Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16082838-3f3c-3a5e-a24a-1adca7c1004f.roa
File: 16082838-3f3c-3a5e-a24a-1adca7c1004f.roa (raw, json)
Hash identifier: vUXdJFRVdzSI90AH/ubftYmHA95WOYCENLbvjR/DN6I=
Subject key identifier: 16:3B:A9:13:53:CF:7C:C8:23:AF:8B:AF:96:F3:33:B7:44:7A:22:D1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4E77E2A0F0F87EF281400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16082838-3f3c-3a5e-a24a-1adca7c1004f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.144.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e7:7e:2a:0f:0f:87:ef:28:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8dd5fa84-ae8a-456e-b829-173b6da2fa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:35:f1:b4:fa:b5:4e:f3:e4:b7:99:a2:47:
c4:c2:31:bb:08:e7:57:a2:b4:20:7e:b4:2b:2a:1e:
80:6a:c1:cd:d0:ff:39:a8:cb:f4:08:db:ca:64:d1:
43:87:9c:57:74:90:b0:eb:f9:8e:77:1c:b4:cc:c2:
67:fd:2e:b8:58:fc:cf:e7:35:da:b1:8d:33:a8:96:
91:e9:5f:05:ec:90:e6:31:7e:d4:ca:18:f0:ec:3e:
34:33:ef:3e:59:ab:dd:4f:e6:1e:da:1d:f0:94:83:
50:26:95:d6:0a:aa:97:67:77:ac:12:09:87:58:b6:
a1:97:f7:3d:2c:1f:a1:d2:3b:44:ab:47:a6:45:00:
5c:47:ee:6e:cb:89:4e:34:e0:1f:6d:35:37:d7:f3:
e3:d3:23:91:97:1e:30:cd:d3:37:85:cf:a3:b9:54:
06:75:de:c0:5a:96:5f:5f:25:b5:ff:4a:17:fb:a3:
38:00:16:8e:99:19:18:4d:85:4a:50:51:79:44:ef:
fb:b1:91:e8:45:4c:12:2f:15:24:65:47:20:92:6b:
ed:16:8e:8e:af:d9:60:84:a2:dc:37:17:ad:ad:37:
c1:d8:33:c9:ad:9e:25:e7:6f:77:c6:95:0b:04:ed:
6f:a5:5d:1b:f1:58:fb:ba:34:56:db:9c:66:0d:45:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:A9:13:53:CF:7C:C8:23:AF:8B:AF:96:F3:33:B7:44:7A:22:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16082838-3f3c-3a5e-a24a-1adca7c1004f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.144.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:5b:e1:8e:84:61:8c:cd:68:cd:61:3a:d2:73:a6:a5:9f:9a:
25:45:e8:6f:59:6b:f4:46:d8:ba:e7:38:2b:a7:1b:2f:ed:52:
d1:d3:b7:b8:b6:40:29:24:51:54:68:1e:1c:a8:0d:3f:f9:c9:
2f:7d:ff:e5:2d:14:75:2c:4e:0a:52:d2:32:1c:dd:86:12:ff:
a1:1d:2b:cc:61:d2:63:cc:f2:50:0b:a9:81:86:15:f5:f6:24:
18:7d:c5:f7:88:bc:60:84:7d:0e:66:db:0a:20:0b:95:d6:d4:
41:7a:15:ee:9c:0b:1d:0f:8f:11:71:57:ec:c0:75:9a:10:bd:
e2:cf:95:3c:8f:8b:42:b7:48:d3:48:9b:ab:35:a2:b2:0f:af:
2c:fb:58:f2:ba:38:b2:b9:71:8f:e0:c1:e4:55:05:c0:7b:2f:
78:f3:6e:9a:39:59:06:d6:57:c2:65:46:5c:5a:3e:66:ca:f1:
a6:06:c7:5b:65:68:d4:6f:f3:d9:71:a7:f0:5c:73:e7:63:1e:
79:50:25:4d:d4:c7:bd:24:76:96:55:73:fd:75:4f:42:24:67:
bb:0c:48:63:87:4e:92:a9:67:ba:c4:a3:1a:49:f7:c1:00:bb:
c6:88:a9:49:bb:64:72:78:d8:37:4e:85:c8:14:f4:0e:96:d2:
17:d6:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:39 2025 by rpki-client