Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa
File: 839e0e55-123b-3665-bb2c-36be8897a21f.roa (raw, json)
Hash identifier: bSsN6L8xdp+J4Iu9hYAzEe43uX0ENS7VNzqslJrwDQY=
Subject key identifier: C4:FA:FE:54:1A:44:97:A3:33:38:45:40:FB:C7:E9:18:7A:6A:C1:5A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F53991755A17EB0076AA80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.38.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:39:91:75:5a:17:eb:00:76:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=810b2998-fff1-4d82-830f-a628348403d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:7b:a4:0e:d0:a6:1c:f8:cf:59:dc:03:ab:
71:bf:96:cf:29:d7:09:82:c6:50:cf:6a:ba:03:e4:
43:c5:f8:c7:17:54:91:d9:51:b7:85:74:9f:66:59:
8b:64:5e:47:79:6a:42:59:97:22:c4:f1:fc:25:1c:
44:ba:59:de:db:b0:d1:85:0d:3b:5a:7e:59:6d:89:
3a:3e:a4:e1:f6:1a:8a:2c:e0:cb:07:0e:81:1d:16:
14:46:32:db:6d:1f:e2:e0:cd:91:6e:57:6c:ef:6e:
a8:d4:fe:81:66:bc:47:22:35:e5:32:4c:44:6e:3e:
86:6d:0a:4b:46:fe:12:e9:f3:6c:62:47:fb:29:35:
e0:61:bc:9f:91:34:c8:5d:83:b2:9d:a9:b5:76:ae:
ef:09:30:34:f0:ce:7e:d2:58:38:25:e2:ac:3b:4b:
14:df:42:23:e9:38:0c:97:5e:6e:72:05:d4:65:93:
a5:9c:4f:39:ce:f7:3e:cc:62:33:b6:4b:a1:2b:da:
7f:ce:8b:9c:78:d2:ed:ca:3c:8c:29:f8:ca:0e:1f:
be:05:c5:b1:1f:63:96:33:16:30:51:21:c7:9f:76:
30:b3:f7:ac:f5:8b:05:c8:7f:3e:07:59:40:f3:7c:
b8:48:b0:7b:42:59:11:3a:5f:3e:b6:2a:6c:86:00:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:FE:54:1A:44:97:A3:33:38:45:40:FB:C7:E9:18:7A:6A:C1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7b:9b:45:4a:db:6e:8e:07:37:4a:bd:4b:8b:1b:a8:87:58:
1e:e5:a4:5e:46:bc:85:7b:08:81:ef:12:3c:cf:4c:6c:ef:61:
1c:92:fc:22:51:48:d2:7a:40:77:fe:28:01:29:fc:80:36:64:
c8:0b:ec:40:c1:7f:12:c9:c1:c6:3b:5b:06:1a:79:cb:72:12:
9f:c0:2c:d5:d9:da:53:ce:40:18:72:95:25:37:cd:c3:f5:54:
44:2a:90:e6:a5:d9:79:bf:68:a2:69:d1:12:e8:4b:8f:af:e1:
de:da:04:84:1f:73:62:46:fc:ca:a1:a8:63:c7:d3:8e:b0:ba:
85:85:7f:8b:cd:8b:e6:90:ae:65:37:0d:cb:d7:dd:de:53:15:
2b:ce:a9:38:f9:85:8a:0f:13:1a:ed:2b:41:e1:0c:26:1d:c9:
5a:e0:fa:9b:c1:93:0a:c8:e1:ab:83:9e:11:07:8e:87:18:e3:
3a:8c:e3:89:46:27:9a:ca:48:06:9e:36:7d:d6:f0:20:c0:38:
82:66:e3:83:d9:57:9c:0d:96:8d:26:d7:b6:99:01:ce:6f:30:
48:c7:bb:a9:a4:ab:f6:2e:e9:67:82:b2:fb:78:72:64:78:56:
e8:53:74:27:12:d5:f1:4d:be:d9:0f:03:76:a8:93:a6:15:77:
1a:14:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:19 2025 by rpki-client