Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/764a774d-e4a7-3209-8f6e-14d28b8f7572.roa
File: 764a774d-e4a7-3209-8f6e-14d28b8f7572.roa (raw, json)
Hash identifier: 9bZQ+hksE2M6TGqA8gr7DjQLY2K2tn2NMamFu4L0/7Y=
Subject key identifier: 45:33:42:25:65:C9:2F:AD:45:39:23:09:72:AB:C8:D4:99:FA:D1:80
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AAB92A02732A423941480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/764a774d-e4a7-3209-8f6e-14d28b8f7572.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.101.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:ab:92:a0:27:32:a4:23:94:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=8dcb68fb-8bb7-4821-bb4c-a9733d0eaf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:bb:67:00:bb:e8:23:77:2e:bd:ea:38:c3:
d0:83:82:19:24:72:19:30:14:b7:a3:e2:cc:17:61:
1f:bf:be:05:cb:3f:e9:9f:9c:56:83:c3:c3:cb:97:
01:83:ad:cc:d1:1c:be:ed:e0:0e:ef:b5:7d:24:c4:
e4:71:af:bd:44:ed:0a:b2:a0:fd:d2:55:47:39:47:
a0:e1:21:50:87:f1:98:7d:07:a8:b6:5e:9b:43:f6:
99:ea:b2:2e:5c:00:d5:68:89:d7:51:f7:14:4b:4a:
df:9b:e1:40:b2:16:e2:15:b3:90:fd:e8:95:96:bf:
d4:30:c8:c3:11:a2:6b:a1:46:7f:6a:8b:64:0b:65:
26:62:77:b7:f5:18:ae:65:f0:c4:fa:8f:46:58:12:
82:3f:49:7d:2b:37:08:f8:38:e2:be:07:2b:f0:10:
74:ba:5f:39:47:90:10:53:df:76:31:26:3a:5f:71:
b9:be:3d:aa:23:d3:65:d2:04:ce:a7:34:df:7c:58:
cd:02:d8:0c:ae:0e:03:da:e3:2c:a0:97:54:1d:2f:
1f:2e:5c:39:75:30:1a:2c:8d:42:5c:68:f6:84:99:
cb:e6:a4:33:36:07:23:11:c3:b8:f9:c1:ca:7e:dc:
13:b4:fe:3f:24:27:ce:38:fd:c7:ce:73:7f:ff:ef:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:42:25:65:C9:2F:AD:45:39:23:09:72:AB:C8:D4:99:FA:D1:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/764a774d-e4a7-3209-8f6e-14d28b8f7572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.101.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:50:45:c5:1b:fb:36:2f:d5:50:22:36:eb:0a:38:8c:d1:15:
8d:67:1c:6e:ce:d6:00:0e:ee:15:de:34:f4:25:77:86:d7:22:
bb:a3:1b:d3:4a:a5:f7:a6:17:50:c3:cc:01:9a:20:88:78:9b:
03:9f:6c:61:11:8b:ac:40:80:52:2f:7f:ed:60:24:57:f7:9f:
49:48:39:36:bc:11:64:51:56:d5:3f:d3:75:50:0c:f0:f2:c5:
9c:04:e6:eb:62:9b:ca:10:0f:d2:83:85:42:f0:e5:1e:4a:3b:
6a:1c:1c:f2:3e:93:24:6a:40:c4:54:7c:6e:44:34:8e:10:ee:
81:41:da:82:3c:44:60:e9:36:f6:d7:25:b0:7a:58:c7:38:de:
d2:af:65:84:c2:09:7f:55:5b:12:b9:36:3b:12:77:2e:6e:cf:
eb:02:b4:a8:0d:37:41:b8:47:b3:ad:0f:d7:4e:50:0b:bc:69:
37:ad:51:a5:3d:3c:b5:72:a8:b5:be:9e:7d:ee:b2:fc:29:7a:
fd:1b:ba:1f:d1:aa:40:0b:b8:e4:84:c7:6a:08:bc:f2:a9:bd:
ad:0d:06:41:7f:dc:95:b4:a6:6e:c9:51:47:56:08:f6:62:94:
ca:f7:a0:9f:34:4b:a0:3b:5d:ba:bd:d7:0a:8d:ab:14:76:fa:
9f:2e:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:57 2025 by rpki-client