Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa
File: a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa (raw, json)
Hash identifier: eWQ217GAQodfUJ+/Q2Sd/dbcIQuNevRJ1wARkbwz9AU=
Subject key identifier: 87:57:0F:DF:45:44:83:3D:2D:54:50:E5:2E:CA:0B:5A:A2:E5:2D:4B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F542FEE81B286CD29A3300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.141.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:42:fe:e8:1b:28:6c:d2:9a:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=6fce71ec-6702-4697-8081-2d6c50c0ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:81:d0:a5:65:43:f9:f3:88:17:80:37:7c:
fe:7a:6b:7e:60:e7:e1:8c:0f:19:8c:62:5d:7a:77:
dc:71:ab:71:8e:16:19:4e:61:bb:ab:93:b4:4f:42:
12:cc:61:a3:db:10:f2:de:1a:d6:33:f2:20:1e:59:
08:07:91:20:4a:54:aa:6a:de:ca:ce:a5:8b:a6:a5:
07:c2:16:c3:92:ee:b5:28:af:8e:20:f5:4f:6e:2b:
ca:d4:28:45:ef:20:5d:c5:42:9d:77:d2:58:25:4e:
6f:fe:1c:0b:34:fe:21:af:29:ac:86:a4:5a:e3:01:
cd:43:4b:e1:04:c1:e2:cd:c1:5c:34:f0:40:43:b4:
e6:27:5f:3f:bf:b4:43:f4:53:eb:45:05:4a:50:09:
82:03:a1:40:60:68:6b:be:e4:11:41:81:d4:6c:04:
59:92:f5:ce:a1:7c:4a:77:ad:f9:0a:f7:f8:e2:a2:
2d:33:e8:86:e7:60:54:50:e1:39:a2:19:4b:b2:f1:
f3:fa:67:28:2e:76:85:9c:02:16:b3:6d:20:98:0c:
1d:04:1b:28:43:16:46:71:96:51:d2:43:42:0d:af:
c2:a2:c6:f0:99:30:f1:02:a7:81:81:19:86:0f:ad:
35:b0:3f:e3:9b:28:d5:b5:9d:23:86:a4:3f:8a:4c:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:0F:DF:45:44:83:3D:2D:54:50:E5:2E:CA:0B:5A:A2:E5:2D:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:09:e0:33:ff:56:a9:f8:c4:79:f9:31:07:45:92:88:c6:5f:
2d:14:1b:e8:65:bd:eb:0c:f2:47:7a:17:b7:34:de:6e:b1:be:
dc:38:ed:e6:ac:70:bb:2c:37:80:6a:ae:21:92:84:4d:55:a5:
54:96:c8:8c:e4:88:4d:97:fd:dd:06:08:63:9e:cf:8d:14:24:
d3:ea:04:10:72:6b:57:63:cf:80:a4:c3:9b:8c:74:24:a4:ca:
3a:27:f2:0a:bb:f5:84:1a:59:28:eb:d1:57:95:23:9f:f7:01:
df:88:88:58:e8:e8:df:db:bd:b2:d2:72:0a:3e:6e:e2:7a:36:
12:c4:62:53:20:2e:86:f2:f8:cf:5c:03:6a:8a:68:c4:e4:a3:
e1:33:76:c5:fd:00:0a:68:b1:09:e5:94:66:f6:ad:59:e9:d6:
2f:14:e7:eb:fb:55:df:b4:55:a0:83:16:a4:a4:af:9f:eb:1d:
21:3d:b4:16:87:d8:0c:14:38:7b:d3:58:35:96:6c:29:d6:1c:
4b:04:2a:7e:39:b5:be:61:99:0d:12:b6:2c:30:46:15:34:35:
a5:12:31:91:22:41:9b:17:db:9b:45:df:cc:ae:33:56:22:d9:
19:d9:82:63:a5:fb:87:ed:97:76:11:c9:a7:08:db:66:cd:ec:
fb:a8:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:22 2025 by rpki-client