Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16498fd8-1965-3822-9715-43212cc9a2fe.roa
File: 16498fd8-1965-3822-9715-43212cc9a2fe.roa (raw, json)
Hash identifier: +MHXY3gYhShpGtemXR6Xee3kN3DFxl+xTgvqqmPtnLw=
Subject key identifier: F8:D6:EA:77:72:A0:13:D2:63:14:D3:AE:56:EE:1A:39:F2:00:31:16
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F53338376FABAFFCE19280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16498fd8-1965-3822-9715-43212cc9a2fe.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.77.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:33:38:37:6f:ab:af:fc:e1:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=3051cb83-a261-4674-a934-24c4b77447c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:cf:5a:c1:1c:ca:ee:ba:6c:9f:77:56:ec:
dc:5e:77:80:11:3a:d9:d3:69:bb:3d:9f:c9:70:d3:
de:12:ec:3f:80:67:24:71:ff:0d:e3:b2:2d:9e:65:
0c:6f:9f:fd:35:e4:6a:15:3a:a7:3b:aa:e3:e7:c8:
83:87:a7:2a:32:0e:7c:17:8b:0d:e8:4e:d6:6a:2a:
6c:12:66:5b:27:ce:b0:5b:26:13:1d:e0:03:4b:b0:
ac:de:54:06:0a:b5:da:bc:da:7f:3d:36:81:09:31:
09:f2:a7:34:0d:54:39:70:25:6f:61:05:21:4d:75:
eb:38:69:3b:e7:7e:4e:27:32:ca:0a:9a:ec:17:44:
c2:d6:27:5c:b6:2c:14:7a:f3:ab:c1:d6:b9:81:5f:
d5:b0:27:01:52:f2:30:44:cf:84:8a:f7:8d:1a:92:
b6:69:14:be:78:85:3b:9b:04:d2:20:74:92:12:9a:
e5:95:92:25:cb:7d:c9:0c:c1:ad:4a:c8:62:25:78:
e4:de:da:e7:8c:75:34:f0:99:5d:27:b8:35:c5:dd:
63:75:df:d7:79:5f:be:df:6e:e6:4c:70:ca:ca:15:
f3:b9:d2:13:2b:3e:bc:9d:06:3c:fe:98:15:56:42:
47:d7:db:4a:ed:b4:53:00:fc:43:0f:63:6f:91:ee:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:EA:77:72:A0:13:D2:63:14:D3:AE:56:EE:1A:39:F2:00:31:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16498fd8-1965-3822-9715-43212cc9a2fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.77.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:06:7f:c7:e3:01:c1:87:0a:1c:7c:fa:87:52:73:36:a6:5a:
22:dc:98:ac:8d:e4:22:36:6e:4f:da:be:17:d6:2e:6d:0c:0d:
40:db:db:b3:0a:1e:b1:95:39:ae:7e:eb:e0:11:52:22:15:b6:
46:67:ae:2b:b6:38:f0:98:03:69:67:9c:c6:6a:1b:da:4f:71:
39:6a:c6:d7:54:31:01:2c:52:05:d0:74:6d:3e:9b:86:8b:49:
20:26:a6:e3:19:f5:88:bd:3c:33:bd:46:ea:79:bf:25:5a:b4:
0e:1c:f9:23:bf:1b:e3:44:56:6b:35:f4:bd:1e:bb:af:f3:c5:
a3:5a:bf:e8:db:b1:f9:de:1d:2f:22:a2:a4:d6:6d:4d:d5:f3:
05:54:70:f3:95:74:b4:fd:27:a3:26:b3:14:39:e3:b7:ad:41:
55:61:d7:b2:cf:18:4e:aa:5c:a3:29:f7:54:db:aa:58:69:a7:
a2:6e:01:19:b1:e5:11:44:b2:60:10:4a:5f:d3:7f:6a:3b:07:
d1:9a:f1:23:9b:00:71:ee:98:d5:d1:69:93:69:f4:25:65:4f:
9a:3b:83:a1:4e:90:41:21:f8:25:98:9b:d7:aa:51:53:4b:18:
c4:2b:c7:1b:4a:15:2a:dc:84:64:6a:cf:cb:3b:1b:56:20:c6:
0b:7c:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:25 2025 by rpki-client