Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa
File: 4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa (raw, json)
Hash identifier: sXeW4RZWy48zin9CmzmS8QYkRwLXrEXb1dt3Z3JZK24=
Subject key identifier: 71:DB:5D:9C:6B:67:E1:FD:48:AD:AD:42:AE:A8:95:E6:17:B2:8E:5A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AB76EEC4D945CE993B300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.118.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b7:6e:ec:4d:94:5c:e9:93:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d46ea33f-82a8-4d12-b6af-ae63a87fdef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:6e:ac:2e:b9:89:73:fc:0e:d6:9d:ac:dd:
42:de:ee:67:ca:6f:f9:68:d0:7c:30:3c:0c:9a:6c:
63:62:68:ac:01:c5:fb:c8:af:f4:ea:9a:7d:59:c9:
e4:c7:71:7f:7d:b3:16:3e:98:4e:3b:c7:36:4c:28:
2f:e1:81:1d:ec:54:b3:f6:9d:3f:ab:af:0d:e5:bd:
54:69:e9:c8:4c:ac:c8:6b:d8:4e:5a:e2:73:d7:eb:
81:4f:d4:7c:f1:ab:28:f9:1b:67:80:e7:76:f0:d0:
20:56:ad:61:1f:7e:5b:f4:1b:ec:ec:ec:e2:36:13:
79:36:e9:68:1c:5c:b3:73:d8:84:98:1b:0d:8c:f4:
cf:01:33:2e:6f:c2:c1:63:01:55:68:bb:90:38:46:
7f:1a:f8:cd:4c:7e:e2:8c:4a:ec:49:e2:1e:21:ed:
67:b6:ba:d1:d4:86:74:9d:72:24:e1:74:2e:be:c3:
dd:92:b6:0e:6d:05:2f:1c:51:7d:22:97:22:60:47:
b4:b0:72:94:a0:70:e5:c7:43:f4:20:95:ce:51:86:
d4:1c:c9:e0:db:48:61:a8:38:7d:d9:94:2e:93:05:
4d:44:47:a9:24:e1:49:28:f5:99:19:2d:7a:73:a5:
f8:29:eb:c1:d9:37:d3:01:c8:86:04:f6:42:32:0e:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:5D:9C:6B:67:E1:FD:48:AD:AD:42:AE:A8:95:E6:17:B2:8E:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:10:a2:36:18:dc:b4:fd:9c:76:78:07:e2:aa:10:1a:8b:43:
79:4c:d9:00:ea:a4:63:9b:7d:d4:d0:8b:20:30:4c:f8:79:8b:
56:73:b5:d1:a1:a7:3c:85:53:a7:b0:41:43:9e:e4:14:32:d8:
49:0f:01:d9:e2:20:32:5a:6b:13:6d:d8:a5:6f:af:42:f8:56:
b0:9f:3b:bf:de:10:46:cf:78:f2:7f:43:d6:5f:85:5a:7b:11:
80:28:08:d0:83:1e:00:18:cc:5b:b8:7e:91:93:46:72:00:d0:
a6:80:1c:62:bb:73:1b:e6:2c:53:93:b3:8b:aa:9f:ac:28:73:
6c:9a:35:59:2e:8b:0e:7a:67:fc:49:3b:af:aa:df:e2:6b:24:
f1:0e:1b:18:a6:77:ee:84:6a:f6:8c:b3:b2:a3:c2:96:09:b0:
e7:7b:ec:ab:b0:d2:db:4b:fd:a2:e1:cb:85:88:c2:c0:af:9c:
8a:16:6a:17:6d:1e:dc:07:66:9f:01:d0:78:e7:a2:97:fa:39:
24:c7:0a:35:2e:05:44:ea:5f:38:ee:e2:8c:6f:b2:52:d4:e9:
35:87:ea:a1:13:aa:10:0a:04:76:99:d3:ef:37:6f:56:ff:b0:
13:38:5d:17:e3:b4:a8:6b:eb:70:12:02:20:0d:56:aa:8e:c0:
8d:8e:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:28 2025 by rpki-client