Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b856218d-866d-30b8-940e-104d842a3b28.roa
File: b856218d-866d-30b8-940e-104d842a3b28.roa (raw, json)
Hash identifier: Y9hN7iy0bw/8W95tdypq7sgITW/QP6g8fcVzgQGl8l0=
Subject key identifier: 70:F5:E7:B2:B6:1A:86:B7:86:87:9B:18:98:C6:05:E8:23:CF:B9:CD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C0E29220449FA07D02400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b856218d-866d-30b8-940e-104d842a3b28.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.194.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:0e:29:22:04:49:fa:07:d0:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=49aabd5e-440e-4461-9e7e-d4884ed28620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:fc:19:ad:e4:9a:82:ae:70:6d:b8:51:29:
9d:19:4f:a3:14:6b:36:83:c2:e1:4e:8e:8d:8f:1b:
84:cc:ab:39:14:a1:14:5b:d3:e0:6e:c6:50:14:59:
3f:72:8c:4b:93:04:23:69:51:19:92:05:cc:e0:61:
11:cd:cc:95:dd:fb:e8:d2:ed:eb:56:86:20:25:96:
27:6e:3e:ab:78:a5:93:b8:26:5f:b3:d3:49:da:e1:
6c:f0:93:64:23:53:d6:ec:5e:36:8e:9d:cf:72:96:
05:50:20:72:1a:c1:8d:ea:1e:c6:06:fb:cc:72:2b:
b2:a1:a4:76:b7:25:21:99:4d:17:8b:97:68:40:d7:
03:75:1f:39:f0:95:7a:5c:ce:59:26:1e:36:3d:cc:
c8:03:23:f1:92:63:b3:1f:e0:ad:d9:b6:a6:e7:03:
43:41:ca:ac:47:93:e0:9e:ed:55:25:75:4b:ad:88:
d4:67:f0:68:5d:8e:4e:d6:0c:63:9d:67:38:84:8a:
b7:8b:43:31:91:94:6a:46:51:53:25:0d:82:7f:26:
13:31:9d:b8:a2:b9:90:74:33:21:6b:d6:4b:01:3d:
da:af:3c:f3:2f:e2:b9:52:7b:4c:88:27:bd:e0:70:
29:c5:b4:51:fe:3e:ea:9d:60:0f:62:a5:f1:1e:78:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:E7:B2:B6:1A:86:B7:86:87:9B:18:98:C6:05:E8:23:CF:B9:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b856218d-866d-30b8-940e-104d842a3b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.194.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:33:f8:fd:26:00:93:d9:4d:5b:43:e3:d6:29:7d:ce:1e:3f:
68:a3:ee:76:a4:fd:dc:fd:33:15:e5:95:17:b3:96:06:f6:ae:
9f:b2:d6:2a:bc:b9:08:39:91:86:0e:27:cc:92:31:40:c3:62:
86:53:14:78:7d:5c:e5:f2:f6:5f:2f:97:df:9b:af:3a:09:0f:
b5:ce:85:8c:ec:40:a6:ce:90:75:52:ee:14:cb:89:32:55:f5:
85:46:10:b5:fb:d5:30:03:fa:e0:3e:aa:f0:6d:8e:79:5d:44:
0c:e3:90:52:75:69:1d:b3:7d:2c:e6:2a:ef:81:5e:6d:cf:4f:
50:5e:e3:37:ea:44:61:51:53:f9:02:5d:db:ed:6f:40:75:82:
96:f9:74:12:4b:d2:cc:4e:f1:73:1f:03:6d:3c:3b:13:b8:c8:
11:9f:55:5e:73:83:44:24:00:f7:9c:02:2e:98:7e:d3:68:6e:
31:bf:ef:7d:1c:0d:81:a8:c2:59:57:b5:f6:a2:82:db:c1:c9:
1d:80:ae:50:09:77:d8:f5:ed:bc:cd:e2:29:ea:09:d4:49:7f:
f9:67:e3:71:23:77:5c:ac:1d:d8:ef:e9:bc:28:38:c5:55:ff:
9d:f0:ea:d6:3e:fb:11:f3:be:55:a2:4e:ae:59:40:cb:17:da:
6b:35:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:08:45 2025 by rpki-client