Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de942289-2482-3b8d-9e34-3a1cf4b071be.roa
File: de942289-2482-3b8d-9e34-3a1cf4b071be.roa (raw, json)
Hash identifier: TdBPuYF0GSkXmjWFSKfe/aWZsW1DBtFg36Oqrfni6bk=
Subject key identifier: 15:04:1F:64:71:25:A6:98:50:B4:7D:23:97:17:11:82:FA:9A:F7:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C0DB6BB496D3D338F7080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de942289-2482-3b8d-9e34-3a1cf4b071be.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 19527
IP address blocks: 35.213.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:0d:b6:bb:49:6d:3d:33:8f:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b1ae989a-d2fb-4d60-a8cd-849ecb5ebfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:46:de:e0:fd:55:67:ff:09:bd:37:43:9e:
bc:28:f1:82:6b:d0:d0:94:07:e2:8a:47:19:cc:f7:
2c:ee:88:3e:e8:68:74:00:b0:68:5e:fc:97:2d:cb:
2e:0b:4c:eb:42:66:98:a6:37:09:ff:ca:32:69:ff:
ca:3e:de:25:03:7a:4b:61:ec:bc:16:e7:42:24:a3:
04:22:94:74:e5:f2:cd:19:fb:8c:4a:f1:45:b7:37:
6f:f0:4a:ce:61:e3:1a:4a:d5:39:92:4a:d3:9b:94:
e8:4c:38:bc:0a:ce:3b:a4:ed:40:c3:8f:8f:2e:b8:
76:84:88:ae:c5:6f:d2:53:6b:ad:d8:b8:d0:c1:2d:
62:1b:b3:f9:fc:05:ac:94:66:3e:c1:f8:92:56:08:
3b:21:c5:80:78:90:e1:ec:77:d5:0e:16:57:c4:96:
bd:73:1f:a1:e6:a3:70:6d:f3:a3:f0:e3:56:71:3f:
78:9d:5d:ae:9a:fb:74:34:20:21:6d:85:07:8d:e2:
b0:16:2e:ab:40:7c:fc:59:e8:66:18:3d:40:e9:1c:
6c:5e:50:07:f6:a7:b8:1f:76:5f:5d:0d:1f:c6:ab:
68:a2:f2:0d:b6:1c:d8:f8:38:d3:fd:1f:9a:ec:fb:
a4:3f:97:81:ec:be:75:2b:a0:b8:e1:a3:4d:e5:1b:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:1F:64:71:25:A6:98:50:B4:7D:23:97:17:11:82:FA:9A:F7:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de942289-2482-3b8d-9e34-3a1cf4b071be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.213.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:68:82:b1:a6:1a:db:d0:ed:7f:6c:60:24:83:21:f1:0d:17:
a7:9b:03:cb:ad:97:a8:a2:31:eb:20:d7:88:1f:64:63:45:33:
55:ce:cc:06:85:87:44:66:7e:40:70:07:ab:20:e6:5f:8e:6f:
6e:4b:79:ae:92:cd:a1:d7:bd:65:24:d8:f4:92:99:21:b9:52:
77:8a:8e:94:43:18:53:d4:85:2c:25:47:cd:24:83:bf:37:25:
5e:5d:4a:ef:c9:7b:fc:23:2b:8f:45:d4:f2:13:a6:08:3d:14:
8a:3f:ae:b7:a3:4a:e3:97:a8:23:c6:a3:c0:d6:5b:6a:5e:87:
a7:2a:45:45:32:3c:da:68:1c:6a:ba:85:1c:2d:ff:f9:db:a8:
59:00:df:0e:b8:b3:f6:1e:dd:e9:f7:3d:ba:52:17:12:c5:5b:
6a:f8:e4:76:2e:ca:db:29:61:b2:16:2d:a6:88:c3:bd:57:cb:
23:fb:16:0b:3b:7d:24:c0:ff:b8:aa:cc:c0:50:2d:9c:5e:78:
af:ab:62:4d:8d:28:3d:f1:57:84:01:e2:22:7a:2d:58:22:32:
d0:6a:f9:dc:4c:e7:0a:8d:93:76:fd:f5:46:a2:d7:b3:9c:7f:
c8:8c:c4:12:a1:2a:5e:80:eb:d7:52:98:cd:e0:38:2c:4d:51:
97:ed:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:03:48 2025 by rpki-client