Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa
File: 9a077d35-5a09-3f38-8af7-a4c03026b36e.roa (raw, json)
Hash identifier: YdkIWPNGeR40AdLttLKrYsO8EoCwHmQDL9NIPX6IVDs=
Subject key identifier: 49:51:10:05:DD:8F:D9:8F:28:1F:AC:60:20:BE:44:00:15:27:0E:D3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5284369771FA1DC8EBF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.97.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:28:43:69:77:1f:a1:dc:8e:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=117affb4-bf81-4f21-a957-fb476e8260c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:f0:33:f6:a0:a7:4f:98:7f:ad:84:f3:10:
10:f6:2c:cc:cb:f7:8c:19:7c:b9:a0:14:dc:22:e5:
74:ec:4c:b8:56:18:88:48:da:ad:93:86:a4:3d:55:
01:e1:ac:cc:d3:3b:22:07:60:34:d5:34:06:ab:b8:
3a:e8:f3:36:ac:01:84:e6:38:7d:04:97:23:fb:ad:
1d:cd:c3:fb:6b:4e:ac:84:a0:91:ed:12:28:33:5f:
7b:41:1e:32:82:70:03:b5:bb:b2:ea:ea:c3:f2:da:
40:7c:6a:b4:3b:98:51:e3:39:c2:30:93:51:6f:20:
f4:97:3a:53:8a:8e:c7:cf:4e:ce:10:da:1c:cd:db:
3d:2c:b1:28:f2:42:f9:45:a1:4d:f6:e2:2a:4b:19:
83:f9:4b:b7:3b:68:73:ff:43:38:46:9a:f7:7e:20:
41:fb:0d:4c:50:eb:2a:38:f7:f3:e0:74:53:e4:0e:
c1:ca:91:57:76:1e:2f:e1:22:85:3d:94:36:dc:13:
11:b5:0c:09:12:d1:75:0a:7e:ac:fb:90:c6:f2:1a:
5d:d0:63:57:11:2b:0d:51:c1:7b:67:4e:25:eb:75:
f5:21:34:67:3a:9a:58:b1:bc:1a:17:48:81:32:7d:
2a:78:66:bd:70:0c:92:8c:af:7e:ee:17:f5:41:01:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:10:05:DD:8F:D9:8F:28:1F:AC:60:20:BE:44:00:15:27:0E:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.97.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:10:cb:ea:36:72:e0:8e:d2:00:14:1e:e1:fa:c5:17:73:10:
ba:b3:dd:18:11:68:e6:98:47:3a:30:eb:32:c6:01:10:47:85:
b3:46:3d:f1:29:85:33:63:77:3b:34:f3:fd:5e:22:87:76:29:
95:5e:6d:c5:bf:a8:fb:02:47:8e:d5:60:5c:da:9c:f9:be:8b:
cd:f4:40:7e:db:bf:af:38:5a:87:8c:0f:f0:a6:62:c1:16:18:
b1:fc:ae:a1:c3:df:c1:ab:0b:eb:fb:8f:ff:10:4d:46:c5:10:
23:a2:1e:10:bf:fa:ba:a2:56:6e:6b:01:bf:8d:fe:b6:37:8f:
a1:4a:a4:bb:62:6d:65:71:b8:69:e3:32:d5:ed:1f:19:91:cf:
fe:a1:41:04:6d:53:9f:33:a6:09:b7:96:df:08:b7:fa:c3:44:
b4:a6:65:e4:b9:09:08:cd:f3:92:4d:c7:ea:c4:1e:21:c9:e5:
97:54:1a:44:46:1d:0d:f6:7e:66:cb:bf:bd:07:ec:d7:0d:f0:
7a:ee:5e:d5:a9:b9:23:e1:40:5d:37:88:e2:83:4e:df:71:d1:
7f:65:a6:2f:fd:8c:60:85:fb:c4:95:d8:32:c9:79:10:7f:1c:
f0:c0:00:c0:0d:61:8a:94:25:82:ce:da:f7:36:c6:58:ee:42:
f2:1a:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:19 2025 by rpki-client