Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
File: c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa (raw, json)
Hash identifier: xMY277D3B8/FMt29zjbKKva6YLSYWETwqioBdxre4c8=
Subject key identifier: B9:9F:C2:AB:CC:FF:6D:B2:E9:74:EA:50:BF:EF:24:A3:55:CD:09:65
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C22B40DD0B1AA11CFA880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.229.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:22:b4:0d:d0:b1:aa:11:cf:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=3515b1f7-df3d-4484-a573-c2bc00f91f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:fa:be:bc:32:50:f4:5c:47:ac:ff:31:63:
4f:00:aa:32:14:53:a9:d7:da:ec:98:bd:61:69:02:
2c:9e:b6:6d:b7:6f:95:4a:98:a7:1e:7d:51:60:fe:
9e:f4:05:2b:9b:16:78:1a:ea:20:00:67:12:ee:ac:
e3:f4:3e:8f:92:e5:d6:c6:66:20:43:40:7a:92:44:
3b:d1:5f:24:00:8f:f1:65:47:93:3f:7f:37:6f:b6:
29:4d:36:36:ab:b9:7e:e7:1b:63:0f:d9:6a:cb:84:
c9:df:f0:96:6e:d0:d9:79:3e:7e:16:69:05:b3:25:
5f:62:9d:58:12:41:53:98:ab:f7:2f:d9:c5:38:71:
15:d5:9d:d9:7e:ed:52:43:6f:8f:e9:bb:7e:e5:a8:
4c:32:f8:d4:54:55:18:d9:8b:7d:8d:2c:fc:21:bc:
c5:06:07:1e:ee:c7:00:cf:34:61:11:2a:98:28:54:
44:04:72:de:47:64:c1:9c:79:5d:37:41:4b:47:34:
fc:5b:07:07:ca:6b:8f:00:1f:52:27:83:98:86:8a:
22:0d:59:dd:bc:cd:ae:7b:54:67:08:77:40:d0:18:
26:6a:55:c3:72:24:fe:b0:e4:e1:97:af:32:ba:30:
2f:14:57:c5:af:55:17:28:d5:64:99:67:6f:bb:34:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:C2:AB:CC:FF:6D:B2:E9:74:EA:50:BF:EF:24:A3:55:CD:09:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.229.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4d:64:96:8a:7a:35:0a:4e:16:5b:12:51:99:72:52:82:0e:
2d:b1:d6:d7:67:80:80:8d:f2:9f:b5:ac:02:13:29:84:2a:96:
5c:24:f4:e4:b8:44:6c:83:16:a4:7e:dd:bd:aa:b5:b4:be:72:
7d:b2:c6:f4:16:33:7b:01:83:eb:52:34:96:32:3c:af:8d:fe:
bb:a3:e1:2d:8a:91:29:0f:fc:1b:f6:d6:52:99:7a:04:98:39:
fd:7d:6b:4b:8d:5e:c9:1c:1e:1f:6e:f3:35:5f:9d:be:16:f5:
3c:8f:eb:cf:dc:c7:f3:e2:ab:67:9c:ab:e9:71:6f:44:fd:e2:
91:dc:97:8f:75:2a:e1:50:bf:f5:02:8d:17:51:89:6f:a7:7b:
54:43:13:5e:27:cf:ca:35:f1:c6:b7:e1:b5:06:5c:a0:08:2c:
39:5d:aa:7c:d3:9c:50:a5:1a:f4:46:eb:a7:e3:5a:1c:5a:af:
77:fa:4d:0c:ef:bd:81:bf:44:73:f4:16:95:fb:f0:2d:2a:9f:
cc:3c:4a:73:42:41:30:d7:75:c3:e3:bd:57:dc:6f:e7:e7:3d:
74:d0:fb:f4:21:0d:8c:cc:75:29:1d:ca:ab:e9:38:0f:b6:cb:
03:1a:0f:ad:82:88:dc:4c:e7:34:d8:86:68:c8:ad:34:f5:a2:
92:d7:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:32 2025 by rpki-client