Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1738cadc-0ffd-3aa4-a2a0-699cf208cae8.roa
File: 1738cadc-0ffd-3aa4-a2a0-699cf208cae8.roa (raw, json)
Hash identifier: LFNq4VltdbGlPCQeATifcHNcRfq2V9Or6gNzz1e0oYM=
Subject key identifier: 32:2F:9B:82:5D:26:AC:EE:89:31:B1:29:1B:64:6B:C8:E3:A8:63:0D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D1421D06671FFA0D0E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1738cadc-0ffd-3aa4-a2a0-699cf208cae8.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.123.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d1:42:1d:06:67:1f:fa:0d:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=9b442977-7f02-45e2-91b6-504eadda6c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:09:36:ff:9b:a1:1f:14:fe:2d:2a:5e:71:ef:
84:58:02:19:d6:05:cb:e0:cb:45:cd:d7:46:34:40:
fa:6b:3c:b6:0d:56:57:d6:81:32:8a:3e:c6:61:38:
fa:7b:f9:31:d0:cb:20:68:2d:20:8e:52:f2:e1:76:
71:32:bd:b8:30:e3:b1:a9:c0:1e:ff:03:84:e0:85:
b5:e9:3d:46:f8:f7:03:5e:a9:58:21:9f:75:0b:f5:
95:21:7d:83:e3:7e:f8:c8:f3:ba:0e:1e:d3:b1:1d:
08:eb:72:37:0f:e4:60:d9:ae:8e:19:24:b0:1b:96:
6d:7d:a2:81:fe:ff:4c:6c:3b:ff:3a:8c:f8:99:d5:
ac:ed:d8:51:b3:b8:30:3d:7b:94:d6:d7:40:ef:70:
fc:72:fd:66:de:09:b6:03:ac:ee:ad:88:b8:08:65:
e1:f6:d1:6a:62:ae:b9:d5:96:77:da:bf:c7:4f:31:
bf:ef:1e:2c:7b:0f:d0:7e:e7:78:4e:88:f4:47:1b:
72:33:5c:80:41:32:35:a3:18:91:6f:16:62:bc:4d:
6e:9d:ba:5d:e0:a9:b9:1c:8f:ee:96:e3:fb:9b:90:
be:05:ac:8b:50:28:11:87:c2:4c:30:4c:72:ba:ca:
24:72:88:35:b3:2f:b2:4e:30:eb:d8:e8:a1:f3:aa:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2F:9B:82:5D:26:AC:EE:89:31:B1:29:1B:64:6B:C8:E3:A8:63:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1738cadc-0ffd-3aa4-a2a0-699cf208cae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:07:65:58:69:66:f6:c8:2c:84:05:de:1d:19:45:d0:6e:5f:
d4:4f:08:10:44:3c:14:dc:d7:50:84:e1:a1:cd:c3:43:4f:c9:
ec:1a:67:eb:40:44:f1:df:1b:f9:17:95:08:ad:08:45:33:4a:
7f:60:3f:e1:da:57:fe:0a:78:d0:e0:0f:d5:96:0f:9f:f7:6e:
85:3f:83:1f:85:5a:7a:14:8f:2f:ac:8b:f2:98:c1:d3:5b:1f:
0c:4e:32:f5:da:96:b6:d5:9f:37:2a:c1:a1:df:c5:b1:06:1d:
11:1d:8b:3b:0c:f1:4d:1f:58:41:bb:eb:b4:30:a3:a5:eb:e8:
76:37:7b:a3:3d:de:a1:0f:f3:b7:21:f8:08:e3:9e:2c:88:06:
c6:c1:ea:1c:7b:89:2f:be:15:8c:d0:45:f5:e7:de:2b:ec:5b:
af:5a:e2:3a:f0:43:66:d1:c5:d4:3a:a2:18:6a:03:b8:49:ab:
7a:ae:1e:16:d8:bd:be:8b:78:08:62:17:dc:99:c6:67:57:ec:
7d:be:fa:87:9a:c5:37:10:27:62:02:30:20:f8:05:ae:fe:f1:
24:73:d6:a3:3b:b4:8e:a3:38:03:0b:77:2d:bc:9c:43:7b:d5:
00:18:03:18:20:e7:04:ce:cc:df:6c:df:68:7f:1e:b2:8f:35:
4f:46:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:05 2025 by rpki-client