Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c865f748-f1ca-3e57-bc07-a184f7c6ccb6.roa
File: c865f748-f1ca-3e57-bc07-a184f7c6ccb6.roa (raw, json)
Hash identifier: WjEdDpAoYW91x0Wp6pEoR+gZck1a2RIclv0M11g/fkc=
Subject key identifier: 3E:05:0C:A4:CC:23:EA:77:0A:2C:EF:D5:6A:97:91:A3:4A:CC:A8:33
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C06E98419557D8F0C7F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c865f748-f1ca-3e57-bc07-a184f7c6ccb6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.200.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:06:e9:84:19:55:7d:8f:0c:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b570de05-07d8-4fa3-90c3-5fa00af18636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:b5:ea:82:78:c4:56:ab:cf:f4:24:9e:a0:
6b:28:20:6c:6b:30:3a:8b:c4:9b:0f:f8:28:a6:f4:
66:f6:2d:6d:15:93:e5:8f:96:81:7d:11:40:2b:f1:
17:d7:6c:d0:32:1a:2a:d6:f6:0c:47:ed:a0:12:db:
20:e9:59:07:fa:28:a6:09:f6:41:6f:6e:b0:a4:94:
35:dc:a0:90:f7:69:6c:ef:91:7f:14:6a:35:2b:34:
72:63:47:f7:e1:ba:c5:0b:8a:af:e2:e2:18:c0:6c:
8d:e0:5b:4e:ac:71:ef:de:66:b0:6b:b9:43:20:26:
62:12:15:dc:b8:e4:af:98:3e:c8:05:9e:3c:52:a9:
09:ed:70:55:24:7d:34:1a:d9:fb:3d:e6:c1:f7:17:
af:68:5d:36:77:2a:89:66:c5:e3:ba:d9:fb:c9:6a:
48:5b:89:34:fe:a6:a9:43:f6:cb:ff:5b:c0:69:76:
f2:d3:2f:d3:3b:a6:da:60:2f:36:72:97:db:66:c9:
b5:d0:a8:6d:0f:70:ac:2c:91:e4:7e:09:ff:37:18:
6c:1f:ce:8d:e2:3b:be:16:a0:39:1a:40:c9:af:cb:
fa:3f:6c:b8:e3:13:9c:23:20:e1:d6:55:1e:d7:e0:
54:6d:65:0a:a8:82:05:4b:6d:8f:98:55:af:98:5c:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:0C:A4:CC:23:EA:77:0A:2C:EF:D5:6A:97:91:A3:4A:CC:A8:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c865f748-f1ca-3e57-bc07-a184f7c6ccb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e3:6a:c1:ef:57:f4:ca:bf:33:7c:37:5d:8f:94:0f:75:3f:
59:62:41:9e:69:3b:03:da:c6:72:4a:8b:94:ad:a4:ed:4c:9a:
51:99:31:5c:ab:97:c2:35:6f:14:32:39:d9:03:a8:6f:49:f4:
3c:8f:2c:90:77:da:ef:27:e7:24:51:d8:f3:1f:76:02:aa:9e:
80:41:be:ea:5a:d0:77:eb:3a:27:af:6d:82:02:b3:37:2f:e3:
e4:32:35:a8:a3:2d:04:99:2a:95:c0:67:9d:7b:0f:ae:53:ba:
80:88:c5:7c:3a:24:26:cf:d3:3d:b3:5c:d7:b5:41:32:2b:32:
50:8d:7a:45:6c:32:86:f8:bd:0b:09:bf:e4:61:ae:ce:40:5f:
6e:88:0e:e3:45:8d:63:b2:e0:f3:e2:23:41:14:ca:d5:af:92:
6f:f3:c7:0b:85:b1:94:c7:09:ea:b6:66:2f:a6:3a:a9:79:05:
ef:61:16:75:0e:f1:b1:1a:f5:7a:5b:1c:3d:1b:87:51:f5:d9:
74:d9:53:16:17:5d:da:81:be:4d:56:8d:72:eb:22:6a:cb:6e:
16:11:f5:9b:2f:7f:98:15:23:73:29:c0:73:29:e9:4d:52:06:
96:7f:37:6b:a2:63:53:f4:f4:1d:23:d4:19:99:8c:b6:60:3a:
38:10:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:17 2025 by rpki-client