Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa
File: 9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa (raw, json)
Hash identifier: C4BCPv0z40Z9HVvW7/SRuQgWB2kPxtZnGr4iRppCkfg=
Subject key identifier: EB:90:F6:A4:97:B3:0C:03:2E:9D:7C:F6:94:E4:74:86:ED:C3:8B:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AB3C96DC4B43B1EA41280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.100.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b3:c9:6d:c4:b4:3b:1e:a4:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=72f29b51-a355-488c-bd0d-152e9c953f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:51:8f:ac:d9:eb:b0:54:f7:56:c8:e1:e4:
36:03:96:63:0d:1d:67:cb:9d:e9:98:bd:6b:ec:35:
42:97:87:b6:9c:03:4e:cd:ee:ee:ef:57:29:d1:87:
33:3d:11:89:f4:31:44:4c:1b:ed:33:d4:8a:d4:4c:
88:ea:ae:0c:12:de:e4:c0:df:7e:ef:d2:ca:6e:73:
f3:9a:4c:38:91:e7:d5:e4:f5:9e:a9:e5:d1:20:1f:
e0:64:0c:51:6e:9b:68:71:bf:82:79:f3:57:db:83:
ca:26:66:5e:82:e4:7b:fc:36:80:1a:69:fa:4c:aa:
95:eb:18:2c:5e:66:c9:57:8a:2f:08:6b:d2:5d:96:
63:f6:28:b9:6e:7c:fb:96:f6:1d:1e:a5:96:03:9c:
e0:cb:2a:a6:f9:3b:09:41:12:0f:64:c8:69:38:1d:
95:87:23:98:cb:cb:a2:52:02:81:20:69:ff:bc:78:
ef:15:07:7b:5b:7c:d0:1f:e2:d1:e9:c8:15:3a:1f:
45:24:d2:08:d6:ba:03:e1:53:47:39:13:71:00:00:
23:47:15:c1:a1:4f:46:c4:ac:3e:81:cf:ca:c8:49:
ef:f0:69:f3:fd:2a:ad:b4:9b:85:9e:69:75:ed:80:
13:d0:0d:b3:40:26:da:8b:89:fe:a5:d7:dd:8b:0f:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:F6:A4:97:B3:0C:03:2E:9D:7C:F6:94:E4:74:86:ED:C3:8B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8f1b6e-b885-38e7-ade6-dddb8a2da4c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.100.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:2a:2e:3e:16:87:62:23:0d:69:77:ab:4b:23:eb:45:2f:b4:
f9:d2:16:2f:f7:e0:5c:56:b4:ee:2f:db:4d:71:51:da:b6:33:
e7:cd:53:46:ea:11:c9:b8:98:c4:ee:56:27:ce:5d:ab:af:c5:
85:69:13:98:92:4b:4f:34:23:01:6b:83:a1:b0:02:f4:62:87:
7d:ae:7b:ff:07:d9:df:81:54:49:36:00:bb:0f:53:19:e8:16:
95:8f:88:e5:4d:bf:51:c0:2f:69:56:06:12:bb:23:3d:63:5f:
87:80:9c:78:3e:50:b7:54:11:d4:93:11:c0:95:fd:a0:4b:47:
44:c9:12:72:2b:fe:33:9c:ab:af:4e:b5:c3:5a:05:b6:de:75:
7e:54:54:9d:96:ea:f5:8e:98:8f:49:dc:94:53:9f:e2:9e:b9:
c8:f6:d7:8f:30:6e:cb:28:8e:50:a4:43:8e:b9:28:b8:5c:9f:
73:54:f4:4d:65:0b:08:24:84:ee:0e:46:e6:a3:ec:7e:36:f8:
77:a8:41:1a:f2:f2:61:1d:53:74:01:cd:40:eb:29:4c:30:ab:
b9:e7:6b:6c:9f:f4:71:6f:11:97:42:61:26:92:70:01:76:f8:
1b:d0:48:d8:65:f6:6b:ed:6e:48:80:e4:0c:c4:f2:fa:25:22:
85:64:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:35 2025 by rpki-client