Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96123cd0-e216-3368-bca2-e03366383546.roa
File: 96123cd0-e216-3368-bca2-e03366383546.roa (raw, json)
Hash identifier: 6dqLEDMKSeKPGeKwJoaKEv8IxxKY3tBcgULpXVZmMlQ=
Subject key identifier: 0A:A7:5B:D1:FE:4A:98:27:9B:CA:95:BA:24:10:2D:22:AF:FF:3F:B7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B47592F8389481CB380C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96123cd0-e216-3368-bca2-e03366383546.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.104.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:47:59:2f:83:89:48:1c:b3:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=f224ea56-fade-43db-b078-8ae01d19d79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:79:04:6f:f7:18:bb:f6:ea:b3:6e:bd:18:
3b:7e:dc:b4:0d:b1:96:13:f9:02:d6:db:73:09:25:
f1:c6:8c:c2:65:bb:2b:8b:5b:90:7a:90:5c:fd:6d:
94:06:a8:43:65:ec:71:ae:5e:07:65:16:f0:52:ea:
25:c9:4e:34:0b:d8:c5:9d:fd:96:aa:29:27:b8:5f:
5b:dd:8b:40:8a:f6:53:2a:54:d1:a5:8e:67:4a:6c:
da:7e:d0:7d:4d:f6:67:d8:70:00:58:bd:d2:92:f6:
df:24:a2:db:e4:90:67:42:d5:de:c6:56:35:ee:a1:
85:e7:8a:6d:f1:a2:14:32:13:6e:5f:67:c4:e5:08:
27:a0:81:ac:ef:97:e8:d7:e0:32:ab:1c:3b:83:c1:
41:e7:3f:57:57:0b:68:d0:e4:2f:b6:ac:e4:73:9a:
f6:24:4d:04:7d:83:bf:6c:2c:50:c9:d3:5f:6c:78:
94:ea:2f:f3:65:12:fc:4c:3a:ff:d4:6e:8e:a7:e7:
cf:6f:f2:64:84:14:df:c0:a0:f5:3a:2a:b2:39:41:
f0:d3:8d:1b:87:a8:24:a4:35:62:34:32:82:52:4c:
72:16:0c:b3:21:8b:cc:c0:ce:50:77:f6:27:df:58:
12:98:a5:b1:29:ea:35:41:c5:2c:64:d6:54:00:58:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:5B:D1:FE:4A:98:27:9B:CA:95:BA:24:10:2D:22:AF:FF:3F:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96123cd0-e216-3368-bca2-e03366383546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:a4:f0:fa:71:69:ba:80:d4:d3:0a:b4:14:56:0f:35:0b:83:
d5:94:a0:62:f3:84:6c:ef:4b:65:fc:1a:2c:58:ba:b9:45:59:
bd:22:6f:85:cc:fa:40:ec:81:88:78:84:db:1c:9d:c7:fb:6e:
0b:c0:5f:3f:07:1b:ac:ef:33:bb:80:30:c6:5b:3d:62:b3:5e:
55:79:8a:27:a1:93:e3:e9:af:74:b7:c7:b3:c3:65:4f:52:51:
61:b1:36:17:d5:ae:78:4d:a4:03:2b:49:87:cb:a6:f1:16:ef:
ab:b0:8c:87:bd:37:be:71:c1:73:8e:88:96:01:ef:f6:e9:5a:
6e:57:5d:de:c3:7b:2c:76:64:93:d6:61:7b:e3:49:3e:32:79:
4f:56:c5:b8:cb:6d:34:96:2f:45:ed:c6:bd:69:ac:00:6d:de:
20:3d:c8:41:8b:27:c6:8d:01:6a:e3:2e:98:da:08:76:b8:9d:
fa:57:05:11:4e:09:a5:f0:d3:eb:be:33:25:b9:1b:68:1b:7e:
10:38:a9:a7:28:01:a5:a2:d4:cb:b2:9f:82:8d:b2:f1:17:14:
ec:78:a2:84:15:23:b6:dc:db:99:2b:b3:09:b5:02:b0:93:9f:
c3:6a:7a:10:2a:5c:0d:d3:a1:95:54:2d:49:4a:39:a0:e9:46:
9a:62:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:29 2025 by rpki-client