Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/211296f3-c65d-3e1d-ae4a-71f903d2ed50.roa
File: 211296f3-c65d-3e1d-ae4a-71f903d2ed50.roa (raw, json)
Hash identifier: zqx5ZGsphEoGmHUB3zFTjYIP4R3e4FTfuEUES0gh6ZQ=
Subject key identifier: 36:E4:5B:95:F2:03:07:93:6E:B3:5D:9B:60:7F:1A:FA:2A:D3:45:FB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51F6B96AC4747A7C8F540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/211296f3-c65d-3e1d-ae4a-71f903d2ed50.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.141.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1f:6b:96:ac:47:47:a7:c8:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=671fd016-1877-4dce-8df7-ba49128394ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:4a:34:63:8d:dc:2d:16:8c:cc:02:b9:4a:
3c:ae:40:d8:ad:b3:63:a9:fc:8a:44:f4:b0:1e:83:
eb:bd:53:22:fb:17:ac:7f:31:2f:29:b2:b3:26:19:
72:70:ab:84:41:c1:ab:de:64:04:7a:f4:86:0c:0c:
5e:2b:b0:4d:7d:2c:be:e1:80:3c:67:e8:db:20:01:
ff:b1:85:72:ef:ea:88:0b:65:5f:da:55:c3:21:11:
ab:a0:23:9d:a4:1a:25:ef:fe:29:cd:7f:2f:99:ec:
17:df:dc:fd:e1:88:3e:04:6b:9f:c6:75:12:55:b5:
eb:a9:18:6e:75:bf:dc:8b:38:3e:08:9b:d0:c8:6a:
7b:c8:d3:8e:3c:9b:3d:b5:f1:a3:0b:26:8d:02:19:
00:f2:a0:6c:d5:d6:9c:6c:e7:56:f2:10:f5:8d:df:
49:a8:2f:f2:0a:21:9c:27:08:4b:20:58:57:71:af:
a8:76:15:51:87:4c:37:14:98:e8:4e:01:2f:5b:c0:
73:de:1f:7f:cf:e4:f8:a3:49:68:e4:94:76:a7:1e:
6b:71:01:29:38:0c:a4:cc:20:4e:1a:f8:31:21:92:
78:5c:55:6e:48:ee:af:68:44:ab:9e:ee:98:a5:78:
71:a0:c6:6f:40:23:44:44:a6:51:c9:df:c9:d7:49:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:5B:95:F2:03:07:93:6E:B3:5D:9B:60:7F:1A:FA:2A:D3:45:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/211296f3-c65d-3e1d-ae4a-71f903d2ed50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b7:e8:c0:63:a7:77:b4:30:4b:5f:e6:72:f1:6f:cb:e2:1b:
dd:4a:6a:4e:eb:e3:e6:7d:33:18:42:17:32:64:82:9a:1e:47:
33:34:c1:03:a5:7a:b2:5f:74:57:4c:9b:c2:f3:dc:ff:ad:76:
ae:70:da:13:c9:c6:71:44:86:d0:69:b3:41:72:3d:7d:03:e2:
78:6b:f9:f2:a6:f0:ba:e4:44:85:21:2c:27:76:0a:64:02:da:
c3:74:07:87:63:38:9f:ed:5a:d2:c6:41:fa:ed:f1:55:63:5f:
eb:cf:f7:3a:7b:48:11:ec:17:db:7d:d8:c0:2a:76:ef:30:0c:
20:77:6e:57:7c:40:cb:ab:ae:bd:22:b9:cc:ce:a1:e1:53:e6:
05:db:b1:21:cd:ac:0c:68:5c:7d:3e:b1:c8:3d:dd:7c:90:86:
eb:82:8a:5d:9c:1d:ac:bd:ad:12:a7:37:16:0f:ce:62:3d:1c:
4c:19:2c:4e:fb:1c:ab:58:c6:66:d9:d9:73:e7:0a:1a:d7:d0:
4d:f8:ae:b6:f1:46:02:d4:74:12:7c:c0:40:aa:cc:77:74:43:
47:d1:e6:90:6a:aa:6b:4b:d4:9b:3c:12:1e:80:c4:44:31:43:
7d:70:f5:37:eb:35:f5:df:28:d3:dc:a6:59:f3:d0:ba:1d:c8:
52:c3:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:47 2025 by rpki-client