Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa
File: 23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa (raw, json)
Hash identifier: coXypGi4emoWqSGDIctAwcjYotXEMaPcIQaXKjPYcR8=
Subject key identifier: 6F:73:AF:04:0C:36:98:C4:59:09:0C:25:C2:93:A4:36:CE:A2:1B:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4DE33F9175D8B8BC28D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.132.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:de:33:f9:17:5d:8b:8b:c2:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=87fe751d-05aa-46fe-b2c1-f283a755df0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:b0:6a:4b:20:53:33:12:80:7f:90:95:4a:
f3:60:72:b0:48:93:47:89:89:bf:f9:b0:19:8d:31:
b3:54:2f:b4:66:d8:16:bb:94:67:21:4e:b2:55:35:
5b:53:53:1f:d1:30:40:62:5b:23:07:fa:f2:20:aa:
9b:b7:2a:77:2d:b3:d6:b8:56:02:53:7f:84:10:6e:
2f:82:c8:21:16:15:5c:f3:53:ce:67:0a:b5:f8:c1:
15:e4:c9:13:f0:3d:d7:22:77:69:6d:54:58:11:9c:
86:9b:6b:54:97:e9:ac:35:aa:27:31:50:c2:a2:9d:
4d:dc:b0:0e:ed:a8:6b:18:a2:2a:73:09:71:b9:87:
7e:ce:8b:d6:be:03:7f:ca:5f:cf:bd:ef:7f:4e:4a:
d1:ad:de:b7:2b:02:e7:d9:53:92:21:4b:f0:85:25:
9a:7d:30:4f:21:7d:f2:72:09:75:0f:8c:17:f0:59:
0d:ba:68:51:7f:32:9a:93:dd:16:dd:b4:7f:1c:92:
3a:77:5b:4d:73:99:4a:82:4c:5f:d5:fc:89:65:79:
16:38:df:db:e1:3f:e9:ba:38:46:5d:8f:51:59:dc:
57:28:bf:23:95:e1:71:02:78:82:d7:99:91:ae:8d:
ce:9a:bb:4a:9f:8a:4f:2c:f0:25:11:01:36:75:1c:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:AF:04:0C:36:98:C4:59:09:0C:25:C2:93:A4:36:CE:A2:1B:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23653c0f-03b1-37a0-b88b-046adb1f2eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:81:45:09:a0:f7:09:5c:cd:2c:6f:97:49:4b:71:2b:c1:2d:
ce:57:73:b0:86:13:4a:3d:d2:1d:45:59:75:b4:a8:d3:65:c5:
f2:a9:8e:2b:eb:07:01:ae:af:ce:f8:b6:bf:a6:63:de:ca:be:
41:84:ac:5f:25:04:1c:ce:88:25:7e:56:94:90:f3:52:47:53:
6b:0d:bc:d2:86:47:93:35:78:7e:a1:b4:94:48:03:e6:e8:35:
15:70:3f:d7:4a:26:62:b7:93:88:65:13:01:8f:2a:6a:17:9c:
dc:fc:33:c9:a1:15:27:9f:ca:87:b3:24:b9:b1:a1:e5:58:94:
8a:64:7b:1d:43:f4:75:1c:70:5a:93:40:1d:6c:7b:91:94:db:
43:f8:98:ab:41:a1:ed:a3:47:81:a1:64:6b:97:29:8f:c7:56:
62:05:09:29:e9:7e:5e:0f:f5:69:a4:a4:4d:40:88:6b:6c:61:
cf:01:30:14:14:3b:89:f5:73:ef:3b:5f:ce:6b:c8:11:0e:1f:
28:f3:98:5e:18:47:3f:42:b2:f5:34:61:66:e4:4f:1e:75:8c:
a0:41:57:eb:bf:65:2d:56:ea:6e:ec:ce:45:44:29:65:f8:f2:
6e:2e:23:a3:e2:73:11:83:c1:0f:8d:b0:01:fc:61:6a:9f:3d:
4b:57:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:19 2025 by rpki-client