Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a46c1996-849b-34c5-9146-4704ef3bce6f.roa
File: a46c1996-849b-34c5-9146-4704ef3bce6f.roa (raw, json)
Hash identifier: SVMLtRNxucNEm4l11BFr3G9j1+30360a6lCxeIfp24k=
Subject key identifier: 05:9E:5A:00:40:EF:B5:D3:BD:34:41:EA:48:7C:31:58:98:6F:BB:03
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AA785080063E3F7449600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a46c1996-849b-34c5-9146-4704ef3bce6f.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.121.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a7:85:08:00:63:e3:f7:44:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ff070afa-62e3-4600-9415-d675066cbd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:46:48:0a:ac:b3:bb:47:4c:58:cd:24:24:
21:a7:b4:ed:18:68:84:30:cd:df:4f:9c:49:2b:69:
0e:d3:c8:a6:8e:1a:9e:47:be:0e:62:2f:4d:23:03:
86:4b:65:e8:8a:85:86:e1:b9:95:6f:96:f6:90:51:
0d:e6:0a:57:e9:71:45:de:ce:ef:6f:08:a3:dc:af:
0e:22:b8:44:30:88:fb:31:9b:ce:f7:9e:17:1b:bf:
a1:ce:9d:51:1c:3d:1e:19:0d:84:4a:21:50:b2:01:
55:17:d5:cb:92:c0:12:fb:7d:ff:09:31:14:8e:f3:
b4:68:d9:b2:e9:8c:72:43:e0:02:5b:9e:0c:a5:e3:
e8:04:2c:65:41:f0:66:b3:08:28:42:dc:d2:20:53:
40:ac:f0:a7:c1:78:b0:09:e1:c1:45:55:fe:e5:e4:
b6:9c:df:77:0d:00:25:33:c0:b3:24:86:bd:0f:fe:
2d:de:0f:dd:0d:f1:37:75:42:49:b3:72:c5:4b:22:
f9:41:0b:80:72:15:ea:b3:25:79:2a:9c:41:74:0d:
11:af:b3:08:e0:d8:c5:b1:b9:f3:d9:91:8c:5f:2a:
a6:4d:67:23:58:51:1e:1b:b5:f2:9e:31:6e:7f:8c:
c6:38:e0:ce:88:ef:5d:66:2e:41:c2:34:4c:bc:7c:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9E:5A:00:40:EF:B5:D3:BD:34:41:EA:48:7C:31:58:98:6F:BB:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a46c1996-849b-34c5-9146-4704ef3bce6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.121.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:32:f2:24:44:20:12:9a:d8:22:21:fa:94:37:45:26:f0:75:
f6:dc:9f:06:62:2a:7d:51:07:0d:5f:13:49:d8:e6:8f:48:b9:
94:7c:af:cb:f1:95:b9:dd:23:f6:91:01:47:51:7c:53:e5:66:
b9:92:0e:24:99:4e:03:56:c9:df:7a:f7:40:e4:b8:c5:56:0c:
9b:5d:9d:32:93:76:a8:da:14:ee:7f:de:57:8d:b7:1d:d1:08:
df:77:ae:4f:b1:0b:e4:a0:3c:c7:c1:20:14:b3:53:be:85:96:
2b:c5:2d:dd:51:40:1f:fe:fa:8e:36:6e:42:ce:8e:96:fb:af:
ba:5a:61:cd:e9:3d:13:54:9c:12:75:5a:7f:13:f9:02:59:19:
f5:32:ea:9e:69:c2:70:9f:d3:cd:b0:3f:e5:3b:02:24:f5:36:
61:e4:65:f9:f1:54:36:c5:6d:11:01:f3:e7:52:74:09:50:0f:
a2:1b:fb:36:5f:ff:c2:4a:7d:7d:33:b4:50:ac:c6:44:05:7a:
3e:9c:2b:25:2d:ca:78:7e:48:ad:5b:3a:ea:50:a7:7a:06:77:
fe:fd:ed:c5:aa:ae:bf:f9:c2:13:b7:a4:95:99:8d:a0:5f:2b:
c7:8b:3b:83:f6:97:f7:9d:e1:1a:b5:fc:fa:82:5f:90:27:b3:
c2:0d:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:43 2025 by rpki-client