Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa
File: 2b99a575-c696-3d6c-a848-88522920f0c5.roa (raw, json)
Hash identifier: Dp0m0HUmdKaAtxFDDgOQEvCmUUQhUbjMmrqvHn1shd0=
Subject key identifier: 0D:20:76:51:C4:B0:7E:CF:67:F8:79:AD:90:6D:F4:9D:D8:EE:6C:94
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50DDB602F90A2766B6890
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.136.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0d:db:60:2f:90:a2:76:6b:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=081ce5d7-4f42-40cf-ac57-794a3fe21777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:29:3c:32:e9:fe:95:50:16:7d:7c:57:8a:
b9:f7:2f:34:d8:f1:5d:e7:75:35:37:95:0c:d2:64:
69:13:ad:3d:ca:85:af:c0:65:b9:32:f1:0f:ff:16:
9a:44:73:dc:83:93:88:67:ca:d0:b2:cc:b6:cd:a6:
85:55:21:cb:05:8f:7f:d4:78:83:2d:3a:3e:96:16:
4b:dd:37:74:53:b1:50:9c:00:89:09:22:73:07:8c:
22:18:d6:3b:b4:c4:6f:b8:d1:5b:b2:1c:cf:ba:ee:
55:de:ac:ac:a6:0d:81:df:cb:64:97:bb:a9:5d:4c:
2f:6c:2f:c0:51:c8:42:80:e1:dc:92:6b:16:fe:d9:
5b:63:c4:50:11:94:2e:50:d0:eb:47:a4:5e:e0:01:
86:69:60:f5:05:72:e2:b4:f0:7b:18:38:4e:1f:51:
56:ab:64:fd:90:0d:33:6a:64:39:01:56:06:6a:4e:
00:6b:25:78:34:84:3e:ef:7a:3c:dd:9e:3f:c6:dd:
59:18:86:9f:b3:de:25:9e:01:a9:79:82:4e:88:6d:
ca:a3:71:9b:9b:8a:b1:21:28:8c:b4:40:fe:4b:43:
95:45:9a:6e:a2:4e:ae:2b:e6:12:e1:a0:3b:9d:2d:
41:c4:f4:1c:c6:f7:16:57:f4:91:86:98:d0:c6:e8:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:76:51:C4:B0:7E:CF:67:F8:79:AD:90:6D:F4:9D:D8:EE:6C:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.136.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7d:90:74:30:1f:47:28:c8:25:89:b0:56:a8:ae:b0:84:9d:
cc:d0:31:f6:ec:c0:cb:1c:0f:6f:36:36:99:eb:79:7e:b0:26:
bc:4d:f0:e8:35:36:be:a8:e5:05:f2:bf:80:95:3f:73:e2:1b:
67:10:a9:b6:3b:d2:43:c3:15:63:c2:d0:8b:b4:17:79:49:ba:
fc:f8:86:67:ca:44:72:e7:16:fc:d4:ff:0a:de:4a:75:a4:99:
f5:0c:79:4d:40:31:32:1a:ac:7f:36:b1:32:09:07:03:19:e9:
2b:e1:23:f3:da:71:71:8d:c2:8f:ef:ff:85:a5:a7:79:37:47:
cd:83:42:d5:58:e9:4b:c6:00:5b:c6:03:c7:64:09:59:b1:ed:
f8:f3:dc:6d:7a:a8:a1:a0:05:ae:66:69:a6:2b:77:dc:df:06:
1c:49:5b:0d:47:fd:e4:89:5e:74:fd:27:74:45:e9:9a:ed:69:
2b:65:f0:9d:a2:6f:a9:a7:ff:61:ef:53:2e:38:2d:c5:9c:95:
93:53:ff:0e:81:b7:1d:9b:1a:0c:96:c2:4f:60:d1:0a:d0:2c:
be:96:88:ea:96:9d:ce:c7:93:66:dc:7c:1b:3e:79:08:67:f5:
ca:32:c1:29:57:ee:9d:c3:c1:aa:ab:27:e6:6f:4f:ec:17:ad:
8f:fc:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:12 2025 by rpki-client