Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a60d79a-c1a5-3769-8900-41a340f4e4f2.roa
File: 9a60d79a-c1a5-3769-8900-41a340f4e4f2.roa (raw, json)
Hash identifier: mATWjuw4Y1agbPOBy76tRV4goUUtqu5lcwMMQ8rjfDo=
Subject key identifier: 50:F3:30:29:1C:E8:25:A7:25:52:BF:21:BD:20:15:6C:80:0E:CE:9F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F520FA9984A808C8B61100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a60d79a-c1a5-3769-8900-41a340f4e4f2.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.131.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:20:fa:99:84:a8:08:c8:b6:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=a0421aca-2447-4e33-bb9b-8f5798a0ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:29:29:c6:9a:3e:e8:a3:58:c8:fd:b1:11:
cb:5c:88:d8:43:c2:db:24:d4:77:76:38:1a:ce:89:
1b:11:e1:cd:18:ff:7a:d6:89:63:85:b0:d1:71:0d:
49:cd:77:ee:fb:d3:57:b0:55:29:ac:f7:25:3b:49:
b4:6a:68:fe:54:9c:b4:6a:e6:6b:77:3b:84:7c:46:
c4:ca:34:6a:34:2d:be:03:89:dd:65:e9:84:ec:37:
f2:bd:04:1c:32:3c:5c:13:a9:57:89:5a:24:b5:60:
69:15:7f:0d:a1:a7:2c:5f:51:86:a6:20:37:01:20:
d6:4a:7f:9f:50:26:57:ea:27:9b:d3:1c:8e:09:90:
76:07:a9:fe:e7:70:3c:81:96:f0:c9:aa:29:d4:26:
0b:07:da:ce:a2:ee:6e:ec:1a:7c:39:e0:11:83:87:
ff:9a:5d:49:b1:0a:f8:fe:e2:a1:c2:e9:8c:20:71:
aa:1d:69:64:77:2d:bc:6a:49:33:85:66:6c:74:9c:
0a:0c:62:15:ba:de:8c:6b:bd:cd:6f:09:e8:98:07:
cf:57:7d:65:03:e6:5a:88:b0:fc:60:95:d7:2a:23:
6c:f4:14:d8:e9:df:c4:4f:d2:53:1c:b9:bf:ae:b5:
bf:d8:df:72:07:6f:ee:a2:17:ca:d6:8b:89:84:a3:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:30:29:1C:E8:25:A7:25:52:BF:21:BD:20:15:6C:80:0E:CE:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a60d79a-c1a5-3769-8900-41a340f4e4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.131.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:51:d1:fa:ae:63:2a:a2:07:0c:d2:a5:a0:f7:a4:71:b4:15:
85:e3:9f:18:79:03:f2:84:d5:6e:5a:7e:fc:6a:ec:10:c3:d3:
f2:6d:d1:99:54:e9:33:75:08:3a:5c:19:f9:57:4d:4f:f0:fc:
12:4c:c5:97:cb:97:43:9d:c8:83:37:69:61:a3:78:1b:d4:a5:
99:1a:d8:16:99:77:4d:9e:27:2b:0e:ba:d7:59:bf:5b:bc:cd:
50:71:ac:7f:7f:82:02:50:78:24:91:4f:01:4b:7c:1e:23:78:
dc:97:02:f8:d7:25:c7:6a:d5:c0:70:a6:2b:cf:51:cf:92:75:
a1:4d:bc:85:de:54:79:d3:44:ca:9a:96:72:49:f1:d5:42:68:
d0:98:74:35:ff:27:fd:34:96:c2:64:0d:58:a0:66:d6:7b:7d:
35:10:d6:8d:75:a9:40:0c:3b:25:ed:13:e0:37:46:b3:c1:c0:
e4:ab:24:d0:68:7f:62:47:6c:4e:e2:92:e7:b1:0e:d8:ff:23:
1b:00:c4:b8:0a:87:ad:9d:b0:35:3a:b7:0e:63:42:e6:6a:21:
51:fa:6a:27:c9:07:00:a8:28:64:01:20:9d:de:9c:b8:fe:24:
92:67:07:7a:35:d2:41:69:0b:b9:16:30:8f:56:ab:0e:0c:f6:
6f:48:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:20 2025 by rpki-client