Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa
File: 9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa (raw, json)
Hash identifier: klJj2zamXs82tUcM7PdsxHkb2wjVT67Hf4Y1cg+I26M=
Subject key identifier: 42:62:4B:B1:02:A9:5B:2F:DD:05:BC:1F:FB:3B:90:45:AB:13:76:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BFDC65A183900FE44FD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.192.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:fd:c6:5a:18:39:00:fe:44:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=93ef1a75-55d3-42fd-954f-bcc45b03fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:2e:c0:70:f8:67:6f:cd:4e:30:f5:84:66:
82:ec:ad:8b:ae:55:f2:42:e2:b7:75:17:5b:64:b9:
5a:22:35:2e:07:06:e4:2c:be:ce:93:a8:a9:cc:7c:
8c:ff:49:c5:dc:84:e0:4d:cd:f4:d7:b2:85:b6:f7:
63:7f:7e:f5:ca:b9:3e:79:92:6b:e1:93:1d:80:b0:
f2:c3:a6:31:f7:af:c0:56:65:17:75:1f:ca:10:c1:
15:e0:3e:f8:74:f6:7d:7e:6c:ae:6c:5d:b4:94:7d:
cd:af:f8:0c:38:7d:39:3c:62:03:f7:96:42:d3:4f:
85:01:0b:c8:0e:7d:51:d0:02:c1:dc:b9:2e:f7:af:
ea:1c:3e:10:49:2a:48:12:c1:d9:97:e3:f0:32:00:
d5:3f:13:9d:31:f6:94:16:98:b2:d8:e4:97:44:d7:
59:9e:b0:f3:a9:6a:c2:93:e5:22:cb:1c:f1:b9:eb:
10:32:a1:96:e6:47:93:86:0b:7d:41:4f:a9:85:51:
a7:5a:0b:15:09:74:1f:2b:32:2c:93:66:e4:ce:b4:
df:80:40:e6:da:5e:40:f4:f6:8b:c9:8b:5b:74:05:
99:8d:a5:e1:4c:73:23:f3:56:b2:66:91:13:06:b4:
18:89:57:25:07:b4:e6:f1:11:75:93:74:5f:49:ae:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:4B:B1:02:A9:5B:2F:DD:05:BC:1F:FB:3B:90:45:AB:13:76:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:79:e5:22:08:60:38:62:db:f4:5e:ae:72:c3:7a:cc:56:bf:
21:ab:d7:35:c0:5d:c6:cc:40:3f:dd:10:23:9e:1e:05:f7:ec:
8e:15:5a:56:86:80:30:83:70:f6:38:88:b7:8a:73:d1:cb:d3:
6d:2f:b7:f9:5c:07:3c:d9:42:36:23:3b:ec:e1:d7:95:53:1d:
60:bb:f8:15:0e:85:95:04:8d:ab:00:51:17:1b:4f:a4:c1:ed:
b5:d6:a0:65:83:b5:92:80:3a:d2:d0:69:97:85:cc:03:1a:50:
76:a0:eb:a8:8e:5c:99:fc:71:da:c2:cb:5b:27:9e:ab:4b:a1:
fb:29:a4:59:7b:0c:7d:63:25:85:cc:16:cd:09:d4:bb:a8:5b:
f1:4c:59:40:a8:88:ec:08:e1:91:18:ba:6c:2e:c6:d3:7a:81:
71:3a:45:81:d8:4a:9b:41:e5:07:84:53:f6:82:81:e7:c7:7e:
32:f8:df:22:26:43:56:eb:b8:9d:b9:0b:59:70:a2:cc:e0:ed:
86:17:aa:ac:67:56:ee:0f:f3:6e:ba:6b:fd:ce:93:eb:e9:37:
36:54:36:56:a2:f3:a0:62:72:a7:ce:d1:cc:9d:b2:c2:4b:a5:
6a:35:20:96:1e:ae:1a:35:a8:eb:a7:12:9c:59:61:d8:aa:42:
2c:7b:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:04 2025 by rpki-client