Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b075205-6347-3600-a22c-de86db8f5837.roa
File: 9b075205-6347-3600-a22c-de86db8f5837.roa (raw, json)
Hash identifier: ry9rWkB2zjFFXUBVUvK0bpJ10+Mqrero9ioLiH4J4i4=
Subject key identifier: FF:89:EB:78:2E:28:EC:40:51:D5:7A:11:60:57:30:DC:E9:3F:28:05
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4E4D910AB960D2F7FAD40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b075205-6347-3600-a22c-de86db8f5837.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.84.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e4:d9:10:ab:96:0d:2f:7f:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=936e0d27-f08a-4f54-b862-861333af81ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:4f:b0:72:f7:e5:53:e5:81:68:58:de:e3:
7a:e2:46:cc:33:3f:a0:84:a7:4a:38:f2:99:02:a1:
a7:67:8b:88:4f:22:d0:6b:ed:d0:f1:76:91:f7:0e:
9e:2c:f5:13:68:5f:77:4a:fe:6c:8a:eb:36:0c:b8:
bd:85:a0:a9:d0:13:b9:56:1c:39:34:ae:80:54:c6:
c7:e3:0e:cd:4c:78:36:94:9e:2a:1e:c0:02:26:10:
78:14:97:a7:a7:57:5b:ce:3d:13:25:43:2e:4b:4a:
37:52:3d:12:81:09:52:a7:06:3a:34:fe:04:42:8d:
ba:72:13:97:96:51:ee:02:be:c8:cc:f7:a6:86:1b:
94:1b:88:ad:a3:c0:bc:d1:99:73:43:33:97:69:ba:
9e:e9:43:9d:7e:d0:f0:1c:cb:63:59:90:93:c3:ba:
16:63:e4:74:ef:4b:54:90:4c:83:e6:a0:ff:04:2b:
f1:e7:fb:f7:13:6b:1a:fa:31:f7:38:b6:23:ef:71:
74:41:f1:4f:8f:e2:b4:13:cf:5b:42:9b:c3:02:6e:
bf:4c:e8:ed:28:17:0d:8d:ad:09:04:91:0d:15:2f:
9b:22:39:49:8e:91:f1:1a:0a:a5:f4:03:77:96:91:
e8:7b:c2:e6:0c:0a:b9:11:14:38:65:7a:a1:c3:a6:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:EB:78:2E:28:EC:40:51:D5:7A:11:60:57:30:DC:E9:3F:28:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b075205-6347-3600-a22c-de86db8f5837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.84.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:a3:d2:86:9b:17:47:bb:7d:04:1a:2d:fa:7e:cd:a7:52:d9:
83:55:80:f7:e6:22:33:a1:1f:8b:02:dd:06:3e:2c:99:cc:cf:
d5:74:de:18:ba:54:7e:4d:75:58:00:dc:26:4a:de:d1:c1:3f:
64:85:c7:a3:f7:ab:95:b9:6d:67:e2:09:c3:39:d0:02:d8:fb:
db:7a:54:93:fe:9d:f7:97:07:d6:8d:69:6d:9b:57:a2:2f:7c:
34:c2:de:b9:e0:47:28:d5:9c:2e:87:15:67:b7:b5:ca:42:a7:
23:96:be:08:03:d2:7b:7a:c8:71:82:93:b4:b0:f5:3d:52:f5:
d0:d6:d3:79:33:6d:5e:a6:80:18:dc:fa:17:2e:60:c9:c7:32:
2c:04:8f:7f:93:7c:a4:d6:d9:0c:4b:4b:20:88:22:12:8d:8f:
f0:7a:11:03:3f:b0:43:7a:57:07:a3:49:9d:85:8d:2c:99:26:
14:1d:a9:df:20:2b:b8:d7:b9:1f:b5:9a:c7:84:bf:61:a7:eb:
7f:5f:c0:f0:44:25:5b:68:98:41:31:75:0d:ac:93:bb:be:83:
0f:b0:76:bc:ac:28:79:7f:50:a1:2e:5d:f4:0b:3f:7c:62:55:
48:d8:b8:6f:73:8e:fd:73:f0:3a:49:21:52:bd:8d:dd:99:be:
c1:aa:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:11 2025 by rpki-client