:b2:46:40:85:65:e9:ab:9d:13:55:40:
2c:ca:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:21 2025 by rpki-client