Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa
File: 90bedec6-b981-3a61-bcac-10457f374814.roa (raw, json)
Hash identifier: DsjA1iGJi01/XhZ3snl/0F9hC5dXhlDBJNoDsOTu4jI=
Subject key identifier: 6C:5C:AA:81:9D:5A:5C:43:FC:CB:82:32:7E:4F:80:1B:BA:5D:AB:D7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52068C083E59DA40DB600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.125.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:20:68:c0:83:e5:9d:a4:0d:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=e44623c6-85b9-4b97-8860-425f30b79a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:d0:ba:1a:d3:5d:55:09:40:23:d2:ae:ba:
97:1b:aa:6b:9b:6b:24:89:af:fc:7a:fa:b3:d3:f5:
27:b8:0d:9a:31:73:8e:3f:d9:68:4d:8d:2b:61:0d:
bb:38:91:19:70:85:3b:2c:9b:fe:4e:67:e4:4b:67:
15:ef:f5:d2:4e:b5:d6:9c:33:83:a1:47:26:80:42:
0c:ba:bc:93:0a:61:a7:34:8a:76:c8:a3:43:be:3c:
9e:33:fc:3f:24:9e:fd:25:2a:76:ef:67:d9:69:c0:
d9:e1:19:89:29:e6:67:8a:5d:ce:4e:14:64:26:54:
04:86:77:51:22:f1:fb:88:1a:89:9a:75:ae:c2:c0:
eb:7d:fe:78:b1:4a:b4:22:f5:f1:9c:49:ec:4c:6a:
ec:55:17:71:73:7f:98:c7:99:63:8b:b1:40:04:bb:
12:b7:c8:04:fc:81:87:37:f9:6d:f4:e9:22:1c:98:
24:b0:64:bf:ca:fa:73:a4:d5:8c:44:28:55:5b:5d:
58:04:a6:55:2f:f3:af:48:d5:aa:11:c1:29:f3:93:
af:0c:33:8f:9c:e7:ae:6f:4b:dc:9d:47:62:37:d7:
d6:e3:60:37:0d:2d:b8:33:90:72:05:d4:19:8c:ab:
31:87:de:57:f5:60:fe:d5:ee:89:60:e9:ae:02:2d:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:AA:81:9D:5A:5C:43:FC:CB:82:32:7E:4F:80:1B:BA:5D:AB:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.125.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:49:dd:10:ae:f4:77:6d:ef:a5:21:41:57:bc:d7:6f:d1:3c:
88:37:f6:be:30:fb:38:8f:66:ca:f7:e4:a9:5f:0b:a4:ed:1d:
37:ef:8b:73:94:0b:5e:e8:d2:62:d1:a3:40:7e:34:03:f0:f1:
8d:b5:eb:bf:83:46:10:ee:b0:8e:1d:50:e6:97:e9:74:1e:47:
c3:6b:f1:ae:e7:f1:82:44:68:80:24:9c:78:8b:11:82:69:9e:
1b:23:7c:03:17:f2:79:e9:e9:e3:54:4d:6f:ff:88:4b:ed:ab:
82:6e:47:7b:78:65:4f:e7:7c:45:f5:a1:ae:c0:4c:ae:18:08:
7a:9f:95:cc:30:f8:f1:83:6d:e3:1d:9f:b7:f8:ec:cd:31:13:
78:53:00:67:3e:72:cd:39:19:80:6c:20:4e:aa:89:a7:87:9f:
85:48:9b:c0:89:ad:da:3c:3a:ff:86:16:a5:d4:3e:d8:81:d4:
4e:d7:17:ff:58:fe:a6:34:80:e8:db:63:34:9e:5b:ca:63:81:
9c:ea:27:5b:66:43:f5:d1:77:2b:a8:f6:08:f2:d9:8d:4d:7c:
22:7f:c7:12:4e:9f:17:ec:55:44:40:19:be:93:77:3e:3b:24:
6e:d9:0c:27:8f:9b:f9:eb:41:cd:af:bf:16:de:59:7d:1f:29:
9c:28:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:04 2025 by rpki-client