Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cfff033-59db-3938-b5ba-87082300465d.roa
File: 3cfff033-59db-3938-b5ba-87082300465d.roa (raw, json)
Hash identifier: QG52VELokBusGDMekJFTXDNCVuwH4e+fX3mrUuHsiWI=
Subject key identifier: 4D:A0:04:A1:BA:F8:C8:A8:9C:6F:C1:12:00:B6:D5:F8:17:28:DA:61
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F504C4252BB478BF0B5DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cfff033-59db-3938-b5ba-87082300465d.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.99.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:04:c4:25:2b:b4:78:bf:0b:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=4caa7846-79f4-42b9-a15f-e849d3a50242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:d4:f7:99:c0:36:b5:11:26:2a:48:53:2f:
2c:c3:1b:f6:65:e0:93:6a:cc:a0:0f:95:2f:0c:7b:
2f:a2:7c:8b:11:c8:e3:17:17:8f:7a:42:17:ac:8a:
2d:06:53:3e:9a:31:d8:1e:11:ff:b0:a5:0a:f0:9d:
e0:53:85:cd:ad:8d:bb:24:64:d0:4b:88:cc:0b:45:
f4:26:79:d1:9b:cc:ad:f9:46:68:38:0b:05:b8:70:
73:1e:86:ec:aa:68:9b:d1:91:3d:4b:53:b3:86:f3:
95:b0:de:c3:1c:02:96:db:db:c4:6c:1c:a5:17:68:
c8:e7:1c:8f:cf:7d:1d:e8:cf:bf:3a:26:8b:e9:3a:
80:fa:8f:ed:4c:76:82:42:ad:aa:e4:c3:38:d1:88:
68:44:67:21:79:41:20:f0:3a:71:f0:a8:db:16:3e:
55:5d:00:c1:d4:ff:4d:44:5d:93:ad:b9:b7:ef:97:
fd:72:63:33:91:a8:90:b2:8e:ae:3c:e4:17:48:ec:
6c:b6:62:07:d2:15:a4:bc:a4:91:ca:68:7a:7a:bb:
61:dc:46:68:a9:70:52:eb:e5:7a:62:8d:9d:04:bb:
01:7a:78:54:e8:7e:57:e6:63:76:14:b6:ce:3e:85:
7d:86:66:70:71:31:96:5a:63:a9:af:3b:35:ee:28:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:04:A1:BA:F8:C8:A8:9C:6F:C1:12:00:B6:D5:F8:17:28:DA:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cfff033-59db-3938-b5ba-87082300465d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:39:2b:9b:53:89:90:b8:72:97:26:ce:73:47:92:68:1e:03:
06:df:54:20:28:77:f4:14:a0:cf:d1:8b:f0:ed:dc:59:46:ac:
52:f1:98:5b:50:fa:a7:0e:a8:d8:33:57:fc:4c:6b:3b:f0:68:
2e:f4:95:22:bc:18:ba:62:c4:e7:52:0a:eb:64:4d:06:32:df:
f7:c2:d4:f7:4d:c7:e1:cb:8e:47:1c:2a:ed:cc:b1:68:97:1a:
61:09:fa:99:82:07:a4:71:84:86:42:80:8b:bf:7f:82:6b:10:
a9:73:1e:bf:66:9f:b6:73:f1:3d:1b:30:40:13:08:5d:50:3a:
d8:c7:d0:d2:6b:d3:4c:52:34:54:92:48:c4:18:a4:70:6c:50:
80:1b:f3:01:26:18:6a:76:87:84:9f:59:1e:34:f6:16:83:72:
c7:40:61:fa:97:95:9b:b9:cd:65:98:d9:e5:a8:c0:61:77:07:
38:38:2e:f6:76:86:ff:f7:e4:9b:00:32:8f:ee:66:14:49:6e:
3e:32:5f:e8:8a:ae:e6:71:dc:03:b8:a2:b9:08:0f:a5:5b:ca:
fc:7d:0b:95:f0:4b:e7:bc:4b:ca:0b:3d:be:8e:63:39:b7:1e:
59:0d:9e:c4:bb:dc:b9:10:f4:80:0b:08:1f:ea:ee:de:fd:db:
58:f5:90:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:38 2025 by rpki-client