Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c02a9d5-73bd-3b87-ba15-5562eb859939.roa
File: 2c02a9d5-73bd-3b87-ba15-5562eb859939.roa (raw, json)
Hash identifier: SRRx7Gsz8DOz3SNKraQsabpN7Uk8rH4rYjyvLeSDxPY=
Subject key identifier: EE:34:6D:9A:BB:44:99:92:94:6F:84:0A:27:1D:9B:E6:BE:6A:6D:5A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B5CC374E240CA3F6DF480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c02a9d5-73bd-3b87-ba15-5562eb859939.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.104.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:5c:c3:74:e2:40:ca:3f:6d:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=20e61c25-5b8b-4675-9c0e-e164e08b2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:6e:dc:dc:d9:2b:8f:e4:df:b5:f9:25:c2:
a4:88:0c:93:64:ad:f9:7a:f9:a1:34:0e:7e:5b:65:
60:34:d8:79:0a:e6:6e:8e:7f:4b:b4:08:af:9b:d9:
68:4f:74:1b:0c:d5:8f:e1:21:83:9d:d6:85:cc:e1:
20:09:9a:2a:09:0b:d0:9c:0c:01:31:6d:da:3e:e1:
99:63:cd:59:46:1a:7d:6a:06:58:e4:8e:9e:53:d5:
b3:0e:b5:fe:2b:ab:21:56:cb:96:1b:7d:3c:9f:06:
08:30:57:05:0e:6f:8e:ca:91:46:b7:1b:38:2c:0c:
77:a7:04:19:55:ba:7c:e8:f1:5e:15:71:da:79:e4:
33:f7:bc:6b:0c:23:ea:3a:45:58:fb:8b:c0:f5:f7:
5e:44:98:6e:da:47:52:d7:08:88:e0:0f:a0:65:7d:
d2:b9:b6:68:95:66:3e:ad:ba:7b:58:ea:40:ed:dd:
9b:2f:5c:51:43:3a:63:f3:58:74:50:d7:d5:58:ab:
5b:89:1a:16:2e:ac:f3:08:d8:3d:8f:ce:35:d8:6b:
6d:5d:0b:c6:ac:0e:61:3e:30:71:d8:e7:d8:6b:ae:
7c:af:72:d5:58:aa:b3:3f:ef:75:41:8e:13:29:a4:
fe:97:d5:c5:09:b1:f4:2a:14:80:c3:3a:13:4c:e9:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:6D:9A:BB:44:99:92:94:6F:84:0A:27:1D:9B:E6:BE:6A:6D:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c02a9d5-73bd-3b87-ba15-5562eb859939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:19:54:a5:ff:83:45:cf:a6:0c:ad:eb:4e:c6:c6:29:e5:04:
75:07:6e:20:9b:62:7b:46:69:ff:22:fc:33:3f:f2:b6:d8:9b:
8b:6e:1e:38:00:eb:55:18:7b:e5:18:76:e8:fd:61:83:c6:54:
47:e9:e3:59:9f:bb:30:10:8f:b2:85:20:ec:f1:66:2f:23:ad:
20:48:10:1b:81:e3:78:da:a5:64:7d:20:e5:57:6c:80:26:28:
3a:a7:5b:e9:10:69:99:47:4f:b5:a5:23:62:e0:11:01:b4:cb:
fa:1b:67:f7:28:d3:0d:d4:9a:4d:67:1e:fc:5f:77:91:f2:be:
e8:b2:c1:0d:73:68:01:05:4a:7a:9e:2d:33:a0:9a:77:d0:79:
59:b5:c7:c9:5d:ca:6c:58:0f:80:6e:2e:84:54:77:db:c0:22:
12:eb:c5:ea:54:da:50:a5:3f:61:13:11:c4:a5:60:d2:ee:44:
f4:00:65:18:6f:f9:cf:9c:bb:92:c1:44:e1:81:c6:d3:49:69:
3e:a4:ff:86:44:56:4a:8c:41:11:91:35:c6:4f:18:ac:eb:20:
ad:a6:4c:53:04:7d:44:b8:8f:0a:5a:e0:ea:05:d7:b2:28:63:
80:b8:b3:00:4e:fe:42:2c:8b:2c:31:8d:0e:98:8e:85:7b:db:
e4:95:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:13 2025 by rpki-client