Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa
File: 74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa (raw, json)
Hash identifier: Sj+sny4KFMYXx7UQLcfRF/Qvpl9niP85vg6bq4ua+bM=
Subject key identifier: 56:95:55:C5:9F:A5:D8:96:91:91:78:80:9C:16:3F:F6:62:1C:48:4C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5187D4D1CF8D84100E080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.87.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:18:7d:4d:1c:f8:d8:41:00:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=ef4161c9-ca74-4a7c-bf22-878ba03edef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:40:7f:0b:63:e7:42:0f:ea:a1:6c:05:ed:
c3:ca:28:35:ec:9e:ed:5e:c4:23:c0:8c:3a:1d:f3:
fd:05:53:9b:29:6b:44:89:af:4d:4e:18:cf:ab:7f:
2a:22:6f:9e:09:8c:6e:fb:84:d4:29:83:d3:3e:a3:
fc:d5:5c:5e:6d:00:62:ab:fc:78:aa:7b:de:7e:7a:
f1:d5:78:0a:e7:ee:fa:b4:4f:4c:e1:07:b7:a7:8e:
46:86:45:c3:18:ff:0f:7d:05:29:3e:f7:b5:8a:6f:
cc:6f:3d:0b:13:be:e2:d9:75:81:98:6b:d3:ba:f3:
79:71:72:39:59:03:3e:7a:d9:d4:4d:85:b6:22:c8:
9f:db:0c:26:20:c2:03:bb:a5:50:63:83:2e:bd:18:
2a:0e:12:48:99:c5:74:27:51:1f:1e:88:0f:a0:39:
a0:93:98:db:f2:2b:cb:70:e6:76:4d:18:a6:1f:e7:
47:cd:30:71:f9:25:ae:c1:a4:34:80:90:63:a4:09:
dd:7a:c6:71:db:b2:8d:5b:17:39:c1:38:0a:e0:82:
e5:b0:2f:09:e0:44:28:ff:95:a4:b8:24:bb:3e:a0:
f0:92:f1:19:62:dc:e9:9c:ba:cb:d1:43:83:47:01:
03:06:a6:c2:0c:c9:91:08:7d:e5:6f:99:d6:ae:52:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:55:C5:9F:A5:D8:96:91:91:78:80:9C:16:3F:F6:62:1C:48:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74b1f8a2-42eb-38a1-b4f3-6a1599c20a20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:b4:53:69:c6:56:e5:d8:dd:7f:b1:a0:9c:2b:d0:36:d7:fb:
30:95:b7:0c:22:2d:ba:ed:27:ff:2e:f2:66:0b:5d:04:22:70:
0e:06:7b:dd:4c:37:7d:c2:72:7c:45:91:eb:9d:d6:0b:0b:94:
bf:c8:bb:25:76:a3:30:c9:1c:28:10:1e:83:63:16:68:93:1c:
d9:a5:d3:8a:ee:0d:1a:ca:0a:d6:ca:e6:57:dd:78:4a:28:a6:
0c:c0:ec:ef:96:21:d5:ea:80:0a:9b:ff:12:67:4b:21:69:ad:
6f:3d:4d:16:86:21:ab:4f:39:f7:3f:d0:f4:cd:19:94:d9:a2:
e1:ea:ba:6d:33:e9:6d:03:55:9b:35:cf:93:cc:6d:57:ad:b6:
d3:15:89:72:c5:f4:dc:af:f6:d4:41:bb:8c:be:a3:0c:9f:f3:
d9:85:ed:c8:57:e7:2d:bb:29:36:8e:f0:2c:00:6a:15:b7:e1:
f8:c9:31:eb:14:92:73:c4:c9:d5:71:27:05:28:ab:73:74:cd:
98:ab:5b:9b:6e:f4:24:eb:90:15:0a:8f:12:72:08:20:9b:cd:
38:0c:a1:f6:65:07:74:26:4c:39:7c:c6:98:62:cb:e3:27:84:
24:5d:bd:ff:82:b2:71:0c:90:b8:a7:f5:04:47:a1:4d:05:75:
46:f0:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:06 2025 by rpki-client