Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa
File: 808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa (raw, json)
Hash identifier: GZO7qmAYJUvhes5LFZWD60j6X4fI5y+krdK6TLwirkU=
Subject key identifier: 29:82:13:C8:06:A7:53:C2:CD:43:4E:A1:5C:2E:FA:7B:5C:33:86:47
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4DFDAD0F3ADF545973400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.139.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:df:da:d0:f3:ad:f5:45:97:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=0e37d769-5f9b-407b-9bdc-e0aa49b76ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:52:be:b8:5c:52:a9:d9:9e:e8:b3:87:e9:
78:5b:91:16:6c:02:e1:c5:d1:30:dd:60:21:51:34:
9e:f0:f4:3d:65:66:d6:b9:58:15:11:12:20:8c:b4:
91:de:b5:c1:2c:b9:c1:d3:bd:3d:90:98:69:c6:dc:
17:bb:7e:9d:c9:8c:ac:15:29:29:b9:e9:be:81:79:
ba:5a:17:e5:31:3f:4f:82:f9:b2:ee:90:7d:49:e8:
b3:6c:59:09:aa:8b:c9:d3:fa:b9:5f:da:a6:7b:e3:
e5:85:0c:b2:57:4e:93:5f:da:42:5b:6d:35:c0:18:
13:73:1d:5c:78:cf:8d:4a:63:5b:ba:49:4e:04:27:
d4:15:16:7b:d7:4a:bf:e2:fb:e7:43:49:2c:f3:ec:
36:66:55:be:a0:ff:22:4b:af:7b:b2:af:4f:1d:41:
66:04:04:7a:e2:cc:e5:63:ea:31:05:0e:94:81:d9:
f3:30:8f:07:3e:f6:bd:7a:8f:33:db:b3:3d:43:ab:
68:02:da:50:d6:54:05:6b:23:91:ad:5f:c6:5b:6c:
e7:25:fe:62:08:fb:79:ca:93:ca:aa:43:45:d1:32:
31:f0:22:21:ff:a4:61:b0:cd:e7:b6:2f:d3:01:f8:
aa:4d:63:2c:3e:f7:a1:aa:e2:8a:a1:15:f4:4e:cd:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:13:C8:06:A7:53:C2:CD:43:4E:A1:5C:2E:FA:7B:5C:33:86:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:1d:84:4e:b0:6d:ba:a0:45:5a:30:a9:d1:db:12:01:cb:26:
60:6a:74:54:e3:3a:5c:f4:1a:c6:8e:04:87:cc:8d:75:72:c3:
9b:79:0e:ca:da:1b:a0:0b:e7:bd:a2:01:c8:44:c6:4d:44:87:
d1:48:c4:cf:ad:44:4f:59:ee:7a:01:0d:f8:0e:af:28:21:c2:
3c:05:4f:bc:2d:0a:a1:96:d7:5e:05:bc:d2:df:8d:57:72:2c:
4e:d6:d6:4f:32:44:db:ab:c4:9a:46:9f:7c:75:7e:94:b6:21:
e7:74:b9:7b:c9:a0:cb:a7:fb:f3:f0:12:74:f2:c9:72:b7:53:
84:6a:c6:c0:f2:09:66:19:34:fb:17:09:35:95:15:b3:1e:5a:
4f:8b:d6:f2:10:89:70:11:55:3b:f3:5d:d0:d9:c1:86:e5:09:
ce:bb:f9:07:44:d0:aa:d9:22:18:e2:09:25:22:b8:09:f3:80:
82:47:d4:ba:08:5e:e5:58:d3:8e:0e:ef:66:84:79:eb:5a:49:
74:48:49:b8:c4:e7:f7:7c:82:f3:57:d5:52:20:7c:2c:15:08:
7c:01:15:9b:2e:9d:9c:9b:0c:2c:c0:63:8f:71:c0:38:58:7d:
a0:70:22:13:80:4e:29:cf:41:29:44:bf:03:09:d2:fd:c5:51:
fb:d8:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:29 2025 by rpki-client