Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa
File: 22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa (raw, json)
Hash identifier: sDE8F0CyHPtMbuVyS7Hh2WQ4bDcNm0hg6DYi21/d3rM=
Subject key identifier: 2A:6F:31:3C:68:62:D1:74:6E:AA:20:62:65:8A:B1:F8:F9:C8:BF:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B676D7A482BE983DD9740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.118.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:67:6d:7a:48:2b:e9:83:dd:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=f9c4b761-453c-4982-b15a-48986d1ea577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:99:f9:f2:43:08:82:6d:60:92:1a:59:19:
5c:fd:a5:9a:6c:98:9a:81:fd:47:52:ee:0a:21:13:
a7:be:ca:c4:0e:fe:85:0a:74:9d:f7:53:16:72:c0:
c1:cf:76:ed:23:9c:fc:d0:26:f3:28:d8:9f:76:b2:
17:9b:48:f6:65:e2:d8:c8:2c:37:00:58:9d:32:e5:
aa:2a:da:db:1c:0b:29:e3:3b:7f:9b:aa:ab:4f:a1:
63:27:53:19:ab:02:7b:1c:90:7e:db:0f:a2:f0:4a:
2c:da:73:7a:08:ab:10:b1:ac:0e:ee:f8:90:75:e2:
18:9b:dc:68:e8:40:ff:14:05:c9:3f:ec:4b:fc:e5:
4e:88:d8:0e:f1:6f:69:a0:c4:c3:48:70:5c:70:9f:
dd:a3:da:e5:a5:7b:60:93:b4:fe:35:14:46:eb:2c:
5d:aa:e2:a7:49:4e:c1:d5:0c:ab:33:f1:f9:a4:a4:
25:01:51:22:96:6b:ee:23:ec:77:e6:46:9a:42:9e:
5c:1c:25:11:ce:d7:d5:1a:11:27:5a:17:84:fb:91:
15:04:11:ab:63:93:90:f8:d1:7c:0b:eb:d2:df:6a:
06:5f:db:e8:8a:ca:cb:0e:05:81:6f:b3:62:4c:80:
9e:2d:08:c3:5b:d4:3e:dc:03:2d:a3:04:e1:42:de:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:31:3C:68:62:D1:74:6E:AA:20:62:65:8A:B1:F8:F9:C8:BF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:31:8d:9f:bd:24:58:2e:e0:e1:13:f6:68:81:57:05:44:cb:
cf:d5:be:b3:64:ea:31:0d:6c:81:fe:c5:79:38:eb:1b:9c:32:
99:ce:2c:f3:15:b8:54:13:fb:f2:c1:02:6e:06:09:c0:1d:fb:
98:ed:c6:7a:b0:55:47:70:55:9a:96:37:d7:7f:c1:d6:76:bc:
5d:ed:01:0f:06:6d:f2:09:a7:44:ac:03:26:c1:1b:82:fe:2e:
56:dd:09:a7:92:da:5f:46:23:0e:e9:4a:0d:76:7b:08:16:75:
fb:5d:d7:6f:85:52:b6:cc:1e:a0:b6:df:a1:c2:8e:60:2c:72:
65:34:c5:65:ce:a3:77:b1:e6:97:05:03:1b:8a:3d:32:63:f7:
e8:e0:cd:e8:0a:ec:7c:9c:fc:a0:ff:34:a7:46:aa:5c:7c:1f:
8d:3c:d3:6a:c9:24:21:90:7c:1d:2b:94:58:a5:2a:f3:3b:76:
75:19:c7:e5:71:e9:e3:9f:25:82:dd:21:c7:29:58:9c:19:dc:
07:4c:70:70:e2:20:f7:fe:a6:e7:8d:8c:1b:1d:91:84:68:1f:
0e:2c:49:3c:9a:4a:d1:ce:2c:0d:96:69:fa:c3:dd:f8:7c:64:
d0:02:67:62:8e:eb:5a:3c:d8:4a:87:bb:98:ba:2d:73:0f:1a:
48:1e:1d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:42 2025 by rpki-client