Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa
File: 4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa (raw, json)
Hash identifier: z4iWTMlZVwCXJ67eTq0h14p9+Fe9y8gHmgJMPWcd84w=
Subject key identifier: 81:FD:D5:11:4E:B1:AE:89:E9:E2:32:E0:2D:54:11:16:21:EA:9B:C7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4DA22048776274B0E0950
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.132.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:da:22:04:87:76:27:4b:0e:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=13113488-70f7-4aba-99de-a569c6b492a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:49:a9:ae:0f:99:46:34:b8:89:a1:40:ca:
38:62:39:30:6d:86:50:11:2c:00:7f:37:db:b4:b1:
69:84:ac:18:cf:9f:c9:72:b9:29:21:52:61:27:fd:
5b:74:9e:87:d0:b2:a1:a8:88:8c:da:e2:91:80:da:
b7:fe:bf:df:83:d3:f6:31:ac:09:89:bb:2a:62:87:
b5:8f:ec:fa:58:e8:84:3d:29:ed:43:c8:32:0a:fe:
ff:52:ee:05:bf:60:b9:9e:58:ee:a4:68:c7:bc:81:
92:c0:68:a2:ab:99:0b:54:33:b7:51:e7:79:2e:8b:
dc:71:20:07:cc:d4:86:05:c6:78:c3:01:13:a0:17:
d0:6b:23:98:5c:6e:59:0a:25:ea:bd:21:72:f4:cf:
2d:b2:f8:cb:f0:36:85:a0:83:7e:fb:fc:1f:2c:77:
37:39:b6:f4:50:94:c9:60:60:bd:03:eb:3c:42:53:
5e:5b:71:8a:24:a1:5d:98:9f:2b:40:c0:0f:d4:61:
59:4c:ff:82:9d:1d:e2:ca:e8:83:cc:f9:69:2e:6e:
fe:86:19:d9:b3:11:b5:33:98:2f:9c:bb:85:bd:25:
c3:eb:3d:32:f4:c4:32:39:a9:88:26:cc:e2:41:c9:
77:b7:c9:f0:c3:55:26:1e:2d:29:cf:5f:29:b7:a1:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:D5:11:4E:B1:AE:89:E9:E2:32:E0:2D:54:11:16:21:EA:9B:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.132.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b3:33:2e:f1:29:d8:64:40:49:15:c8:12:e4:fe:f4:9d:3b:
75:b1:f8:a3:97:52:4a:64:38:01:57:28:7c:51:fc:65:1b:f2:
a0:52:4d:78:09:13:b4:a8:51:cf:07:7b:f7:db:ad:e6:c7:ba:
ec:61:17:c5:fb:2a:e2:79:29:5d:88:d2:59:4f:f6:db:e0:93:
ba:8b:ba:13:7c:6c:2e:2a:04:e7:0f:44:98:d4:e5:23:ec:21:
a8:2f:bf:83:4b:d2:6f:57:56:a8:3c:cd:ca:83:0f:9c:cc:7e:
ac:bd:f2:b6:50:80:7d:34:67:7a:da:30:6d:7b:19:10:99:d2:
03:02:bc:1d:f1:55:e1:33:e6:11:02:d6:b1:d2:41:70:9e:40:
9f:ad:02:01:a8:41:47:de:83:c5:a3:2f:f0:77:a6:5d:3e:b2:
3e:80:eb:48:9c:80:93:38:ad:53:58:8f:8c:de:0c:28:a1:f4:
ce:32:ea:74:9e:e3:ea:d2:e8:1a:f8:aa:3e:56:e3:5b:cd:9b:
cc:31:f6:e7:23:21:61:66:0c:da:b3:0c:c0:fe:a8:a9:c2:47:
9c:e6:07:3c:92:9a:a1:74:52:5e:aa:23:9c:aa:8f:b8:1a:9a:
26:ca:77:66:95:09:b2:21:cb:3b:cb:c3:af:f6:02:c0:f3:46:
19:f7:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:41 2025 by rpki-client