Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76000658-3371-312f-afcf-89c52dbc5eaa.roa
File: 76000658-3371-312f-afcf-89c52dbc5eaa.roa (raw, json)
Hash identifier: GTyYeNZs7W33AJAWXBHvFbivAUtcXWjbqgE8D//eYAQ=
Subject key identifier: 52:5E:1D:0A:29:60:95:8F:65:78:CF:6B:31:35:BB:16:FE:9E:79:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62A9F8949B64BDF2811C2E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76000658-3371-312f-afcf-89c52dbc5eaa.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.102.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:9f:89:49:b6:4b:df:28:11:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=0a2d9274-960f-4d91-a648-5c3de62b5aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:71:76:aa:8b:47:a0:13:61:3e:b0:84:9d:
3e:92:87:df:a9:2c:c7:50:58:ff:46:19:90:bf:64:
3b:b0:b7:40:c0:77:db:36:31:d2:77:c1:ee:85:58:
6c:00:ad:7a:05:de:5a:86:a3:46:17:e2:20:d6:bc:
70:46:89:69:fa:08:aa:98:ac:91:03:16:2c:1c:b6:
c3:73:dd:4a:b3:93:a2:f9:58:0c:fd:4b:82:08:c5:
28:77:d0:da:7c:b5:33:e8:28:88:83:0f:8a:9a:c5:
67:c9:d3:89:a3:7a:35:18:2f:51:a3:45:22:45:a7:
91:02:04:f3:01:ff:79:e6:2e:09:15:1e:aa:67:2a:
88:08:51:ae:3d:56:f7:be:2e:a8:66:16:e8:07:2c:
a1:56:dc:64:0e:be:1b:9f:c7:4d:be:f6:43:30:05:
26:bc:86:f0:44:b4:ec:6a:4b:63:22:19:8e:71:f6:
e4:45:4a:a6:49:aa:63:a9:8c:64:18:ee:b7:2f:42:
cf:ce:0f:12:98:04:ad:d2:38:fe:e9:8e:55:7e:ff:
48:76:90:67:57:84:63:86:0f:25:55:6e:ec:82:cc:
4c:5e:90:e2:bf:e5:65:48:22:d1:b1:02:95:db:59:
40:ba:3f:34:d1:6d:6c:7b:2d:ea:97:41:ac:c4:71:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:1D:0A:29:60:95:8F:65:78:CF:6B:31:35:BB:16:FE:9E:79:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76000658-3371-312f-afcf-89c52dbc5eaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.102.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:14:81:48:e4:6d:51:3d:1a:7e:0e:7d:97:4c:fb:37:b6:99:
a8:70:b5:88:a7:b5:d7:9c:14:06:7f:ca:39:e9:93:67:8a:7f:
54:34:3a:da:7d:a9:c8:18:4b:9a:bc:66:7b:92:71:92:13:19:
08:5e:9c:a6:40:21:72:e5:0c:f6:7b:2d:da:59:ff:c6:70:26:
44:1f:6f:3f:9f:98:e7:b0:34:85:41:2d:22:fb:ac:e2:b4:2f:
da:a0:6e:b8:37:c6:6e:da:ba:56:87:f1:60:fb:d6:6b:93:8f:
95:66:f1:7f:a4:5e:e2:0f:d5:b0:a2:63:51:de:f0:29:9b:86:
6e:98:bc:79:52:fd:2d:29:05:06:36:15:a6:f1:f6:5a:28:2a:
80:0a:86:80:6e:45:29:c4:cc:d3:e8:b9:73:b9:6a:17:87:bd:
9b:c9:b4:e7:d6:cc:58:5e:f4:ab:23:ee:0e:c7:e3:2e:a7:bc:
ff:e1:52:32:a3:3c:28:b4:42:29:44:15:b5:a6:ba:f5:33:1f:
24:66:e0:db:19:79:79:ac:d6:29:24:4e:a5:d9:cd:04:b4:77:
cb:48:b1:61:9c:02:9d:be:a5:33:c9:80:d2:4e:7e:b0:2d:f6:
fe:6b:a3:d7:c2:ef:ac:01:2b:23:32:d3:30:bd:66:b7:e5:ba:
4e:14:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:20 2025 by rpki-client