Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0f3dc46-179b-3de3-a386-867685239b2e.roa
File: f0f3dc46-179b-3de3-a386-867685239b2e.roa (raw, json)
Hash identifier: C+oTIL6xMSj4nXkw+wwQ3EtRfr6rOzldVCpBBrH9Bgg=
Subject key identifier: B3:CE:31:CA:ED:3C:17:2F:2B:E9:95:97:F6:83:E2:5E:E2:96:4C:22
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BCBE408E9E64666033DE8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0f3dc46-179b-3de3-a386-867685239b2e.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.241.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:cb:e4:08:e9:e6:46:66:03:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ebef9db4-34f8-4f6d-a81b-26d4efd9c5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:78:a8:ca:b4:27:fb:cf:c8:2e:6a:65:95:
96:9d:a0:a1:09:ee:e3:cb:8f:90:15:09:39:0b:4d:
23:1a:e8:7d:ce:28:6b:34:2e:d8:ae:0a:3b:8b:56:
6b:f6:ea:1d:4c:20:45:6e:7d:4e:b6:fc:79:6f:eb:
bf:ca:81:7a:b1:a3:38:a3:35:ec:cb:81:66:f8:60:
a6:fc:67:1c:7f:53:e8:af:7b:4b:4d:69:f1:81:e5:
56:cf:e3:11:80:3d:2e:c9:53:e1:2a:60:a5:b2:e9:
4d:1e:b1:68:8a:b6:f8:80:1d:52:73:65:84:03:a9:
c8:be:d5:af:fe:05:b7:f7:69:81:e6:a3:24:1c:af:
d7:91:43:bb:6f:e7:00:95:b2:a2:59:1d:10:64:20:
fd:c3:3d:75:a5:3f:77:9c:ef:2c:53:93:6f:63:47:
66:7d:28:b2:64:2c:7c:31:27:d9:02:45:a7:77:4c:
53:4f:42:c8:2a:7b:a0:30:7b:1c:97:a4:38:18:28:
c3:69:8d:e2:2a:81:33:b0:f0:35:fb:33:a0:84:a2:
8c:ad:a7:ad:eb:7a:14:69:50:d7:52:b5:ab:29:f5:
02:25:95:1c:d9:3c:3e:88:b7:25:b9:36:97:0d:9a:
5f:1a:f6:6a:a4:a6:07:0e:f9:2d:91:24:ba:ab:34:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:31:CA:ED:3C:17:2F:2B:E9:95:97:F6:83:E2:5E:E2:96:4C:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0f3dc46-179b-3de3-a386-867685239b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.241.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:c9:76:f5:7a:7f:68:cf:13:39:4f:38:23:32:94:29:a7:75:
03:22:66:11:eb:86:88:28:a6:98:f0:81:ce:f0:a4:76:eb:4e:
ba:82:83:cd:16:d6:3d:2e:4f:ff:86:bb:e3:f7:d9:33:64:01:
76:25:49:33:00:bf:95:2b:59:4e:76:6f:71:14:79:d1:2a:c6:
92:f0:80:3a:25:0a:5c:56:98:68:91:4a:75:45:a2:a5:a1:26:
96:82:b9:1b:f1:08:23:04:8a:fc:eb:1b:33:dc:b2:95:1f:94:
77:36:f9:b7:df:f3:89:55:a5:7a:7f:dd:4c:ce:cf:47:67:16:
9d:7f:4f:94:ec:7c:ff:35:c9:dc:7f:19:68:7e:96:90:1e:e3:
02:d7:c4:80:d1:e3:93:ce:b0:75:4b:15:e0:55:b6:34:75:54:
f0:fe:44:66:6d:f9:a5:a5:08:26:0c:0f:69:c6:b0:0a:ec:63:
1d:bf:6a:d2:b9:8d:cc:ca:3e:81:8c:35:97:17:e7:bc:26:80:
8e:17:85:78:c0:a3:33:a8:e5:13:4c:78:07:c3:13:76:3e:45:
ad:69:80:86:90:c8:ef:7c:cb:82:ea:b3:da:1d:09:31:da:a1:
9d:77:db:5e:d7:67:c9:95:03:13:90:6a:f4:e1:1c:9f:38:52:
80:3d:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:55 2025 by rpki-client