Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa
File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json)
Hash identifier: XebBxhY/CEMT8bn5SAOrgzS1k91ZoHpf96B/WzoeGrw=
Subject key identifier: D2:87:B7:D6:3C:DC:87:AD:F4:7F:64:3C:C1:2E:E7:AE:29:05:1D:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F8BAD71DE59BEB315420
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.66.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f8:ba:d7:1d:e5:9b:eb:31:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8f86b498-8263-404d-9c0f-bcd948cb77c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:92:b7:36:0a:31:ef:3a:36:a0:9a:4e:ba:
6d:64:f2:da:e7:ab:ea:e9:af:f5:a2:a1:00:ae:83:
c8:ac:3b:38:22:f4:2f:8c:3a:6c:9c:10:54:8b:ac:
c1:04:0b:4f:83:45:47:5a:51:6a:44:74:eb:74:de:
4d:bb:82:62:0f:a9:6a:5a:18:6e:f0:56:e1:af:0b:
15:a9:68:b6:08:33:59:88:da:33:17:b4:13:ae:7a:
68:df:b4:36:ab:e0:4c:11:90:25:a1:dd:e5:11:a3:
b2:08:bb:46:19:b6:50:81:c9:2a:a1:c5:e0:df:be:
b3:52:bb:62:69:52:88:4f:2e:ec:01:50:76:4a:47:
31:c8:15:0d:71:92:6f:35:a1:a6:58:9c:cd:a7:d7:
7a:51:8c:b6:ea:97:46:19:48:bd:d1:45:6f:9d:55:
3d:10:66:0a:99:79:a4:d5:ff:98:5f:1d:bb:46:42:
d8:31:df:42:41:eb:07:82:66:0a:f8:4e:57:87:84:
43:09:cb:b1:ff:08:1b:7c:5f:f9:86:7f:ea:13:87:
90:17:19:2b:4e:df:0e:00:b0:d9:1d:9f:50:b3:2b:
4a:4d:f8:39:d3:00:83:cd:47:41:bb:9a:e8:76:04:
c6:25:eb:0b:de:0f:1e:65:af:a5:7c:9e:52:e2:62:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:B7:D6:3C:DC:87:AD:F4:7F:64:3C:C1:2E:E7:AE:29:05:1D:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.66.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:06:5e:85:b3:51:68:8c:cf:9a:b7:a7:8c:b5:bb:fc:ff:6c:
95:6a:4f:8f:6d:26:97:03:04:1f:bb:74:15:97:16:f0:85:2d:
76:67:41:35:e6:a4:00:cb:b8:6c:3a:26:06:b6:d8:96:82:e9:
54:1a:04:36:15:36:f5:15:b9:92:ae:fd:87:cc:b6:76:38:fb:
3f:03:a2:7a:37:df:ff:58:0e:6f:6a:94:57:1c:b4:de:ba:e7:
5f:d3:d2:2b:94:99:74:dc:a3:52:7e:f1:d0:09:56:c1:5e:1a:
c1:fc:54:d5:fa:9e:ea:c2:ac:c7:56:d4:92:76:34:16:35:46:
f6:0c:ed:d7:f4:77:6b:42:fd:12:8a:33:d7:23:6f:ef:9c:8a:
2e:4f:de:b2:98:3f:56:79:04:a9:76:9d:99:b7:4f:12:e9:5e:
42:76:a0:2b:00:cf:bf:95:c1:9a:a0:9f:d6:42:11:6f:48:01:
fc:10:ed:b6:72:66:39:db:d1:05:02:40:e0:97:86:06:ca:cd:
b9:a4:74:f1:73:27:44:54:ad:2f:46:7c:b1:ec:bf:63:31:8c:
c9:28:53:e7:f9:d5:83:94:b4:c8:b5:30:3a:8e:05:1c:f7:8c:
a8:51:36:89:71:f0:4e:99:06:a5:bb:96:7e:48:05:79:e0:c0:
6c:74:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:28 2025 by rpki-client