Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa
File: 3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa (raw, json)
Hash identifier: S1weJpG+T9TQ7BJFzlwzyp4kUwXEf+2V34K+h+CWPY8=
Subject key identifier: EE:75:08:43:30:44:13:28:1F:9C:65:03:5B:43:45:ED:2E:FE:FE:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50CF7B5D51EF899031780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.85.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0c:f7:b5:d5:1e:f8:99:03:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=319e6c8e-402a-47c4-a836-1230adfcfbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:c9:73:96:79:f0:20:ed:7a:33:1f:3e:1a:
1b:5e:71:ba:ec:e7:f6:23:3f:e3:de:70:4f:5d:ba:
d3:00:4d:d4:59:f2:c9:8d:be:21:d6:08:bd:a1:a7:
02:76:e3:8e:07:98:0f:b5:bc:51:5b:c5:bf:d3:4c:
a8:49:df:0e:87:8a:3f:fb:84:84:6d:48:9f:c8:33:
af:db:1f:d9:da:57:11:f8:60:e6:fc:1b:49:39:72:
da:fc:ec:63:cd:a9:40:bb:a6:ae:16:f2:5e:19:3c:
f1:cf:2c:78:8f:a4:b6:c7:6b:8d:05:14:25:34:50:
dd:f4:a2:c2:39:83:a6:86:66:fc:63:1f:b3:0d:9b:
ad:a0:df:c8:c5:68:bd:47:1a:e3:f8:e5:7b:30:88:
49:44:fe:91:44:de:0a:0c:56:dd:e2:8c:86:76:4f:
41:fa:e5:44:8a:83:83:55:73:ed:28:0a:4c:08:e0:
49:5b:87:2c:51:dd:8f:39:bd:5f:13:f3:2c:f8:31:
56:29:1e:d6:6a:da:48:bc:d8:c9:69:5e:6c:9a:9d:
d7:e8:be:04:a3:0e:ef:ae:6a:e2:d9:52:c1:42:1e:
ce:7a:78:20:f1:57:47:cc:9a:1b:75:50:3a:75:e7:
90:29:ab:d2:e3:53:d5:cb:c3:80:21:9c:14:f8:7c:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:08:43:30:44:13:28:1F:9C:65:03:5B:43:45:ED:2E:FE:FE:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.85.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:0f:d2:6f:b6:0d:a3:44:4c:f7:67:af:35:de:01:a3:8f:d4:
84:e9:98:98:03:35:28:78:76:dc:f7:6c:f2:9c:d3:60:48:76:
73:78:21:80:e7:ee:79:6f:2b:02:7f:9a:da:50:e9:db:17:5e:
9e:36:e2:de:0d:87:18:66:41:92:25:a3:3b:af:8d:81:43:02:
95:e1:47:d2:f3:8e:ab:c5:89:72:a7:fc:46:01:e3:76:d9:37:
43:0e:eb:a5:33:84:0e:1e:7c:93:e7:33:8e:56:80:87:a7:e5:
66:f0:df:6e:23:0c:ef:b9:f3:a3:16:e5:a8:aa:ea:6a:81:ea:
97:6c:15:a9:29:cd:b2:23:3b:ff:65:e9:d2:e8:9b:6c:a6:37:
11:a9:6e:8f:59:05:1b:08:a6:bd:21:f4:8f:d3:77:c2:ab:6e:
eb:60:72:3c:3b:d5:95:ae:37:2c:b0:96:d7:a5:8d:1a:11:49:
cf:f9:3a:ce:e8:43:2b:0d:70:24:bc:81:8e:d0:1a:23:ca:7d:
7b:44:e7:82:55:8f:60:b4:f8:18:f1:a5:6a:1d:98:bc:2d:c3:
57:31:e6:11:49:d1:69:e9:f9:70:f8:9e:49:b2:94:c4:f3:9b:
da:ae:3b:62:b6:e2:01:08:74:13:1e:a1:12:7c:88:3f:12:0f:
7d:c8:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:45 2025 by rpki-client