Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d724d6f-94e2-3336-9920-d74fcb1f7c86.roa
File: 8d724d6f-94e2-3336-9920-d74fcb1f7c86.roa (raw, json)
Hash identifier: 7cUL9bKwAFueU71l/RijFznWlOKPeVYRM1jYYVZ0/lo=
Subject key identifier: B8:CE:51:83:2B:DE:2D:B5:DA:4B:AF:D0:E2:F5:8A:C8:E8:5D:1E:F7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AB9C2AD2301871A1C9C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d724d6f-94e2-3336-9920-d74fcb1f7c86.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.106.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b9:c2:ad:23:01:87:1a:1c:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=2fb2a572-0074-4472-9a7e-345b0b9d83e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:da:99:f7:53:98:dc:65:c6:61:75:c4:63:
03:71:92:11:12:72:b1:60:8b:fd:86:cf:37:4c:6f:
bc:fc:34:eb:73:57:b7:ff:7c:1d:b0:6d:75:f6:fd:
d3:40:45:36:29:d1:4a:4e:65:6d:6a:c2:4a:18:fe:
48:88:25:42:f5:b4:8a:52:e1:78:0a:1f:4b:bf:99:
7f:68:08:6b:2a:cb:1b:9f:e5:2a:0b:c0:06:6e:94:
f0:ac:77:6c:d3:18:c4:9c:17:63:f2:50:9b:76:f3:
fc:31:c5:da:2e:f9:f0:ec:ac:5a:7f:1d:dd:56:23:
d0:9e:99:ff:1e:02:3d:20:79:bd:4d:5a:47:32:82:
3f:54:6d:9f:8d:7a:84:22:63:97:63:74:81:ba:da:
41:29:f8:60:c7:9a:12:2b:be:40:6b:d3:97:67:24:
78:b0:0e:96:4c:49:05:1a:a9:c4:5e:f9:a3:f1:fd:
81:a4:ce:82:91:fd:09:f6:06:b8:e8:e1:bc:47:da:
83:5c:24:82:a8:bc:64:3b:37:ce:2c:0f:a4:73:e4:
04:eb:3f:2e:ae:2d:8a:a3:a4:cf:ba:ba:f9:53:49:
6a:a7:b2:ee:d6:d8:0b:83:c5:71:62:e6:6d:e5:b6:
c9:22:95:15:ef:90:48:21:0f:41:ce:22:32:b6:6b:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:51:83:2B:DE:2D:B5:DA:4B:AF:D0:E2:F5:8A:C8:E8:5D:1E:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d724d6f-94e2-3336-9920-d74fcb1f7c86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.106.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:1b:8c:75:24:1a:d1:34:f3:8f:2b:e8:6a:c1:07:88:b8:25:
07:3e:39:05:59:97:05:f0:17:80:e4:b9:13:99:29:58:87:dc:
fc:3d:8c:03:a5:23:e0:6d:00:5d:a6:42:c5:5e:1b:0c:7a:f1:
9b:3b:50:e7:28:d0:dd:8d:21:38:12:1e:d0:39:c0:44:00:75:
ac:ea:94:78:6e:0c:38:88:54:52:55:84:ad:6d:40:72:c4:5f:
ba:78:9a:6b:cf:55:85:57:99:6c:fa:60:6d:f2:40:20:a9:c0:
36:b2:7c:08:cc:2e:d2:89:44:8e:4d:cf:71:2c:88:00:1a:df:
9a:54:62:8b:48:68:88:92:c4:ec:8d:62:59:68:f6:bc:79:47:
65:9e:dc:9d:e2:c5:40:69:2a:c8:93:94:76:f8:a6:5b:67:0c:
3f:df:1c:a5:39:31:5b:a5:b5:96:a4:3f:06:a1:2f:ed:a0:a9:
f0:28:c5:b6:77:4b:b9:63:d4:6b:f6:f6:80:0d:83:5e:0e:3f:
f3:9f:3a:81:af:cd:d6:60:8a:0f:e2:fd:df:80:7a:3f:e3:12:
41:fe:cf:5f:a4:5a:85:d9:75:2c:19:19:5a:77:70:e4:2f:23:
55:07:ce:8f:f1:12:dc:f1:da:4b:74:bc:73:31:76:7e:ac:ec:
91:a1:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:06 2025 by rpki-client