Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa
File: ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa (raw, json)
Hash identifier: NTt0leBVWmrVj7N1/L9hKfLV67wY7A+hcVNDY6ue4wg=
Subject key identifier: D6:3B:D5:90:B2:A7:47:10:EC:C0:4F:46:0C:08:06:3A:0A:7E:1B:05
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC52948654F21D06EA680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.228.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c5:29:48:65:4f:21:d0:6e:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=1b94649b-b227-4f2b-9eb6-8b49ef5d56fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:52:d1:6c:ac:11:24:15:99:7d:af:e4:b7:
f4:35:a2:f6:6b:43:d2:34:be:8a:3c:fa:d3:f6:2c:
b3:9e:07:6e:94:0f:3f:b5:aa:18:5d:df:4b:6a:23:
75:08:37:e3:39:37:a5:fa:71:34:f2:71:9f:3d:62:
d9:df:b6:14:9c:11:7d:cf:f2:10:50:c5:7b:c4:3a:
56:bc:c5:5d:d3:9b:b3:50:6c:7e:12:2b:ad:42:85:
76:c3:0c:8b:f8:3b:ef:76:cd:97:37:c4:47:da:04:
6a:7a:08:6a:4a:ed:81:82:b6:94:51:b2:f7:19:60:
b0:74:ab:0f:8f:4a:48:86:82:29:99:48:4f:9d:73:
1c:fa:06:1d:8b:ef:a6:d5:80:dc:86:68:7b:33:b1:
ea:ac:35:ec:a9:cf:e5:49:d6:d2:69:a4:b9:f8:51:
3f:10:db:9c:86:7d:91:c5:9b:04:00:4f:59:7e:f6:
04:b0:5d:9a:75:28:fb:98:d8:94:2d:76:9c:0e:10:
dc:d8:de:84:f5:ee:e0:45:c3:33:2f:53:3a:36:61:
dd:92:ba:b5:c0:d6:35:20:f9:f9:96:17:a1:5d:ea:
18:89:46:a0:a9:51:e1:9a:42:a7:d4:e0:10:a7:d7:
d5:5d:31:d8:24:65:74:86:c1:2d:da:9e:05:5b:dd:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:D5:90:B2:A7:47:10:EC:C0:4F:46:0C:08:06:3A:0A:7E:1B:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:13:3e:85:8c:f7:f1:3b:c4:be:7d:ea:e2:bb:47:81:18:6d:
00:0d:bc:6f:fb:eb:b6:ed:0a:8d:43:f7:ae:ce:c9:20:f5:c2:
9c:4e:43:f2:f5:5a:0c:70:a4:de:79:f2:2d:d9:9d:17:c4:1f:
f5:bb:79:fd:e6:81:e2:34:52:58:8e:1a:b2:7a:11:f3:b7:de:
08:e4:75:05:d2:17:fe:74:db:08:59:e5:d7:bf:f5:a3:f1:9e:
30:55:3f:59:b0:52:d2:d0:b5:cb:1b:fd:ae:bc:9e:86:84:00:
c7:4f:e2:90:e9:bb:da:78:87:38:89:48:13:ba:da:42:e3:13:
d8:d3:6e:ce:ca:1c:84:23:91:9e:5c:64:f0:6c:cd:b5:cf:ad:
24:95:87:ac:b3:9d:08:c5:ca:d1:76:64:76:7c:1e:45:ce:00:
40:07:08:e9:4d:b3:c3:e1:75:55:ec:ac:31:5d:7a:93:54:12:
57:cb:a0:55:5f:90:e5:20:9f:11:9b:52:45:06:2c:66:4c:bd:
22:f4:e7:39:49:a1:3b:94:16:84:44:43:b2:d8:05:60:5f:0f:
6b:77:c7:56:02:0a:de:ac:33:fe:0b:4b:70:f7:4d:1a:77:d4:
70:ea:b0:fd:ee:2b:eb:8e:d6:2c:ab:0d:34:aa:f8:9a:0f:93:
64:a8:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:27 2025 by rpki-client