Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29650520-7691-3e21-9cb8-9d232a0fde5b.roa
File: 29650520-7691-3e21-9cb8-9d232a0fde5b.roa (raw, json)
Hash identifier: Igu5fcGb2Ay6K3Js/qkn2eGQ8FW7kY3ZBX4s9t6WC/0=
Subject key identifier: 7B:AD:FC:B0:1B:F8:78:25:70:38:C1:17:77:98:40:C2:1C:10:9F:6A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858481C9A93CDEC28EBD862A85F30
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29650520-7691-3e21-9cb8-9d232a0fde5b.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 19527
IP address blocks: 34.0.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:93:cd:ec:28:eb:d8:62:a8:5f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=09a782ad-ac32-48cf-a8fb-0e29bb7588f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:93:68:4e:d6:86:9a:70:71:18:5e:ac:0f:
f1:b8:3f:46:7a:e8:2e:89:01:cd:1e:92:2a:1c:dc:
f3:15:33:7f:f8:09:40:36:01:36:fd:35:46:e6:19:
d1:05:bc:95:81:bf:7a:22:95:64:10:68:b6:b4:1f:
e4:f4:56:2e:28:88:0b:eb:ba:e5:2e:55:bd:55:6c:
e2:de:59:ab:88:d1:47:93:6f:92:46:9e:1a:f0:38:
e7:ee:bf:76:06:e9:07:22:c8:da:5c:c1:f5:c9:5e:
50:c7:9c:93:d7:a6:ea:98:68:e3:83:e8:72:02:23:
09:49:96:da:50:14:33:6c:3c:90:95:a4:d8:2f:f3:
7c:07:09:00:46:22:de:d3:01:74:91:15:8a:46:c9:
0d:45:88:a2:51:49:78:8a:e4:cf:ce:c7:07:b0:92:
5a:96:74:9d:a0:73:1d:7a:75:f6:68:53:83:6f:f4:
ff:b8:2a:15:af:fa:12:3b:76:44:32:c8:44:93:80:
51:a8:d9:ff:62:96:e7:92:37:ff:d0:9e:6d:ce:08:
d5:15:1d:5a:ea:25:fd:d8:0c:cb:80:8e:e4:4b:ab:
0a:da:25:fe:57:80:12:62:d4:9e:c3:c3:2b:34:a5:
c4:3d:74:42:08:30:f3:4a:f1:db:0a:c9:bc:43:1c:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:FC:B0:1B:F8:78:25:70:38:C1:17:77:98:40:C2:1C:10:9F:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29650520-7691-3e21-9cb8-9d232a0fde5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:5f:67:3c:db:7d:b4:8b:96:a2:2f:63:70:c3:bd:e0:c4:f4:
eb:9c:aa:4c:66:52:4b:e3:fe:c8:13:9e:d6:c9:98:a4:0d:3e:
77:c5:f9:7d:25:4a:af:2d:4b:b7:1c:23:fa:04:b4:7f:65:b8:
79:e2:df:b0:30:dc:28:b3:4c:e8:d1:31:c3:e5:96:ec:49:a8:
68:80:b4:34:a6:d6:d2:a9:6c:6d:86:67:62:50:25:d8:76:0a:
89:ca:34:33:fa:02:77:f7:2b:48:48:84:2a:11:67:37:5c:9d:
8f:d1:df:68:ef:ac:b7:9a:f3:67:47:a6:32:76:05:4a:08:0b:
82:a0:d1:c2:86:e3:87:fb:0c:d5:76:71:ea:42:e9:ff:78:e9:
e9:ae:0d:c2:0b:1f:1a:c9:61:60:89:0e:a3:56:1d:9d:b1:6c:
04:f7:3f:9b:e7:43:80:ab:88:06:1d:9b:ec:fa:d8:a4:8a:90:
a4:c4:e8:6b:20:c6:ec:52:c5:48:4d:46:09:bc:99:1b:cb:8b:
a5:9e:dc:c1:b7:87:cc:8e:ce:9e:a3:c8:0f:a0:4f:9f:3b:bb:
4b:f7:37:26:40:fc:3b:7b:67:75:47:37:ce:9b:95:ab:4e:ff:
45:51:1e:a7:ea:db:5f:9e:a5:ef:e5:1c:3f:97:35:a4:b2:78:
59:20:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:34 2025 by rpki-client