Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa
File: 5d882b6f-6155-399f-a616-a5e871d1bf1a.roa (raw, json)
Hash identifier: hptplz9B3I4fFboH9L/ouLKezWA+xoysxZb4LZXIZaY=
Subject key identifier: 09:D5:89:CF:2E:42:C8:3E:B3:0A:C9:27:22:EA:73:D3:A0:47:83:E7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B4437652E4AE3DDB77180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.119.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:44:37:65:2e:4a:e3:dd:b7:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ec36808d-cec8-4ff2-b2d6-6cb67be74213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:b4:b2:68:12:a9:52:94:26:34:03:1f:17:
55:09:e7:d2:ea:a4:06:07:0d:17:d7:5c:e0:25:21:
59:19:cf:20:dc:cd:be:d8:8b:b9:be:7f:b5:bb:20:
e2:16:cc:af:77:0b:86:21:0e:ca:7e:3b:70:32:cd:
3e:c4:f6:a7:5f:13:cf:71:34:cf:a6:0d:9b:5f:f6:
de:4d:c7:9c:3e:8d:ec:6d:a9:e9:7d:be:47:5b:bc:
02:b4:3f:4b:c3:fd:81:3a:e1:8e:f8:ed:ed:88:38:
06:fe:fe:0d:cb:ab:ac:7a:f5:7b:7f:e9:67:57:09:
53:ae:cc:77:67:c6:3f:e5:13:86:ba:d3:40:f4:ef:
e6:f6:3f:81:ee:5d:13:91:c1:a6:d3:f7:92:87:b3:
1c:8f:9d:6a:96:1b:0c:5d:2b:6a:72:4b:7a:1d:9e:
4c:9e:1b:94:a0:cc:ac:79:78:e3:a0:1d:15:7b:dd:
49:f7:7f:1e:1d:a6:45:af:27:44:0e:4c:ec:f9:bc:
a9:18:9a:42:de:51:5b:76:d3:d3:da:c1:ba:f0:5a:
be:fa:33:27:a0:fb:dd:46:7b:21:e4:65:67:a9:46:
93:39:68:fc:34:0d:da:80:50:01:8d:d3:c7:30:ed:
2d:1b:bc:44:76:ed:ab:47:8f:25:9e:18:a9:8d:a0:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:89:CF:2E:42:C8:3E:B3:0A:C9:27:22:EA:73:D3:A0:47:83:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d882b6f-6155-399f-a616-a5e871d1bf1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.119.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:b7:50:20:94:f2:87:30:44:10:12:5e:ed:0a:8e:78:b7:72:
91:6a:8f:0c:32:13:0d:29:2b:4c:59:c6:5f:06:e3:f1:0a:72:
25:2b:b7:b8:48:5f:74:c4:1c:e6:90:f8:a5:aa:7b:20:2f:b5:
fb:9d:f0:be:cd:0d:c7:1c:1c:19:6a:d2:bd:94:52:58:2a:b0:
f3:1a:e5:63:e5:ae:14:d1:63:c8:9e:6c:73:c2:90:c9:37:a6:
cc:ea:6b:73:26:5a:98:08:50:3d:fc:79:04:b9:b6:5e:a8:17:
af:ef:ac:b4:c3:b4:97:07:e2:fb:cb:76:f6:87:e0:a2:09:1f:
53:7e:7c:44:be:47:6b:e9:35:65:8d:17:aa:38:4a:0c:0f:ba:
c4:31:f4:4a:08:d7:14:d5:e9:d8:4b:55:7b:6e:80:94:33:dc:
ae:ed:79:c9:f5:eb:fa:35:0a:ba:db:fe:57:2e:36:f4:92:b4:
a2:3d:25:83:30:46:7a:ff:f1:c8:e2:6c:45:96:86:fe:95:43:
cb:dd:9a:cd:8f:60:2c:1c:f5:c3:00:cc:ba:40:0a:fa:e2:49:
26:8e:06:5e:fa:d7:a7:9b:ba:bb:a5:cc:fa:ce:67:3a:2b:21:
b7:3a:55:c2:33:5f:79:e7:b8:08:de:a6:7d:6b:85:12:e9:08:
35:a7:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:25 2025 by rpki-client