Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46523abc-2f67-3d91-b371-c9ddbc646e32.roa
File: 46523abc-2f67-3d91-b371-c9ddbc646e32.roa (raw, json)
Hash identifier: HWEWT+GD5EEKjxLPuB4A8/nYbMsLSom0i9SAnrFFhOE=
Subject key identifier: 71:D6:C4:65:DD:71:98:1A:80:6B:7B:78:C2:C5:B9:23:81:97:9E:C8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51D8F98A7FBE15B01905C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46523abc-2f67-3d91-b371-c9ddbc646e32.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.75.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1d:8f:98:a7:fb:e1:5b:01:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=28a86bab-4173-452f-9e1d-d5c134a2bddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:ab:f4:a4:87:60:00:48:70:2c:16:23:af:
d3:fe:cb:a5:a3:e2:86:7d:07:1f:b2:c7:8b:25:34:
de:56:15:9a:e4:fb:b6:ce:ab:23:50:da:8f:fa:3f:
a2:b9:c5:60:74:d9:83:43:77:0c:5e:7f:96:3b:94:
4f:7e:9c:1c:e7:60:f3:3e:e8:1c:3a:2a:b9:f2:d0:
f9:ff:25:71:24:75:80:c1:51:23:ee:66:3f:24:7c:
d8:2f:45:f4:c0:7e:9a:ce:d8:3f:a8:0e:79:a1:07:
98:fd:16:6f:37:1b:4a:4a:b6:2c:5e:41:e9:ac:ad:
33:88:c1:ba:90:06:cc:84:46:b6:67:cc:f7:ed:18:
7d:53:31:e3:08:a5:1b:58:42:19:50:09:db:c4:53:
62:9c:0a:17:04:c6:09:43:20:ef:60:07:66:8d:32:
98:8b:63:70:c2:85:78:5b:51:0e:1b:ab:02:ff:a9:
a0:8b:48:81:82:08:18:d0:a2:1f:2a:05:5a:62:57:
67:5e:57:55:97:23:94:85:dd:ba:45:f3:21:85:76:
76:58:2d:71:1e:f0:0d:60:a7:32:1a:d0:e5:5a:a6:
ab:09:ca:ff:fc:30:78:48:88:d1:f4:10:86:89:b2:
05:55:fa:f0:e5:c9:88:7c:76:fb:47:2e:30:f4:9f:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:C4:65:DD:71:98:1A:80:6B:7B:78:C2:C5:B9:23:81:97:9E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46523abc-2f67-3d91-b371-c9ddbc646e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.75.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:02:5f:c4:7a:89:f1:84:52:86:0d:90:66:bf:88:86:08:26:
43:f9:06:4f:2f:7d:22:b2:32:94:bc:7d:c2:ae:e5:fc:dc:68:
b3:78:03:d1:a4:36:e9:e7:95:a0:f9:6d:84:77:0f:0d:f5:9c:
04:b9:d8:d8:ce:b0:0b:b9:a9:ff:f2:e1:57:be:3f:95:f1:cf:
ff:ad:13:3a:75:2e:c6:be:cd:ee:93:37:8f:86:86:ce:7d:a1:
35:85:2b:df:2a:18:47:92:2d:35:be:b0:f5:78:b9:f6:81:b7:
ef:02:db:05:71:da:65:e0:1a:14:4e:14:d5:bd:8a:37:46:82:
05:af:c6:e1:bf:0a:7e:4c:d7:9a:2e:ea:dd:75:f5:90:9f:59:
ec:47:35:db:50:63:31:70:eb:61:ed:dd:99:54:d8:1b:cd:da:
46:83:d8:b5:fa:b9:5f:92:a5:69:f4:63:6b:38:0a:aa:a8:f7:
7c:a1:c5:92:e5:7f:c8:72:1f:99:57:4f:d3:08:4b:34:92:a2:
14:75:3c:23:25:f5:67:2e:c3:1d:0f:c6:6d:38:c7:66:5b:4d:
1a:39:36:bb:a8:b8:02:b9:52:3d:66:5a:17:fd:98:2b:ba:bb:
33:45:02:a0:a3:68:ed:7b:be:e1:60:6b:d8:3f:85:69:ca:57:
74:83:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:26 2025 by rpki-client