Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c43f3e54-3b79-3d3f-a4bf-38b18de5f9d6.roa
File: c43f3e54-3b79-3d3f-a4bf-38b18de5f9d6.roa (raw, json)
Hash identifier: MN+dPcGJkOb/Gi9EMdQnHqJIjZW5ktNU2/+hQn+Cmsc=
Subject key identifier: A4:0B:97:18:BD:4C:64:26:14:DC:8C:69:6F:17:DF:73:4E:92:1C:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BE862966B23CC434FA780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c43f3e54-3b79-3d3f-a4bf-38b18de5f9d6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.190.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:e8:62:96:6b:23:cc:43:4f:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=808aa906-00fe-4835-8848-c6bb0a75b709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:ba:eb:9c:ba:d5:28:43:b8:d5:38:e1:97:
16:ee:63:c2:83:8e:d2:8b:6c:80:2c:11:53:b5:6d:
ed:95:8a:0f:40:6c:5e:fd:fe:94:c8:ed:cd:c5:3b:
5f:c8:d0:17:9f:4f:47:98:db:0c:d3:eb:8a:77:be:
19:82:61:32:15:8b:d6:d4:fe:e9:15:95:51:c3:b0:
93:1d:a5:fc:0d:c5:2d:dc:64:bb:df:b1:ee:b4:58:
ad:7e:1d:e3:ae:22:79:c2:0d:9f:65:8f:b2:15:33:
00:71:c6:33:83:35:b1:fc:1f:f2:96:47:95:1f:69:
35:15:4d:77:5a:62:6e:ad:5d:d7:22:00:0a:f4:c0:
c2:46:32:38:a8:7c:3a:88:f2:30:8a:6e:65:63:17:
ce:64:f1:83:a8:27:e6:14:8f:75:da:43:b3:20:4e:
dd:9f:df:fa:6a:28:c1:27:85:d6:5f:31:44:2e:3f:
be:25:8c:71:16:ea:30:39:0b:b9:60:a9:9d:df:e7:
e6:51:fd:ff:3c:20:e8:2f:7f:cc:93:db:26:ea:e9:
cf:65:6f:a0:91:70:97:bc:78:72:1f:c3:ad:81:12:
88:c6:57:44:14:4a:24:b4:71:4e:9e:10:d0:13:b1:
db:e0:bd:02:b5:51:a9:3f:96:cc:0c:7c:10:17:8b:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:97:18:BD:4C:64:26:14:DC:8C:69:6F:17:DF:73:4E:92:1C:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c43f3e54-3b79-3d3f-a4bf-38b18de5f9d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.190.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:77:62:8f:10:dc:fc:84:54:2b:5f:8f:ec:cd:cb:13:44:05:
a4:15:18:c4:2b:82:0f:1c:c1:7d:a1:e5:4d:dd:38:fc:44:d7:
e2:4e:a7:dc:88:ab:ee:b4:fc:53:a1:38:66:6b:65:ce:c3:2d:
89:c8:7f:95:1c:e5:d8:29:f0:e1:ea:93:fc:33:3b:e2:fc:08:
ff:75:ce:0d:56:3a:92:e4:1e:7d:3d:3b:93:dd:ce:92:d1:ba:
40:06:8f:57:8f:73:92:4c:25:f2:58:8c:a8:3c:d4:d9:b4:72:
13:12:91:c0:12:8a:40:f8:0b:7e:47:10:50:59:ed:67:5e:87:
8b:51:1e:aa:ed:ea:fd:f0:56:33:2b:b5:72:ea:26:ff:6b:fa:
62:b8:f4:5d:16:56:ed:2c:1b:4a:4a:9a:cd:4a:42:d4:96:db:
aa:32:c4:2b:96:70:7e:fc:fa:c6:d4:21:e2:1e:91:1f:ad:b4:
de:f6:55:1b:f8:63:b6:9e:2b:a2:8a:7e:ea:5b:c6:1a:eb:18:
a1:cf:80:61:a0:6a:8d:ee:d2:93:88:2e:b5:49:72:bc:cc:1a:
7e:54:93:85:4a:af:8a:93:67:ae:e7:c3:e7:85:41:6d:77:9d:
1d:68:d0:5b:0b:81:db:b9:55:86:90:79:2c:16:b6:4f:fe:74:
34:7c:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:07:04 2025 by rpki-client