Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fdce603-0479-32ce-8cb5-0cf024468bc2.roa
File: 3fdce603-0479-32ce-8cb5-0cf024468bc2.roa (raw, json)
Hash identifier: s4jScZUkf9sppS/P33UfMSmnNzr5j1DdZvXjgv3VAw0=
Subject key identifier: 4C:0A:7E:15:11:4C:C5:AB:64:ED:70:91:DA:C5:A7:C1:A3:80:88:58
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4ED29E9FA40524C332680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fdce603-0479-32ce-8cb5-0cf024468bc2.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.74.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:ed:29:e9:fa:40:52:4c:33:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=0f7c0f8c-f191-4e4d-9b1a-c0dd530696ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:89:ff:80:bb:9c:1e:90:a1:18:09:2d:e5:
f4:dd:29:68:60:3c:25:63:ad:d2:bb:79:80:25:42:
e1:86:5a:15:31:5c:fa:39:0e:45:bc:19:31:01:57:
c0:10:38:79:33:3e:15:eb:59:91:87:03:44:58:60:
a2:8b:da:56:9a:37:10:46:4e:fb:ac:42:13:c4:79:
6d:75:f7:04:2d:db:7f:10:e6:80:7b:b8:35:78:1c:
8e:26:e8:2e:83:06:84:30:2e:51:66:5d:4b:9d:e7:
98:3a:df:0e:50:14:8f:69:2e:7d:42:89:9b:3b:04:
79:27:b2:ed:a5:14:b7:2b:09:5a:a6:b8:6b:06:62:
6f:e5:99:40:89:e6:2c:fe:54:ce:77:72:2f:87:56:
ee:3f:ca:ea:91:ae:80:f1:92:a6:99:f3:85:42:20:
7a:63:ff:1a:98:32:4d:fc:c5:85:4e:43:0a:8e:9d:
44:6c:41:86:35:fc:cf:7d:c2:7f:df:a4:aa:50:74:
0c:1a:64:57:92:35:ae:40:35:f4:f2:8f:a4:20:07:
c0:4b:7b:75:fc:8f:18:18:b7:e7:ad:91:d6:02:b7:
6c:e9:98:d0:12:e5:2d:47:c8:04:7d:64:bd:9d:58:
17:05:ad:71:79:1e:ae:42:3b:48:65:ea:1d:38:ae:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:7E:15:11:4C:C5:AB:64:ED:70:91:DA:C5:A7:C1:A3:80:88:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fdce603-0479-32ce-8cb5-0cf024468bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.74.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:43:8b:d1:0a:13:23:50:c2:d7:4e:88:77:6f:3c:56:ab:50:
ff:c8:f3:6f:5d:e2:fb:b8:74:c8:13:1d:4b:ce:5d:77:19:8b:
10:be:6d:8c:0f:51:f6:5e:ca:58:fd:ee:4b:ca:0b:3b:e8:d1:
12:b0:ff:df:23:1a:fe:b9:92:c3:ec:ea:5d:ee:71:e3:e5:8e:
41:ed:2f:cd:58:8e:3c:4b:f5:a3:03:c6:77:e5:0b:17:f7:30:
53:50:01:ce:f2:46:fb:94:51:a4:08:96:f2:8d:99:93:31:31:
a6:47:07:32:5d:a9:a5:1e:f6:9c:18:f6:d5:28:01:60:0f:22:
0d:20:47:b0:c5:21:4c:da:15:28:78:d8:55:03:f8:f7:22:9c:
77:c2:dc:77:4d:fd:39:a1:3f:3a:83:3e:39:cb:5a:59:73:cb:
59:4b:39:db:30:f4:62:c0:ae:eb:db:e6:f7:20:55:3a:9e:4e:
9f:a0:06:e5:34:8c:0f:03:21:e1:66:be:ce:30:22:f6:6a:31:
c5:f1:49:76:60:fa:16:37:a7:39:36:9a:0f:38:c6:02:11:cd:
6e:88:da:a4:e8:dc:df:52:5b:7c:fa:8b:af:83:4b:31:19:82:
6d:16:12:09:dd:12:e4:80:29:88:36:f7:ff:38:c7:fc:5a:8d:
22:24:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:11 2025 by rpki-client