Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa
File: 8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa (raw, json)
Hash identifier: C9wK2ZHZaHo9G330GbFgRp+j2luCazXQ36+iV4kCLhc=
Subject key identifier: 5E:1A:20:E0:3F:8E:7C:0D:61:4F:03:66:35:47:A9:59:E1:54:F1:8A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F540F4D2A712FC312F2A60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.147.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:40:f4:d2:a7:12:fc:31:2f:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=838794fa-edac-4c12-b949-6b8e4b2ddca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:08:a9:ff:2e:85:b2:16:18:05:06:f9:3b:
96:7b:13:c1:9b:5b:1c:48:7c:24:58:e1:47:86:1a:
14:cf:64:94:51:f6:80:9b:34:00:aa:79:af:20:7d:
a4:86:0a:6f:b5:5f:fa:98:92:03:6d:b8:bf:b3:a9:
26:01:78:e1:08:d3:e8:84:7d:39:a6:da:bd:b8:f1:
ac:93:20:4e:dd:6d:18:ac:80:39:7d:27:09:16:9c:
8e:23:4e:95:8f:cc:5a:8f:1e:b5:6d:64:c3:0b:14:
47:77:f0:10:3a:34:d7:07:2f:c3:17:54:a6:ef:a6:
be:4c:04:43:49:68:23:ec:a4:c0:4f:2f:fc:98:cf:
5e:88:a5:65:1c:e5:bc:ce:0c:7f:31:72:73:d3:e8:
82:e4:46:7d:86:58:3a:0b:54:cd:2c:db:37:68:99:
43:2e:ad:52:71:b0:e4:d0:96:f7:07:69:8e:2e:22:
16:47:1a:68:41:0e:f5:9d:85:ef:38:b3:90:0c:15:
0a:e2:ed:bb:da:2c:97:df:03:78:0e:93:e6:ad:0e:
b0:bc:79:92:cd:a1:f1:41:ea:9b:15:46:1f:1c:1e:
a7:70:9d:2f:17:6c:f1:af:7d:ef:72:e4:08:7f:f4:
b2:80:d7:a1:45:63:b7:0f:30:14:39:7e:67:42:c4:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:20:E0:3F:8E:7C:0D:61:4F:03:66:35:47:A9:59:E1:54:F1:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:89:1f:1d:39:eb:dc:64:f2:1f:38:0b:00:ad:5d:e8:a4:97:
a0:08:18:5b:14:01:9d:5f:2f:d8:7a:11:67:39:71:24:0b:30:
05:6b:62:26:2d:86:98:77:7c:d9:a8:4f:f5:b1:d4:b3:ae:49:
1f:07:aa:7c:58:1f:d6:59:53:64:0f:a7:80:19:8f:8e:59:6d:
2f:53:c4:8b:87:f7:95:d7:7b:6e:de:0f:76:d9:87:de:b2:c6:
a5:ef:60:b8:66:9c:18:5e:c5:82:9f:5a:37:20:f0:7d:99:56:
83:7c:f8:77:12:d5:98:05:45:29:b4:49:6f:87:4f:8d:18:a2:
26:8f:ad:be:44:3c:74:b5:2c:b0:b6:19:d1:5d:fd:27:52:91:
ac:ea:d8:aa:95:6d:36:02:32:85:3b:03:64:33:92:4d:64:af:
00:4d:97:02:ab:4e:46:ed:c0:ee:98:60:d7:fd:17:a5:bf:9e:
f0:8d:75:de:3f:c4:23:f7:f4:74:29:62:06:3d:aa:91:bf:37:
74:e7:ef:f9:92:c4:27:e5:4d:81:e8:ea:a5:f6:ea:a7:d5:28:
e6:1a:81:f4:57:a5:09:e3:ec:e1:df:aa:4b:0b:77:79:88:7e:
79:3a:26:8a:04:d3:87:c2:9d:a9:16:4b:58:16:c5:ae:a1:2b:
8f:03:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:30 2025 by rpki-client