Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b10094d-60a8-3ccd-a134-24709eb861a4.roa
File: 0b10094d-60a8-3ccd-a134-24709eb861a4.roa (raw, json)
Hash identifier: Z2QhHwTcukO0THX6/n/xhUteAS6MuLPrTLvU3ry4z4I=
Subject key identifier: D4:AD:72:1B:C4:ED:9C:AF:0B:9C:76:C9:99:77:E8:E7:6F:05:23:8F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F519B4FE9F3FDA7E4E1E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b10094d-60a8-3ccd-a134-24709eb861a4.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.91.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:19:b4:fe:9f:3f:da:7e:4e:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=23db784a-7506-4499-bd2b-69c6896800c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:11:74:e8:bf:e0:8d:9a:af:d9:5b:12:12:
0b:16:18:54:40:b6:e0:29:f2:6f:4b:13:a5:24:93:
f9:ba:38:aa:ae:99:39:69:3c:5f:84:b3:46:fe:0a:
c2:4e:8d:0b:9e:ac:f4:89:37:f9:b4:ca:e7:da:21:
da:17:f0:10:a5:97:e2:b8:3c:16:64:c8:28:80:63:
b2:a8:1f:d3:35:9c:49:6c:57:53:bf:9b:b1:32:45:
0f:52:ea:a8:69:ee:e0:7e:3b:f2:dd:50:8c:c4:6a:
bc:5e:50:a4:10:4c:d8:1f:21:86:9f:b9:39:31:d3:
c9:cf:91:52:a5:44:6b:47:97:b9:ae:3b:c7:dd:5e:
ef:f8:2c:81:9b:30:3a:c5:76:cd:00:63:f5:71:79:
38:6a:70:3d:ce:bc:53:b7:4e:a9:d4:20:02:40:5f:
93:ee:fb:3c:4d:1f:0e:1a:72:fe:fd:37:f4:38:4e:
e6:ce:5c:08:05:ca:ef:e2:94:a2:16:34:05:9c:64:
eb:d0:7e:59:65:1a:47:52:aa:8f:c7:b2:10:5c:e2:
c6:85:45:06:54:4f:f2:37:4f:5b:33:23:74:39:1c:
e8:54:75:bc:3d:cd:32:c3:37:2b:3c:6e:0c:34:21:
ea:b3:24:19:c0:78:8c:af:21:b2:83:56:38:94:bb:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:72:1B:C4:ED:9C:AF:0B:9C:76:C9:99:77:E8:E7:6F:05:23:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0b10094d-60a8-3ccd-a134-24709eb861a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.91.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:36:fe:3d:6e:37:cc:c9:28:ad:57:3d:c9:30:22:7a:80:61:
d3:86:a0:85:4b:b4:dc:16:3f:da:b4:f8:ec:41:3c:67:68:de:
9c:5d:6e:bd:b5:9a:26:c8:81:8f:29:28:ae:bf:4a:35:40:74:
4e:a5:37:96:ce:a8:d0:31:90:61:f9:49:05:e5:4a:01:a5:45:
e8:3f:b5:5d:6a:4d:01:e4:18:28:a1:dc:19:39:3d:7c:d0:1b:
48:b1:35:ed:fc:25:a6:ba:a6:f6:b4:ec:bc:f8:04:67:5e:4c:
f0:e0:85:db:fb:f2:70:79:8d:54:fc:cd:ae:1f:87:25:3f:35:
9d:6a:f6:ae:b1:b9:75:41:d7:0d:aa:a1:51:00:4b:0f:01:a5:
c6:e0:47:22:66:bf:7e:d9:23:c2:ab:10:6c:5c:36:b5:97:61:
6c:1a:b7:29:f6:44:7f:48:2c:65:f6:e5:29:3f:2a:5b:97:c4:
35:b6:66:72:3e:ca:66:89:9f:73:50:b6:b1:d4:2e:f2:99:d1:
eb:5f:5d:82:78:e7:0f:df:55:db:86:03:5b:c6:1e:2d:8f:6c:
0f:e0:70:f0:58:db:c1:12:a4:c9:c5:3c:65:35:4c:07:e2:f8:
31:11:a8:17:5d:e1:ce:83:de:82:cc:85:83:a4:00:ac:3b:1a:
49:d2:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:04 2025 by rpki-client