Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5415d89c-65ab-39e4-a688-1dcf80378656.roa
File: 5415d89c-65ab-39e4-a688-1dcf80378656.roa (raw, json)
Hash identifier: AzFLobK9yPszqgTzCd7BuArPyk8rsJH5jGBCcjwMYpA=
Subject key identifier: 30:CC:F5:E4:2D:8D:D7:C9:3D:36:F1:5C:32:10:4C:46:3F:DC:AF:47
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BFEE6B55747387B7D30F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5415d89c-65ab-39e4-a688-1dcf80378656.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.195.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:fe:e6:b5:57:47:38:7b:7d:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=a74069bb-ca15-4ab3-89dd-e70eedd609cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:5a:95:04:2d:e1:63:1d:4d:1c:c7:c6:23:
5c:08:89:03:92:c8:87:39:7a:dd:75:42:dc:db:1f:
0d:74:83:cd:3e:97:a5:27:b5:c9:40:87:46:16:6f:
d8:0a:d6:d6:3c:16:67:d2:71:a1:7c:ec:46:10:61:
b9:b9:57:50:c2:48:53:c8:6f:93:86:7d:02:f3:49:
60:ca:fc:bc:07:4c:0f:5d:d1:7e:51:a9:50:c6:2e:
98:d3:7f:8b:b0:de:3c:17:d1:d4:6a:1c:61:29:51:
1b:39:4a:9d:33:b7:af:68:73:d7:48:b8:92:33:90:
62:c5:07:bb:78:44:0e:78:0e:68:55:2c:56:69:85:
3f:88:8c:17:c4:1b:60:c6:06:07:a5:9f:8c:e1:90:
10:6b:73:45:2d:74:03:e7:42:41:21:67:52:c2:af:
1e:53:33:2a:36:cf:d4:19:5d:7a:87:b9:a3:30:3a:
cf:dc:6b:00:ea:f7:de:48:73:f7:37:c3:8f:f0:85:
7d:2c:b7:bc:07:69:9e:f9:f3:a7:77:0e:cf:48:b4:
5a:b4:91:7c:2c:18:fb:3d:a3:48:57:8c:6e:3e:48:
f8:7d:25:1f:67:6b:59:6e:86:ed:02:89:08:f7:77:
19:20:5d:be:71:4e:2e:da:d8:c8:e7:ff:2f:17:d5:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:F5:E4:2D:8D:D7:C9:3D:36:F1:5C:32:10:4C:46:3F:DC:AF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5415d89c-65ab-39e4-a688-1dcf80378656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.195.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:34:16:a2:bd:c6:74:7b:56:86:e5:48:2b:b0:d9:da:09:db:
b2:de:bd:f9:18:fd:fa:e2:d4:91:0f:6a:3f:b5:f5:5b:ee:c8:
12:53:a0:db:a2:7b:ff:9b:11:17:bc:f6:db:63:fc:30:90:73:
87:81:43:93:35:d6:d0:73:84:a9:d2:93:50:0c:51:44:05:6f:
c1:55:20:c8:08:e7:5d:5b:8a:f3:88:f8:c0:d6:0b:6f:75:d4:
4e:48:1a:76:d5:ad:a8:1b:7d:4e:dd:25:71:65:58:b9:ca:e8:
da:c0:13:65:47:e6:02:c7:27:71:4e:5c:f1:6f:85:c9:75:a9:
75:22:51:66:37:9b:b7:3f:03:5f:2e:5c:0c:2b:c2:ff:5f:22:
00:5d:70:24:13:86:ec:4b:4a:b9:47:be:7e:d5:15:e0:83:58:
6f:a4:76:f6:1f:c9:da:cf:fd:39:70:bb:a0:3e:b1:b9:4f:aa:
68:7a:63:83:64:c1:2c:65:33:65:bb:36:5c:31:46:c5:94:a2:
f8:0b:f1:62:40:6d:59:65:ba:ed:63:72:b8:13:69:db:47:2c:
42:91:14:db:d9:12:e3:d5:1a:7e:de:8c:40:14:28:95:ab:6c:
5a:29:41:3f:a3:e8:9b:df:b4:0b:c3:dc:3f:97:18:fc:65:8f:
51:f0:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:09:58 2025 by rpki-client