Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
File: b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa (raw, json)
Hash identifier: foRaaQTLP46uCEZOXV2qxL1AjPOeHd1Nmw3Z2gZdOzk=
Subject key identifier: 2F:CB:D8:85:4F:C1:C6:AD:63:02:F5:83:1D:A1:75:E2:EA:02:53:90
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848897B27988ED8D02DE2B5DD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 19527
IP address blocks: 34.1.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:27:98:8e:d8:d0:2d:e2:b5:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=5ef273ed-e0b8-4825-964a-47552a206355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:01:f1:4f:ce:6c:fb:06:7f:0a:af:af:87:
61:9a:7f:04:b2:7e:78:55:11:71:31:dd:27:2d:ee:
77:55:a2:c3:bb:a4:0e:bc:51:af:d9:c9:53:1d:a4:
b1:ff:85:36:a8:be:76:6d:6b:48:a6:db:c7:b7:41:
e8:44:39:bf:d2:d8:52:c4:b0:50:3e:85:76:c4:b0:
d9:51:49:55:b5:5f:57:7f:d9:b1:2b:08:8c:20:8f:
1a:70:04:c1:d4:b8:31:d3:8f:fb:b6:a6:6c:63:e0:
fa:f0:9c:1f:20:2c:a1:9d:4f:29:4c:b4:35:1f:0e:
ff:3e:96:2e:bc:a7:2d:03:c8:9b:e4:f6:66:dc:8f:
95:35:78:09:b5:ec:bf:2e:0a:c3:64:2a:aa:9c:4f:
c2:11:83:8a:de:ff:32:c6:da:b8:c1:c8:22:f4:34:
29:32:b0:96:f0:8d:49:ac:2f:cf:2b:5e:dc:48:bc:
1f:96:9c:b4:03:7d:57:ef:e0:0d:ba:87:4c:38:67:
b4:3b:9c:73:4d:ca:50:08:12:64:7f:c2:d4:c1:21:
0b:9f:96:a5:ec:88:55:08:d0:73:07:ec:95:2b:8d:
a4:85:1d:7c:f4:f3:fe:69:51:fa:e9:78:02:6c:16:
ef:dd:72:fb:8b:c9:a4:28:c0:e6:dd:51:9d:05:54:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:D8:85:4F:C1:C6:AD:63:02:F5:83:1D:A1:75:E2:EA:02:53:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:da:5f:c8:3b:98:d7:e8:d0:f1:a5:07:c1:be:d6:92:a2:16:
57:a1:b3:f7:ac:f3:66:d6:49:dc:25:18:f3:85:8f:5d:01:e1:
19:d0:ec:21:92:43:99:b5:bc:4d:10:08:f6:bf:ef:39:c9:dc:
2f:c1:2e:11:7f:d7:1e:aa:aa:ac:11:ed:3b:ad:37:9d:de:67:
93:30:0c:19:1e:b0:94:ef:b7:30:2f:0d:2b:6d:f0:d4:97:78:
34:a8:97:c9:2c:32:9e:f6:02:f3:d9:22:b0:89:17:f1:6d:6a:
df:55:6a:dc:63:88:fc:c8:c2:4f:a6:14:36:c0:e6:a9:9c:c7:
70:f9:25:f5:d7:5f:a1:8a:83:6a:d0:96:43:72:1d:cc:61:93:
ef:f7:94:00:33:06:e6:c2:cc:0f:4c:d0:44:b8:1b:ac:73:3a:
0a:bc:53:fd:1a:c8:2e:49:98:db:20:ff:51:76:a0:2f:ee:e5:
26:f3:af:c2:10:17:eb:6c:3a:9d:8f:6b:0e:ac:81:21:84:08:
f0:cf:f3:3e:96:e6:a5:6e:94:d0:16:c8:0c:7d:eb:5c:cd:70:
be:55:1a:a8:1c:06:3a:1e:2a:a2:f4:a4:7a:03:5f:f9:ff:9c:
b1:ac:8f:ea:d0:91:84:b6:de:bc:72:aa:35:b2:e3:a8:24:2b:
a8:4d:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:22 2025 by rpki-client