Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa
File: 07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa (raw, json)
Hash identifier: 98IK1bxG3z3FleLnNI8mMJPvDLFMDbKzvAcsxdd3v5Y=
Subject key identifier: 6A:5B:EF:ED:3E:C7:F5:EA:53:05:49:96:99:EC:67:0B:37:57:99:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D0B40D33374D0F500280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.122.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d0:b4:0d:33:37:4d:0f:50:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8302eabd-7975-4bca-a7ce-3d8b11d2b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:fe:cb:93:ac:fc:7a:18:e1:92:b1:50:f2:
de:d7:53:85:ff:a2:07:17:2a:ba:6d:4b:51:a6:a7:
da:c7:8e:a0:0d:6c:67:fc:f2:33:d0:b2:e4:9a:df:
a4:6a:56:d5:ac:3c:88:67:6e:80:cb:33:b8:b2:1e:
1e:d3:3a:ae:78:06:85:9c:bd:ad:fd:31:35:9e:cc:
c5:bf:a6:28:30:5b:7d:c5:d9:c6:ef:e7:ce:92:34:
5b:39:e0:00:fb:de:5f:1a:2a:1f:49:5b:e7:6a:2a:
be:28:ec:ae:1f:f0:12:88:af:c2:35:41:6e:33:89:
77:ff:46:36:52:32:c9:f5:98:0d:d3:b7:34:0f:38:
ca:17:b7:a6:3a:fa:20:16:70:cd:4e:a8:ef:21:26:
09:33:c8:b0:26:e6:5c:4e:92:43:56:7a:9c:46:89:
8a:a8:14:21:bd:be:c2:91:97:2c:33:07:0e:42:49:
1e:ec:11:6a:95:5d:1a:1b:b8:f0:0a:e0:cc:14:2b:
4e:f0:59:4b:de:e3:ae:2b:35:6f:ba:6b:f3:77:5d:
ec:84:d8:85:22:dd:ed:70:7f:a6:25:e3:76:c5:0e:
07:72:ee:af:98:0e:d3:43:b4:09:c1:b9:76:21:0d:
3e:b7:18:ea:cc:22:5c:f2:73:d1:b7:ea:eb:16:ed:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:EF:ED:3E:C7:F5:EA:53:05:49:96:99:EC:67:0B:37:57:99:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.122.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:86:14:b7:69:5e:4f:a2:e1:51:b9:04:65:4d:78:09:db:ae:
18:47:c0:9b:e0:f4:40:fe:36:66:24:54:52:f9:ea:a7:66:6f:
e2:2f:5e:b6:91:e9:b7:e4:e3:5b:ae:2d:db:34:bc:d0:96:1f:
54:cd:4a:8f:1f:15:56:19:b1:1b:88:bc:45:2c:95:e6:bf:aa:
ba:0c:9d:2e:fa:20:70:f3:65:b4:79:eb:b1:89:eb:df:4b:c8:
b4:09:ab:31:2b:e0:8c:35:54:53:a0:37:e6:85:ac:35:07:b7:
6a:48:45:45:f9:f1:82:9c:39:df:d9:a5:ce:3a:ff:de:bd:8a:
71:fd:b4:8e:4b:28:b8:87:99:64:f2:7b:9e:7d:fb:5f:9d:ca:
e9:9e:1a:5a:81:97:9a:d6:9b:1b:39:ed:c6:89:9f:3b:27:0b:
f7:68:4c:d5:8c:89:61:72:7e:07:20:00:cc:81:67:86:99:66:
26:e3:41:0b:73:c4:a3:b1:0c:4b:c8:5c:a3:1f:01:5b:ba:33:
d0:76:32:ed:9d:73:af:ae:bb:6d:2f:fe:94:e3:33:e1:e9:3f:
7d:ad:0f:de:37:f6:5d:b9:06:24:b4:4d:b0:25:8a:92:f0:95:
bc:f8:52:49:36:a6:e3:93:87:2c:bd:65:78:0f:25:ec:ad:b1:
46:da:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:05 2025 by rpki-client