Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54767253-b64a-3ba4-9eef-c2c770b9afcc.roa
File: 54767253-b64a-3ba4-9eef-c2c770b9afcc.roa (raw, json)
Hash identifier: zm66FRSZG5ZXWvyqoT9dEfIlu2QNNLUvOLa52KC7z7M=
Subject key identifier: 92:6E:DD:94:87:42:76:4D:D0:17:D6:3D:D9:04:0A:9C:AE:68:93:67
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D06A58932D8669153180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54767253-b64a-3ba4-9eef-c2c770b9afcc.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.147.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d0:6a:58:93:2d:86:69:15:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=777c5447-37a7-4c02-9b53-455ad3bec5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:c3:25:a9:d8:de:39:23:e3:25:c2:b9:5b:
3f:b0:16:44:50:ff:79:6a:b0:2a:a4:2c:35:ed:8f:
80:b8:22:b4:3c:58:d3:6a:3a:f2:17:f3:69:56:28:
d2:25:35:ab:41:5c:2e:f6:80:bb:fc:fc:9d:f3:9d:
59:ca:1e:38:f7:4c:e1:6c:c7:2d:00:ce:dd:0c:8a:
e5:e8:8b:0a:61:50:e3:e2:8e:78:ba:2b:b9:41:f4:
27:fb:2a:77:15:21:f4:56:44:8d:75:6b:24:e6:7c:
63:f6:3b:20:06:a1:fa:5e:2e:4c:09:6c:f4:8a:dd:
37:52:8b:ac:10:b8:3d:89:f5:11:24:ad:55:d1:7d:
cb:13:04:7d:24:17:5e:fc:d8:6b:13:16:fd:ce:36:
3e:81:9f:1a:71:22:e7:c2:ed:02:68:88:54:d4:bf:
b1:68:65:b3:2d:cb:38:ad:a1:03:98:b8:14:27:74:
26:bc:91:02:bc:48:c2:65:26:90:fd:ed:30:f8:d0:
21:f0:f6:57:12:34:f9:5f:db:0d:31:83:71:db:80:
45:31:4b:6c:66:6c:d6:4c:9b:30:88:f4:4e:07:9b:
d9:64:09:42:75:6e:f1:f7:3e:ef:26:e9:7a:e8:71:
64:47:2f:39:b5:fc:5f:41:d8:92:d5:c9:35:e7:f3:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:DD:94:87:42:76:4D:D0:17:D6:3D:D9:04:0A:9C:AE:68:93:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/54767253-b64a-3ba4-9eef-c2c770b9afcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:bf:6e:e4:2c:f7:c5:b7:39:04:79:d0:81:cd:93:02:b9:e3:
df:6b:5f:36:a2:bf:36:0a:22:c5:65:e3:bf:9e:f8:3d:5c:78:
2a:b8:62:2a:83:c5:b4:35:87:b1:f1:34:6a:f4:e2:32:c8:5a:
1c:cd:d4:42:e6:23:2f:08:11:25:c8:7f:48:a6:85:d6:65:58:
ff:04:92:36:1c:0d:64:f5:5a:c3:98:c0:83:f0:c3:88:d7:65:
8a:b2:32:15:1a:56:fe:cf:24:e2:20:43:cd:4e:5f:c9:b3:cc:
e0:00:b3:ab:78:2e:57:7b:fe:4f:7d:e2:7b:e4:0c:1d:b8:52:
59:59:44:60:d5:bc:9e:52:84:56:90:e4:01:59:f1:81:82:73:
04:d8:db:cb:3e:59:21:90:7b:29:74:f8:b6:af:01:b4:d5:86:
e3:b7:c3:c7:76:63:ed:fc:1a:b5:04:5f:88:1d:d6:92:a4:9c:
bd:63:0b:fa:37:b7:e4:b5:c0:18:a8:f3:f4:a6:5b:66:a8:35:
45:72:1c:94:be:c1:b8:77:45:81:40:84:05:96:02:4a:c4:e1:
22:3f:f8:5e:58:bb:a4:77:04:dd:b2:71:54:61:a4:d1:60:79:
8e:4e:8f:60:b0:3d:d7:9f:a3:aa:4a:5e:4f:b4:93:bd:cf:93:
3b:13:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:27 2025 by rpki-client