Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa
File: 168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa (raw, json)
Hash identifier: GcDMyrtqLg+xriy3py4Rd2p6g0Z4mRHzbmcweFJ5dI0=
Subject key identifier: C6:52:5E:4A:E1:95:C4:8A:8A:B1:C8:DB:5A:C4:97:FD:72:6D:17:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F7E17F01ED3D07263F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.122.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f7:e1:7f:01:ed:3d:07:26:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f1c1ad25-fedf-4f5b-a007-4f74ec359006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:3a:62:68:6a:26:f6:a0:09:d9:1a:c6:1a:
22:a7:30:b8:cb:4c:cf:bd:01:28:fb:dc:e5:bf:62:
f1:08:bf:c8:73:8b:49:5b:54:22:f9:48:d0:4b:aa:
71:ed:3c:2f:5e:90:0b:0b:f5:24:07:47:13:a5:59:
55:c6:81:34:7c:24:10:74:7d:d3:84:47:8d:1a:20:
9c:f0:ff:3b:8b:b8:24:09:b9:75:1c:fb:7e:55:60:
21:cf:83:8c:03:1a:48:84:a9:18:8a:d1:e0:f5:f0:
f2:24:f8:2e:cf:0b:6a:5b:e7:89:76:02:bc:cb:6f:
2c:be:c0:36:5c:a9:77:a8:10:ba:4d:51:04:e8:75:
86:a7:80:bd:00:bd:03:8f:00:dd:17:60:ea:79:e1:
9c:08:56:98:92:52:42:67:ca:1f:7c:d1:23:a6:2b:
6e:5f:fa:e2:15:61:f6:74:2e:b3:99:4f:b6:b2:3c:
53:df:26:bc:df:5f:7a:d7:60:5c:dd:42:7b:6d:08:
4c:f9:d0:00:af:a6:36:26:67:1b:bc:a2:ae:2a:a3:
a8:e7:bc:a2:93:17:43:0a:e2:3c:26:b4:9f:de:e9:
ce:d3:e1:1e:13:70:8c:6c:48:a4:2f:b3:99:ea:0e:
03:fb:05:cf:64:5e:dd:ea:3f:71:f3:2b:7b:74:49:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:5E:4A:E1:95:C4:8A:8A:B1:C8:DB:5A:C4:97:FD:72:6D:17:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/168ff51a-8c4b-3f08-a1a3-3478d7a61c11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.122.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:5c:bd:56:e2:de:c8:ce:31:2b:85:bf:8f:75:ac:a8:07:a1:
6c:82:a9:a8:0d:e7:09:43:90:d5:ae:06:78:8f:65:2b:ae:f6:
26:ab:d3:8a:e5:af:10:d8:da:54:e1:91:73:9b:d5:9a:af:56:
0b:f3:fb:1b:d7:50:c0:dd:2d:d8:dc:ec:e1:66:32:19:e8:32:
c1:cd:b7:b3:de:8f:9a:f1:54:e3:fd:80:7f:cd:bb:2d:e0:6b:
cd:65:2f:6a:66:64:8f:3f:56:29:4d:10:35:e4:72:e0:95:0c:
7e:5a:63:31:d0:fc:b9:ca:c4:bf:3f:d6:38:f3:02:e7:aa:0f:
a9:3a:50:28:a6:58:c5:75:d0:8d:e4:47:9d:ac:a0:47:6e:30:
5c:8f:c3:18:de:9d:64:53:af:db:e5:1e:48:a7:e5:c3:64:06:
b3:4f:90:69:74:f2:c5:70:12:8d:f4:f4:7b:eb:5b:f8:ea:c8:
fa:62:36:69:18:de:24:6a:69:0b:59:04:5c:24:5a:65:92:4b:
08:37:fd:73:fb:db:a3:7d:c3:3f:50:89:c4:c5:ad:b6:71:af:
47:3b:8d:66:aa:e2:95:c5:c6:f9:75:43:7b:a1:52:2a:d9:a1:
01:ce:f1:87:b4:02:f8:0c:d5:db:12:08:37:8a:51:c4:63:26:
50:49:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:46:53 2025 by rpki-client