Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa
File: f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa (raw, json)
Hash identifier: o76hNdDVUdVXmtPgFNbhzRo0SGk2/zG5S59Gl0YnT0M=
Subject key identifier: 27:39:D2:0B:0B:7C:05:41:EC:AB:D9:39:2F:0A:9E:4D:37:8D:A3:F1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C2103FF34C9C1319FC280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.203.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:21:03:ff:34:c9:c1:31:9f:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=7d46f808-f85f-45d2-a069-8c17921ff53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:86:44:73:5c:5e:c0:a0:0a:e4:53:1d:7d:
73:4a:56:59:9e:83:90:a0:ca:fd:42:25:3c:47:6b:
df:f3:e3:bc:e5:46:14:08:27:38:22:b8:50:e5:02:
77:1c:f9:06:bb:56:87:d2:19:35:01:32:9a:b2:e8:
16:ea:d3:20:09:26:f3:13:f8:4c:aa:3b:cb:54:e1:
74:eb:25:de:58:c8:b4:28:65:d8:1b:81:cb:db:41:
68:04:c3:a9:2d:80:c5:41:46:88:64:c4:e4:e4:75:
df:96:ec:9f:6b:73:54:83:83:f0:e0:c5:ef:eb:4b:
91:eb:e9:ce:c4:f9:ed:c8:e5:bb:0f:0c:57:d6:ef:
31:7a:b5:12:70:11:2c:69:f4:c4:31:e9:a6:a3:5b:
c3:f1:51:8b:14:42:b2:4d:11:4a:ae:8d:1c:fd:65:
9b:a1:a8:e1:3e:26:3e:65:94:6e:29:38:f2:16:23:
83:60:9a:43:6f:ac:ac:02:52:5a:43:87:0e:14:e9:
90:ad:af:b5:20:c2:64:e9:5a:65:02:0d:c4:d5:13:
67:c3:ee:07:57:74:27:94:96:5f:19:dc:ec:7e:7c:
59:6d:cb:c1:dc:29:56:bb:49:96:60:74:6f:20:46:
f9:24:16:ca:ff:9c:38:22:92:11:3b:d2:7e:39:91:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:D2:0B:0B:7C:05:41:EC:AB:D9:39:2F:0A:9E:4D:37:8D:A3:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f151f2cc-8811-3fa1-a496-c5dc19995ab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:f5:73:f4:a3:24:5f:70:77:41:fc:4f:fb:a7:b9:0b:e5:9f:
23:ae:c3:92:b4:a1:83:f5:27:11:d3:6d:6a:12:af:d2:41:f8:
d1:d0:41:99:a4:64:4e:c6:78:6d:91:17:b0:70:b7:9f:3b:9f:
fa:24:6a:79:df:91:8a:4f:75:0b:78:f1:4f:6f:62:a4:dd:d8:
9e:f4:2a:63:2f:20:de:79:d2:e2:63:dc:9a:01:b4:80:6d:95:
36:89:cc:6d:a7:a2:28:c2:da:75:ce:4c:e6:6f:94:f3:ca:73:
55:fc:f5:ac:e4:8f:17:e9:0d:3b:f4:dc:eb:c2:0b:e9:45:25:
86:c3:98:57:b7:49:40:b7:cb:a9:5a:42:06:50:fc:f6:39:20:
fe:0c:d5:23:9e:d1:58:a6:61:17:cc:0b:38:7a:71:29:c5:f3:
54:10:33:87:1f:16:23:c5:84:a3:d9:1f:f5:31:04:7b:79:9e:
d9:8c:f5:00:8f:f0:fb:70:5c:66:ec:12:2d:af:3f:8d:35:fe:
0c:80:6e:55:c7:b4:02:14:d6:57:d2:0f:24:cc:97:40:e1:30:
e3:e4:62:69:e8:6d:f2:a4:05:a8:22:32:24:f3:32:87:d3:6a:
4a:88:fe:8a:26:28:81:f2:d2:4b:5e:8e:3f:ae:d9:6b:f8:a4:
0d:df:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:05 2025 by rpki-client