Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/642f6a47-875e-3f6e-85d1-93d4f440c488.roa
File: 642f6a47-875e-3f6e-85d1-93d4f440c488.roa (raw, json)
Hash identifier: 3zRb/eYLiu/k1OuB8fnYc/O9mnwEWgxH6QRs9c2Tbjk=
Subject key identifier: C2:A1:67:81:78:A4:2A:89:38:8B:3F:4A:D8:14:31:77:33:C4:82:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5081E4FFFCC43E2010E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/642f6a47-875e-3f6e-85d1-93d4f440c488.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.87.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:08:1e:4f:ff:cc:43:e2:01:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=4cd58fd7-ec65-4439-8480-eb9ea4ed1278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:b4:b9:e7:cc:75:ec:bd:61:00:d1:0c:1f:
b1:36:32:b3:ef:f5:23:cb:c9:69:93:ef:6a:9a:a7:
b1:f2:d9:ac:89:0f:fc:6a:25:da:3f:1a:5d:69:11:
84:54:a2:d5:e8:c9:74:b0:2f:cd:75:26:04:4d:e8:
c5:53:d7:5a:d0:c6:f0:81:34:a9:8f:a4:47:9e:56:
18:12:41:3b:f3:29:f5:60:df:4b:59:57:03:13:b8:
82:75:1b:a2:92:3f:a6:72:7f:96:d0:e2:23:e8:b2:
6f:2b:a0:a8:47:e5:53:a2:21:af:c3:9a:3f:02:51:
29:d6:4f:9e:d6:93:be:96:66:a2:ed:f9:28:fc:eb:
fb:6f:dd:81:88:df:53:99:1b:b6:e6:42:82:cf:cf:
5a:4b:b0:61:31:37:a4:96:6c:74:c7:7b:d0:ab:5b:
ff:cc:c2:f0:d1:54:19:7b:51:7d:e1:0c:76:74:70:
a7:c5:14:5a:eb:47:e8:1b:5c:2d:03:37:b3:17:17:
a3:2b:49:ef:99:77:3f:d4:b0:24:5f:4d:ed:e7:4e:
14:39:98:19:9d:cb:2e:ac:d8:63:da:c4:79:db:ca:
02:11:4c:92:15:14:7f:87:58:36:e4:34:22:ba:4d:
fc:31:5a:23:82:4b:82:53:40:ad:d6:d7:e7:22:09:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:67:81:78:A4:2A:89:38:8B:3F:4A:D8:14:31:77:33:C4:82:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/642f6a47-875e-3f6e-85d1-93d4f440c488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ec:cc:1d:23:7a:98:67:f8:4b:07:be:ce:24:a6:fb:1a:a1:
6b:ef:16:ec:af:70:75:f9:9b:70:30:c3:c6:6a:fc:52:10:54:
d8:63:c5:59:41:70:c2:01:3f:e1:69:26:74:3e:6c:0a:99:0f:
81:f1:27:f1:49:1b:b9:60:61:f9:cc:3e:f3:fb:53:ae:cd:0a:
30:5d:78:48:a3:9b:3e:6c:a5:32:bc:5f:ad:68:ba:c3:45:95:
ef:d9:ba:60:5c:43:8b:4e:40:e2:08:1c:0c:21:f2:db:61:17:
9c:3e:ad:c1:38:4b:08:84:93:5f:4d:12:dc:8a:30:f0:cd:27:
3e:ad:d1:d7:01:e2:22:6c:ea:ce:da:27:90:0b:b3:01:6a:b0:
3b:20:25:bd:38:5c:35:96:95:c4:86:5a:4e:32:49:79:8d:53:
31:96:7d:30:84:02:23:07:7e:48:87:b0:85:4c:a0:d4:ec:7a:
19:ca:0e:e8:e6:4f:e4:f8:84:e1:8f:8d:13:25:10:72:78:58:
f8:16:24:a6:57:52:05:92:b1:83:6e:11:14:79:70:76:d8:6b:
14:73:eb:53:89:54:0b:5c:01:7c:3b:94:04:ea:cb:64:e3:de:
2e:55:d0:8f:63:71:cf:4a:c8:4f:0e:1c:4d:86:0c:1f:a5:a3:
92:1f:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:48 2025 by rpki-client