Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa
File: 0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa (raw, json)
Hash identifier: B6mJs8HG6VRQRhoN/MYrWPoVocuUBdyD5+Cv8JIJpfQ=
Subject key identifier: FB:70:76:DB:AD:81:44:D0:24:7C:96:47:C5:88:68:D7:69:51:2F:AE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50F39920603A5018F63EA
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.82.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0f:39:92:06:03:a5:01:8f:63:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=b467b95f-8389-43f2-bcba-b717fbc7ff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:89:76:36:b2:65:d0:c8:04:f7:66:0e:8f:
ff:51:30:3f:fd:88:ec:62:30:25:58:68:9f:17:8c:
a0:cc:54:40:7d:0d:c6:3e:dd:cf:e8:68:19:54:e5:
83:a3:d8:b5:3a:b3:52:a9:80:78:7f:38:bd:2d:7f:
42:a9:cf:b5:8f:5e:eb:51:f4:48:e4:63:f7:55:c0:
e0:f8:2b:87:9f:43:4e:f0:83:4d:d1:5b:97:c4:71:
1c:15:5b:4d:a2:5d:e6:c1:ad:c8:66:23:56:cc:f0:
f2:52:57:73:66:f2:9d:93:01:8d:a3:85:b7:91:4a:
3d:7a:a2:ee:a9:85:9b:60:cb:1d:e5:45:8b:ea:4f:
4f:e3:7e:15:9b:57:48:d1:90:76:d1:14:72:2f:32:
4d:32:71:04:4c:f3:3b:1d:00:05:66:5f:63:43:fc:
6d:4c:38:4b:67:17:66:a5:ce:48:d8:40:71:e2:20:
b9:88:d6:ba:96:7d:99:9f:5d:de:d8:47:dc:0a:b5:
bc:e9:65:e4:83:60:44:58:bc:f1:cb:9b:ac:46:0d:
21:b5:ca:6c:f8:56:e3:8c:13:3a:64:92:ca:26:b0:
bc:fe:79:86:95:6e:23:2a:4b:38:29:f0:e0:2d:78:
c6:78:33:3b:83:d7:05:f4:85:ca:b8:c6:b0:52:d2:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:76:DB:AD:81:44:D0:24:7C:96:47:C5:88:68:D7:69:51:2F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.82.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:85:09:68:ec:88:24:25:ab:8a:ec:fc:29:c3:2c:c2:a6:ef:
a9:ea:b1:4f:24:63:61:eb:cc:d3:37:cb:4f:4b:af:d8:86:94:
7c:68:11:4b:6d:a3:18:e0:97:1c:8b:6e:ab:fd:26:95:f4:6c:
d0:fd:a1:15:c2:cf:39:30:53:e1:bc:de:5c:05:d8:39:7c:b2:
a3:2b:80:3e:10:d4:cd:0d:69:78:96:d5:ca:c1:4c:09:69:98:
de:85:6b:0c:59:2e:f2:27:08:57:b8:5a:f1:c5:62:c4:46:f9:
d8:1f:fb:ab:f8:b8:85:da:c9:25:50:c2:85:2a:6a:54:a6:33:
b7:c7:47:76:b7:02:1c:dd:7c:7c:96:d6:c0:3f:fe:78:7a:20:
aa:24:c4:c7:50:90:37:ab:46:ae:c5:3c:07:c1:84:a3:de:b6:
ff:04:5b:7d:f5:96:fc:7b:38:8c:f9:9e:f7:a6:52:54:09:4e:
ee:95:6e:a7:37:ce:76:ce:df:4e:17:3d:f4:af:e4:c7:c8:ef:
42:d9:d3:a0:02:1b:0a:d4:5f:c6:41:d1:07:67:7d:e4:f3:21:
40:58:c9:40:c1:1f:77:67:55:da:fc:a0:7a:ad:e3:2b:b5:e6:
8d:5a:48:67:72:30:33:98:50:7b:50:23:49:1c:aa:3f:c9:56:
b6:51:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:30 2025 by rpki-client