Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/012daa8b-2662-399b-a651-b34d5147ceb6.roa
File: 012daa8b-2662-399b-a651-b34d5147ceb6.roa (raw, json)
Hash identifier: 3ECP0zMsnT8YQ/T1B8dGSNa75Fq4KpaJZQRNRH2nNAY=
Subject key identifier: 00:BE:5D:D7:C7:73:59:93:DD:1F:07:A5:4A:1F:23:90:3F:ED:CD:1F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50E86301BFA9896EEE980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/012daa8b-2662-399b-a651-b34d5147ceb6.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.124.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0e:86:30:1b:fa:98:96:ee:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=eef9d972-e422-43cd-9175-50a6489b00c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:0c:53:26:b3:7a:d4:68:a0:39:06:43:85:
8c:cf:bd:f6:fd:66:0c:08:24:3c:a3:eb:e5:45:4d:
ff:8c:38:63:b8:43:30:fa:7b:e5:48:7b:db:5b:de:
2c:b5:0b:b6:45:60:d6:86:4c:27:10:72:18:7b:aa:
f6:c1:69:3b:76:7c:b9:f4:1c:c1:a3:68:49:34:1c:
28:b1:c4:cf:83:22:7a:9a:f8:7a:17:e8:ba:29:50:
1a:f8:80:66:4e:c8:26:9c:95:d2:78:ab:3a:1a:c9:
18:c9:83:9e:3a:06:08:7c:c5:93:08:53:b8:e3:93:
62:b2:14:1d:b2:54:52:46:d3:4a:6c:1a:25:13:a3:
fb:5e:59:4b:0e:4b:18:c5:df:d9:99:28:50:b0:73:
3d:48:3c:19:cb:8c:04:69:9d:b9:cd:5a:16:8a:e5:
42:c0:aa:59:02:bd:ed:c1:af:3b:09:dc:89:70:42:
4b:54:89:84:8e:65:0d:53:a0:43:99:2f:f9:c3:03:
95:96:01:5f:3b:f0:dd:5a:c1:25:2d:69:87:fb:38:
2d:55:ef:f9:da:2d:f6:ea:1b:8e:5a:24:d2:1c:21:
4b:fa:ce:09:07:13:39:de:a7:13:0c:29:bf:4d:4d:
3f:7a:ff:ac:6c:4a:0b:ac:ca:74:13:b1:88:4a:69:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:5D:D7:C7:73:59:93:DD:1F:07:A5:4A:1F:23:90:3F:ED:CD:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/012daa8b-2662-399b-a651-b34d5147ceb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c2:3d:16:a4:cd:cc:a4:08:fa:65:2e:dd:91:aa:8a:10:24:
a5:eb:4a:1a:4b:72:88:f7:0e:07:c5:32:06:7f:0a:1f:4b:99:
94:b6:ee:1a:a2:67:a0:fc:c5:90:3a:eb:22:0b:ad:68:d0:11:
37:df:d2:9c:fc:61:02:e9:54:6c:20:c9:0f:5e:5a:b5:87:50:
76:f6:cc:0a:e4:ae:5c:1f:74:d6:a5:c6:34:03:19:f1:b6:58:
d3:d2:3e:3e:db:af:ad:4b:50:97:ab:a1:8b:78:83:0f:12:c5:
83:fe:96:8a:be:1f:2c:d0:7b:65:ad:02:05:b3:1c:dd:62:4b:
13:28:f5:cf:36:c7:e1:0c:4f:f1:62:7e:cb:5e:0c:dd:90:cf:
f5:36:75:6c:70:66:d7:49:1c:97:82:4c:3f:f2:68:b2:d0:19:
9e:be:86:76:aa:60:72:27:49:33:3e:fb:0a:d4:93:f4:92:a1:
82:48:68:e7:77:db:c6:66:a8:37:1c:5b:3a:88:06:c7:4f:c7:
12:61:14:b6:8c:8d:4d:7e:53:36:09:a2:00:a4:a6:30:83:6f:
af:74:c6:03:1d:50:55:ca:1a:4b:a1:10:a6:0a:f0:4f:53:39:
06:c8:64:46:5e:70:cd:12:18:d2:bc:72:3d:07:64:17:ad:75:
76:b0:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:15 2025 by rpki-client