Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa
File: 239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa (raw, json)
Hash identifier: GeMsf2/sjF2VO80lwGndBotntHjgj4wKRavkYBVkINg=
Subject key identifier: B3:C7:E6:B3:28:FB:85:53:EC:86:72:EF:FA:77:B4:A8:15:1D:60:29
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5289D6987AA4A2AFE0900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.140.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:28:9d:69:87:aa:4a:2a:fe:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=60b6f57f-ef59-40a1-b592-575bf5715b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:2b:ff:05:51:74:55:aa:25:0b:ed:4a:e1:
25:b9:25:62:25:38:15:c1:0b:08:00:f9:bc:33:85:
d8:68:64:87:ca:b2:1b:ce:e3:4d:7d:36:9d:a4:4c:
90:f9:cf:bc:79:03:e2:48:47:5a:71:ec:33:bd:b0:
74:ea:b6:ea:d3:69:63:45:ec:c4:23:45:a6:7f:73:
5d:d3:8f:bd:36:25:4f:aa:62:5b:06:13:ed:dc:49:
60:2f:bd:eb:be:11:39:14:3e:57:44:ed:c4:df:c3:
6a:10:a9:81:78:40:89:72:43:bb:68:52:e6:5a:95:
e2:f2:97:59:e4:20:64:23:65:20:3d:4b:28:ca:5a:
8a:df:de:87:71:03:7e:19:12:08:3d:23:31:cb:f3:
ef:9c:bc:00:5c:9b:6e:b9:f1:63:42:e8:8d:db:17:
fc:19:b4:51:96:16:fa:29:c2:2c:16:8a:c7:cf:e4:
f7:d2:9d:40:e7:91:91:d4:fe:a7:ba:74:14:d9:76:
79:c0:f4:a6:59:b3:8e:9b:00:d3:b5:c5:5d:df:da:
8a:3c:0f:26:34:d8:c3:0b:be:4c:29:56:68:01:93:
0a:9b:1b:17:16:9e:e9:d2:57:54:4f:19:87:fc:bf:
a7:59:0b:78:ed:64:93:49:70:b9:2e:58:de:6f:ee:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:E6:B3:28:FB:85:53:EC:86:72:EF:FA:77:B4:A8:15:1D:60:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:6d:5e:39:81:b1:ce:cb:91:73:c2:8a:45:8d:02:b5:c8:f5:
55:58:26:7d:9a:bc:eb:e1:74:fc:4a:a8:e2:aa:79:c0:ee:41:
eb:88:f5:1e:d8:de:64:7d:26:20:9a:f9:a3:79:1a:5d:82:d1:
00:45:60:9a:6a:b1:bd:93:b2:f2:d2:24:41:91:40:f2:aa:fa:
33:a9:6b:3c:2a:1b:65:26:73:1a:7c:39:90:bc:84:d6:8d:8c:
80:8f:d0:59:77:4d:ca:3f:55:45:d7:9c:f7:b5:b5:1f:ce:e9:
05:22:a6:ed:24:9e:1c:7b:1f:8e:3e:5b:cc:6c:87:76:0d:81:
a7:57:e9:d9:e1:a0:99:d3:2b:8c:86:46:bf:20:11:31:d0:93:
eb:08:b2:03:df:1d:a3:14:8f:f4:c6:e2:cf:a8:e8:ab:1b:4c:
c7:89:e3:29:4f:52:99:5f:51:20:44:cc:cc:c8:9c:fa:1f:04:
32:05:25:61:5e:8e:23:36:21:8e:64:b4:7e:a9:05:57:b6:7a:
4c:a4:32:4d:f7:72:2d:49:57:d2:18:12:76:0d:ec:2b:49:37:
61:49:9b:eb:11:ae:35:ad:04:2d:41:9e:a8:a9:e1:ae:85:ed:
4c:fe:39:b3:40:17:14:c1:98:ab:21:f5:63:8b:1e:53:c8:f6:
d6:9c:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:39 2025 by rpki-client