Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
File: 975f556a-44d8-3bc2-8767-535d89bbaf8d.roa (raw, json)
Hash identifier: 73e4FN74GVAVGBDX0Mu7GCL1udmunil51ZPS8hWx2zQ=
Subject key identifier: 2E:93:2C:44:77:CF:DB:D9:A8:C6:F6:38:4E:EC:5C:CC:13:B1:33:ED
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584886B0842A93F8749840E0B040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 19527
IP address blocks: 34.1.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:84:2a:93:f8:74:98:40:e0:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=de0b88b3-4a12-471e-bcca-c72b9142d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:9e:c6:2c:e0:90:c1:16:cf:3f:89:33:8a:
4f:9b:10:0a:44:ea:04:7a:f0:a1:a3:b5:d9:69:a3:
ed:be:08:2a:6b:31:81:8a:44:6f:9e:06:be:c3:48:
cd:ea:32:ed:f6:17:90:b1:c9:0b:35:fe:27:5b:e9:
d8:64:f0:4e:64:a4:3f:78:a1:af:ba:9b:b4:e5:2e:
aa:4d:1f:f1:0f:74:79:c2:15:47:38:5c:65:09:a5:
25:c0:86:28:3f:90:37:6a:d2:cb:df:48:4c:c0:f5:
3e:95:22:e0:c5:a2:7e:ba:f4:5f:c9:8d:0c:63:9d:
1a:cf:2f:63:4b:67:74:2a:f2:94:d9:88:4c:98:ea:
f1:60:7b:23:cc:69:53:e4:b0:f7:1a:2a:c8:57:9e:
2a:34:01:7b:d6:64:80:45:e6:e5:9b:70:34:60:a5:
0c:57:e5:da:41:9d:5c:47:62:30:25:84:c0:87:0a:
4a:a8:9a:8c:3a:b0:61:42:50:70:ff:78:cf:61:9a:
03:84:c9:2c:78:4f:82:57:7b:1a:25:19:6f:fd:f1:
39:21:cf:91:df:dd:c1:bf:a8:56:80:de:ac:58:bd:
a6:b8:5a:97:f1:40:a2:52:73:2e:bd:d2:1b:9a:ba:
08:fa:fa:44:e5:00:2e:19:3b:ee:5d:65:90:af:fb:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:2C:44:77:CF:DB:D9:A8:C6:F6:38:4E:EC:5C:CC:13:B1:33:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/975f556a-44d8-3bc2-8767-535d89bbaf8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:75:f9:11:90:32:37:1e:a3:73:16:6e:ea:6b:b2:23:4c:8a:
a8:21:fc:85:a8:13:13:8f:31:d1:5a:2a:5a:01:84:38:29:27:
51:f7:b4:a7:92:ee:3b:50:49:3b:e2:11:81:1e:27:fd:c2:5b:
0c:74:48:9c:75:55:e5:5e:13:7d:e8:1b:03:bf:4e:92:dc:72:
12:35:f2:2a:88:3a:96:de:91:fe:b5:d8:67:c6:3e:6f:94:b6:
10:8d:16:ba:f6:79:9e:e4:37:80:82:c6:96:1e:9f:8a:75:de:
1e:38:9c:e2:f4:42:c0:30:b1:71:df:bd:4e:b4:28:60:dc:3b:
7e:4b:e7:d5:d7:66:af:af:d8:cc:74:c3:c0:c6:0c:7f:fe:68:
ee:29:9d:82:0a:ba:94:15:66:c0:4a:81:19:ad:9d:a4:f7:bc:
be:ed:37:af:72:be:48:08:0c:2c:0f:c6:f2:85:2b:bd:04:8e:
ca:ae:26:73:ef:ef:81:4d:26:ce:55:1e:d3:57:fb:7c:51:67:
41:88:d2:71:08:be:44:ab:b1:f4:a1:ff:9b:aa:3b:97:6e:28:
cc:38:cb:29:0a:f0:51:6a:4b:40:bd:73:b7:22:51:79:fc:85:
7e:ff:c3:59:76:63:56:d5:dd:f3:b0:89:c9:2d:af:ac:f9:3d:
d6:ca:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:18 2025 by rpki-client