Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa
File: 7c790206-baf3-3f4b-8f97-000c46c3e016.roa (raw, json)
Hash identifier: SGF7PmB2+qWV/Wy7nDFueYLbFfq+jiqdQoz4hGq+cvM=
Subject key identifier: 06:B4:A4:28:23:70:31:E9:0B:6F:79:64:27:0A:75:BA:13:F1:3E:FD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C13545E3E7948BBB89400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.220.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:13:54:5e:3e:79:48:bb:b8:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=343e2c16-4e2c-441d-b89e-4d1ec07a2e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:cf:8b:ec:19:1b:74:44:b4:34:f1:51:c6:
5a:83:e0:01:28:b8:7b:26:c5:34:25:96:6c:96:99:
7e:8a:00:9f:43:94:bf:bd:cb:68:2c:7a:3d:09:56:
71:ba:c5:24:d0:87:c9:d2:2b:02:a0:c7:e7:13:1f:
02:8e:6d:ff:40:81:87:d7:d5:c3:5a:e1:2f:f3:da:
24:8d:6a:b8:73:15:4e:cc:4e:3c:23:da:b6:b8:d1:
ab:aa:25:22:20:5b:95:2f:a8:99:1b:cc:d0:3d:13:
b8:8f:87:3f:d5:ee:76:df:de:08:8a:e9:ed:c7:26:
2d:51:92:a3:61:e7:9c:3b:05:30:82:72:d0:ce:09:
d2:40:4b:a5:e2:aa:b7:73:d9:99:c7:d8:59:76:c7:
59:3e:ce:8f:f1:85:6a:ba:1c:a8:56:01:6a:78:87:
a1:02:13:9b:0f:41:92:78:a2:ff:cd:3c:8c:7d:e0:
43:ec:fc:91:eb:c8:01:28:b8:43:a9:b7:2a:5b:06:
25:e8:bd:31:10:71:7e:f5:56:1d:2e:9a:df:d6:da:
65:6e:8d:b0:b8:65:3a:ae:94:80:96:78:ad:19:f4:
d0:da:4a:5f:21:1d:0c:9c:d3:98:ae:b0:43:8c:00:
db:ec:ca:dc:5b:e0:3f:eb:64:ee:b0:fe:24:51:27:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:A4:28:23:70:31:E9:0B:6F:79:64:27:0A:75:BA:13:F1:3E:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c790206-baf3-3f4b-8f97-000c46c3e016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.220.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:6b:24:6f:63:98:a1:e6:09:5d:18:47:a2:80:97:16:9b:0c:
43:a0:fb:fc:f9:69:f4:13:29:71:32:af:70:74:86:f2:84:8b:
f4:27:e5:3c:24:26:24:b9:14:13:d4:fb:38:38:5e:ab:20:7a:
d0:c4:26:10:e9:8f:cb:5a:75:42:d2:0f:8e:2b:91:59:f2:83:
dd:fa:bc:b0:3a:90:6f:0b:d7:20:23:3a:66:73:b7:d6:ef:39:
3c:50:df:96:27:ed:75:9e:b5:a4:3e:e1:ef:c0:83:56:d1:ec:
33:4e:aa:a3:d5:3e:0e:7b:68:c0:f4:23:40:2d:4f:5c:a2:2e:
cf:4c:85:65:4e:73:62:12:4d:9e:eb:87:25:a0:b0:77:3d:39:
7e:f5:53:94:02:6f:45:34:00:d1:a5:f3:cd:5a:b8:64:f1:a1:
0d:89:f5:a5:0f:e5:cc:04:f6:32:f1:00:b0:37:00:b7:24:12:
46:e1:00:b4:66:4e:f2:d5:89:ee:4b:70:c7:d5:92:20:a6:ab:
ab:5a:94:90:df:94:02:6a:2f:38:9e:f3:e1:18:21:f8:f6:64:
58:b4:2e:53:f9:f7:83:39:96:8a:1d:55:0d:c1:55:d1:0a:79:
96:5c:25:5e:08:3a:7b:78:77:d7:6d:28:bc:02:6d:35:e4:6a:
28:56:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:51:33 2025 by rpki-client