Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa
File: 1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa (raw, json)
Hash identifier: X8PkAvfSE21rQFdKwpF2/4W7F6zI0EiMEMmSM74na6w=
Subject key identifier: 49:6C:F6:9D:66:6F:42:8A:09:5B:70:1E:ED:5D:66:3A:B9:AD:C6:D2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AA191296A213CDF16A640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.101.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a1:91:29:6a:21:3c:df:16:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=92a4747f-d679-4d59-ba32-9d48fd5b6d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:0a:15:9b:db:a8:34:ca:e1:96:5f:24:36:
db:23:3a:4d:d4:f6:f5:fc:d0:1e:4f:7b:98:1c:c3:
a9:bd:59:dd:10:3c:3a:85:6b:a9:6c:bc:48:4a:09:
30:55:b1:da:ba:e4:d9:bc:46:41:97:9e:2c:d7:14:
09:ac:ed:88:13:f0:a4:f3:97:cc:5e:7b:25:89:b8:
00:07:7a:e5:97:f2:cd:94:73:4b:ae:9d:62:6d:9e:
9e:f0:fb:a9:27:c8:0a:b5:59:f7:ab:61:77:1b:55:
6e:8e:94:bb:c0:83:d0:a5:f1:7e:b1:95:ba:5f:48:
d1:66:0a:68:10:73:6c:35:bf:a7:87:95:51:70:c7:
1f:2d:d9:8e:de:38:ac:bc:0a:f3:6d:04:17:19:86:
7b:2a:23:bd:41:5f:42:d9:3a:d5:51:09:4f:5a:53:
88:cc:02:e6:80:7c:cc:49:c8:1b:7d:4c:78:43:d0:
83:cd:7d:0e:25:97:27:9d:7b:85:37:37:19:5c:c2:
1c:71:42:83:9b:de:9b:7e:65:9e:dc:99:c6:84:3e:
36:72:4d:4d:29:6b:18:d5:9d:84:fa:c2:73:9b:6e:
28:f5:ea:c4:90:a9:ba:04:5c:54:86:bb:88:bd:af:
eb:fe:7d:0c:4e:fd:a6:2a:f6:5a:54:2b:ba:8f:3b:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6C:F6:9D:66:6F:42:8A:09:5B:70:1E:ED:5D:66:3A:B9:AD:C6:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.101.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b7:60:c4:c6:72:dd:95:b0:51:e9:6d:02:0e:ac:8f:27:c4:
45:71:3d:4d:b5:4d:b2:7b:37:61:55:2c:7f:f6:d6:97:f7:f1:
ef:d8:a0:7d:98:bc:cc:06:a1:d0:53:2e:d2:c5:2d:de:b4:75:
7f:38:76:e9:e1:62:b6:3c:b8:1e:d4:1d:b9:f8:5a:f2:08:33:
10:7a:c1:1b:28:72:18:f4:fa:aa:68:56:b0:e4:65:fc:b9:99:
fb:5d:11:02:a3:2f:f7:10:40:3f:64:c6:6d:d0:a2:97:3a:ad:
31:2d:36:85:d7:92:7f:94:73:8c:b4:47:6d:4a:eb:be:d6:60:
ec:b5:53:64:aa:c0:e1:d1:82:80:39:10:ae:a9:a8:52:77:45:
eb:e7:0e:04:8a:40:c2:f1:c5:65:bc:4a:0c:47:8b:f7:1a:d6:
d9:02:96:fc:cc:08:fc:07:ef:a6:2d:24:42:03:08:43:da:cf:
8d:d9:e1:0c:8c:96:c3:06:d8:0c:12:54:b9:8f:7b:79:e8:96:
55:6c:2d:e5:8d:ad:d7:29:ab:1d:40:b7:83:3b:aa:d1:88:48:
cc:0b:78:17:46:b6:02:07:76:f5:0f:7c:84:57:88:7c:91:a7:
11:e2:4a:7b:a3:ce:51:90:c4:f7:b0:60:51:5b:1f:55:a5:2c:
d7:01:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:07 2025 by rpki-client