Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76aa2681-93ba-32ec-b4e7-1b052d385876.roa
File: 76aa2681-93ba-32ec-b4e7-1b052d385876.roa (raw, json)
Hash identifier: Ib0BF3KFPQK5Yud5Xa2/AOP7qbe9zZePSY1FNrECC+c=
Subject key identifier: 70:7F:A0:03:9A:4E:75:8A:DB:BE:6B:BA:78:38:C6:0F:A5:BB:E5:D6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858489E6B5E9A8A5B21707BB51180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76aa2681-93ba-32ec-b4e7-1b052d385876.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 19527
IP address blocks: 34.2.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:5e:9a:8a:5b:21:70:7b:b5:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9d4ebc9e-57fe-4821-9fc2-e04b3b48f6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:33:80:03:45:2d:8c:7f:ae:fe:3b:b5:76:
5b:16:5f:01:ab:39:db:f6:a1:b4:82:9c:fb:47:0c:
4b:f2:da:33:cd:24:02:cc:69:82:09:63:71:13:fb:
25:4a:8f:c2:80:78:6e:0c:c7:ad:0f:33:6e:68:1a:
be:c1:e5:22:1a:28:1d:d0:95:28:cc:a1:bc:ba:d9:
f7:47:6b:af:b5:8d:da:6a:e0:8b:c1:2f:bc:19:a0:
cf:d5:99:c7:dd:e3:48:54:7b:8b:5d:64:43:95:c1:
cb:2a:32:64:74:1b:98:d7:40:a7:a9:4d:3e:35:1e:
bd:b0:6e:89:5d:f2:8c:f5:df:9d:95:07:c4:eb:17:
f0:e4:01:40:01:60:45:eb:fe:f5:d5:9a:93:1f:2e:
23:a0:72:dd:d4:a5:7d:a4:88:33:19:27:4d:e5:7b:
d8:f8:32:c0:cc:49:5c:22:1e:f7:77:b8:d1:cb:b4:
cd:2d:b5:bd:6b:95:93:0c:cd:40:ed:c5:90:7b:c2:
05:d7:0b:ec:2c:30:59:51:b4:c2:17:8b:39:f1:31:
50:38:11:59:e5:94:42:fe:f5:9b:97:c9:1b:ab:ac:
5e:7a:0e:7f:ce:6f:1c:f5:fc:92:1a:c5:03:d5:b4:
e0:5d:ce:24:5a:86:40:87:50:02:6f:92:79:d3:92:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:A0:03:9A:4E:75:8A:DB:BE:6B:BA:78:38:C6:0F:A5:BB:E5:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76aa2681-93ba-32ec-b4e7-1b052d385876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:86:8f:e3:f9:48:30:b9:f4:77:7c:38:e8:79:0a:dc:db:95:
4d:e2:59:21:3a:4f:33:c8:65:4c:e6:60:3d:e2:c8:03:b9:c0:
a9:ba:f1:dd:51:50:d7:bf:17:85:eb:59:25:97:29:eb:26:89:
90:33:d2:91:53:44:73:7c:c0:07:57:83:bf:87:9e:35:22:25:
f7:08:2c:66:42:13:75:18:c8:73:ea:21:03:77:0e:66:1f:7e:
99:bb:aa:fc:ce:51:1b:e8:ea:38:3f:94:ed:a5:7f:ad:cc:cb:
53:43:c9:00:58:f7:d5:5d:cd:09:22:9f:ea:66:71:ce:ea:f4:
82:63:a5:fc:cf:28:b5:85:29:5f:d8:c7:2f:6c:70:be:4b:06:
9e:6c:15:a3:1f:d9:39:95:ce:3d:0f:e1:97:ff:07:2e:30:06:
a2:9d:7f:dd:09:8a:c2:e2:21:e7:a7:42:fe:05:15:18:c8:8f:
6c:8d:bc:27:83:7c:29:70:0d:5a:d3:05:5d:bb:0c:21:08:17:
1c:d1:13:2c:3b:e3:92:73:94:99:91:0a:8d:3d:c4:5a:e9:78:
e5:0a:9e:9a:e8:83:19:2b:8f:9c:4b:3b:f8:ce:52:39:bc:3f:
c0:b8:20:9a:95:85:f2:e3:e6:9a:3d:bc:1a:ce:58:26:e6:2b:
75:81:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:16 2025 by rpki-client