Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa
File: a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa (raw, json)
Hash identifier: ZMXAvcp+2VtdihG04SOVtQaGrz71Fl0zzt1yyTPiOhU=
Subject key identifier: 6F:E7:63:BC:3B:1E:28:D5:95:11:14:C5:47:A5:08:E5:C2:31:D5:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5042214B0E148FE523500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.139.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:04:22:14:b0:e1:48:fe:52:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=355318d4-2ce8-4241-b2b8-9ad2750a65fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:75:ab:10:7d:82:c2:bc:d3:ac:d5:71:13:
c3:ef:68:c2:75:87:57:c2:6e:48:43:57:1e:54:41:
de:4d:d4:ec:dd:9e:91:b8:ae:05:47:19:77:57:8d:
74:be:01:cd:af:83:99:6c:fa:f7:df:52:ba:0e:28:
65:39:e1:9b:c7:87:0b:e1:46:e5:fc:4c:76:12:c9:
00:43:93:88:c1:7e:28:60:53:d4:b3:8f:4e:00:16:
1d:85:54:47:83:60:e7:7e:a1:11:f3:28:8b:f1:63:
3d:5b:69:e4:0e:d4:15:79:13:dc:ef:69:36:68:e1:
96:c3:e5:ca:4f:cf:ad:5b:26:2f:e8:ab:f8:5c:a6:
8a:39:bb:0e:a1:77:5b:02:d9:a9:a5:29:2c:b2:40:
d6:f5:5f:37:91:01:b0:e6:d9:a5:68:0a:a3:73:68:
45:61:13:a6:7a:1b:2a:c1:93:0b:19:61:f3:33:97:
eb:c8:3b:f0:32:bd:08:c1:60:c8:39:3c:63:1a:bb:
5f:e9:32:6e:0c:44:d5:4c:ce:b0:5c:fa:60:cd:34:
39:32:d7:30:70:e7:68:60:15:bb:96:62:de:a2:82:
ca:97:f6:b7:e3:3d:07:03:a6:d4:ab:28:65:7b:94:
67:78:ca:87:c2:6a:62:68:06:7d:8c:7a:5b:fd:6f:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:63:BC:3B:1E:28:D5:95:11:14:C5:47:A5:08:E5:C2:31:D5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.139.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:41:be:b4:20:9d:53:64:bf:a2:43:1c:d9:7a:7a:ee:6b:1c:
26:83:61:35:ed:af:c0:7c:4d:bd:65:cc:aa:16:bb:9f:f9:cf:
d4:c3:f0:8b:4b:94:73:97:ea:4f:35:06:57:c3:a9:94:00:c8:
5e:a4:be:ac:19:19:19:4c:e3:72:83:f7:8c:c8:f6:a8:65:32:
ab:5e:db:77:c2:56:ac:79:fb:56:b1:39:56:46:37:ce:ad:ff:
95:f4:f0:b7:22:d3:46:fd:3d:79:75:4e:76:c8:66:9e:9a:27:
5e:78:8f:de:a4:8b:9d:6d:8c:25:ac:29:d1:e9:94:d2:94:b0:
0b:65:19:3f:5f:c8:52:3a:ca:92:5d:9a:78:d7:34:49:7e:f0:
08:4e:c1:f7:fc:dd:1f:e4:ad:9a:f7:bd:c4:ec:55:36:fd:d5:
d9:8b:3d:5f:34:8e:fc:2f:a2:da:79:98:16:80:8d:bf:f4:92:
29:20:85:0a:84:fb:97:fc:f0:df:53:73:f3:c2:1e:c4:b2:66:
98:d9:63:97:fb:ea:6e:aa:f4:a9:77:58:70:49:bd:48:3d:1a:
39:29:7f:55:dd:c7:ea:92:12:b1:c8:9a:69:e4:0d:ce:dd:d4:
e9:f5:10:4a:49:83:dd:22:e4:48:8a:ef:41:1c:1b:e0:04:c6:
7b:12:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:32 2025 by rpki-client