Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b844d92-d5f8-394b-be56-c7e0ec19decb.roa
File: 2b844d92-d5f8-394b-be56-c7e0ec19decb.roa (raw, json)
Hash identifier: XsB1xxDbqd8g44gDD7sPSySV+5578I1G2Hd0y3qfogw=
Subject key identifier: 61:1E:E8:B0:94:A8:D0:F0:49:26:5A:DE:E1:91:D0:0A:DC:C5:BC:77
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848653045777986031E001E3180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b844d92-d5f8-394b-be56-c7e0ec19decb.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 19527
IP address blocks: 34.1.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:45:77:79:86:03:1e:00:1e:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=22b04524-993e-4bfd-955c-0d1b752f1a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:92:6e:02:57:eb:5b:89:0f:5f:99:6e:60:
5a:e5:3b:b5:8d:c0:a5:bd:25:fc:84:2f:24:c9:77:
c6:47:bb:17:53:83:eb:ce:98:67:a7:72:dc:22:4e:
75:70:4d:88:8d:7b:74:b1:61:95:12:c7:87:87:61:
fe:de:4c:94:8c:71:9d:46:9d:de:71:b8:5a:68:d0:
9b:0d:5d:97:01:66:44:cf:13:27:47:62:c7:bf:58:
10:e7:a4:a4:4c:35:1d:df:d2:5b:e9:04:95:d0:22:
af:74:f2:07:83:cc:39:b6:5b:33:8f:14:ec:6e:3f:
5b:bd:34:5b:5a:e5:1f:19:3f:d4:7a:85:40:45:11:
9c:87:58:7f:6b:16:a4:66:5e:46:f3:e4:ba:1b:d2:
ac:41:68:a8:62:0f:17:d2:1c:fc:c4:89:44:7e:95:
2b:8f:73:07:4d:54:30:42:49:b2:74:14:0a:69:f4:
cc:c6:5e:1b:62:2e:0b:fd:df:80:6d:5a:56:a8:77:
3c:52:56:86:d3:1f:cf:c4:5c:7d:c8:e2:6f:92:75:
ab:d4:f7:70:18:87:8b:dc:24:48:d3:4b:4f:4c:97:
11:12:b4:34:a4:b3:31:8d:b8:13:05:be:11:a6:70:
5e:d9:c5:d2:76:f5:c7:a3:ad:42:01:c6:d0:80:06:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1E:E8:B0:94:A8:D0:F0:49:26:5A:DE:E1:91:D0:0A:DC:C5:BC:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b844d92-d5f8-394b-be56-c7e0ec19decb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:46:60:39:77:63:77:b3:42:b6:4c:04:a6:65:61:c4:82:2b:
c7:cc:c9:85:c6:43:68:7f:a4:47:a4:9f:87:6d:66:d3:91:0c:
69:24:cd:e2:38:2f:76:2d:c9:4a:f0:84:72:5b:33:9e:01:82:
f8:dc:ca:a9:b6:54:d7:e5:58:0f:32:7f:aa:bf:71:3b:d1:3d:
2e:4a:af:71:d2:fe:08:bb:73:be:7f:1b:d1:74:ed:51:8a:1a:
c1:b4:95:b4:ac:d0:d1:df:bf:92:a3:52:ad:23:a6:ad:fa:a3:
fa:78:8d:6d:3d:f9:ea:db:6e:e6:80:fa:f4:9c:83:ec:f9:d4:
f9:d5:ed:41:7f:26:9f:40:b5:56:47:5a:a8:19:0c:89:10:9e:
bf:1b:0e:82:ca:03:02:9e:f9:73:7a:b0:e6:a1:e0:05:42:09:
8a:95:ee:05:49:ba:0c:c6:8b:1a:d3:71:1f:90:6f:b6:2b:d3:
54:c7:9b:d9:7c:29:de:24:0e:04:4f:93:7f:a6:ef:ec:8b:0f:
2b:11:fb:30:b4:ef:c0:af:fc:d7:40:d6:db:15:a2:96:06:bc:
03:56:94:a5:ca:71:97:7b:c6:cc:df:0c:3a:1a:8a:af:4d:ad:
24:e4:f7:07:0a:e0:66:c1:a6:87:b7:03:df:64:69:5c:3e:3a:
97:c3:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:21:01 2025 by rpki-client