Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa
File: b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa (raw, json)
Hash identifier: 2Y8nNUMRxP/punyCcOmWqwm7Jp7nMEfIDE8MEYDnN3c=
Subject key identifier: 63:7D:89:F3:CC:7B:88:30:AA:48:ED:5F:84:F0:B8:C3:F5:A9:0B:00
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F521067D36669ECBE39140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.98.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:21:06:7d:36:66:9e:cb:e3:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=732f4bb9-3851-449b-90a2-77f86336ea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:57:09:69:a8:26:20:a3:5b:5e:b9:65:08:
d4:4a:cc:90:f5:ae:81:4c:aa:6b:59:49:41:bb:a2:
b7:14:e1:3a:e3:2f:c1:82:a0:48:77:9f:97:9f:ba:
1c:5e:75:68:94:56:1f:a7:bb:3e:c3:72:07:47:fc:
66:e6:dc:94:a0:eb:2e:21:cc:9c:16:99:4e:e1:ab:
ef:00:ee:2c:61:11:5e:03:ef:ba:82:0b:0c:a9:e9:
d0:8a:9a:e6:44:93:b4:36:ce:98:54:1f:b0:da:5b:
8c:1e:a5:1b:ee:ef:0a:14:cd:a2:20:a1:d4:9f:29:
8b:f6:e6:90:8d:f7:2e:c3:32:87:a2:52:c4:d6:da:
5a:c1:4f:1f:d1:e5:86:40:56:b4:bb:f9:a0:c7:7e:
17:f5:14:c5:29:94:68:08:1b:4c:44:dc:77:d4:e4:
e9:43:48:2a:65:cd:a0:4b:df:8d:9c:26:dc:39:1a:
f5:33:00:f0:fa:41:51:af:b7:0b:9c:6d:f7:bd:c0:
77:70:15:f8:21:16:e5:14:46:4e:94:43:9d:99:2e:
56:45:28:e3:09:11:56:ba:7a:27:f2:a2:c9:45:55:
e4:09:07:37:08:19:72:23:c0:01:96:e7:be:ac:00:
9e:70:e5:33:8f:94:83:7c:70:30:97:97:9d:1e:91:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:89:F3:CC:7B:88:30:AA:48:ED:5F:84:F0:B8:C3:F5:A9:0B:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ab:f4:a1:ba:18:a1:69:ff:f6:24:41:f3:68:9a:50:e6:6e:
b6:b4:1d:1d:7f:3d:3a:f1:c4:ee:01:fb:a5:4d:c4:b8:72:87:
0d:a1:9a:b8:92:e0:2d:68:99:ac:b0:64:bc:5d:1e:cb:93:7e:
90:95:90:76:82:a5:b2:6b:9e:36:55:9a:f5:43:87:d2:a9:d5:
74:91:f0:ad:6e:b8:3c:67:0f:ec:81:f6:e1:0e:7f:e8:ce:80:
7b:59:44:93:8c:46:0d:c9:a7:fa:f9:e6:e1:66:35:2b:a0:df:
e7:9a:eb:85:fa:eb:de:ab:0b:7f:a5:46:59:97:21:5e:5f:af:
38:fc:25:de:12:63:73:91:a6:42:7e:8d:ed:cf:f2:fe:71:39:
68:85:a3:ac:96:8d:d0:ac:18:6a:03:3d:c0:82:33:e0:01:cc:
cd:12:7a:b0:5c:80:10:b2:3e:27:38:1b:c7:0a:34:17:44:37:
5e:47:95:be:88:33:ba:10:0c:4f:11:9b:53:cb:6f:8f:66:ce:
dd:72:bd:bc:2a:d9:65:54:1f:53:f3:4f:e5:0e:21:1c:69:aa:
a1:8a:d5:da:84:a4:61:fc:97:90:a6:d6:d9:99:d0:68:02:07:
a0:4c:b3:e8:fe:f6:68:b9:2f:2a:4d:44:2a:f1:c1:01:40:06:
ec:a0:10:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:17 2025 by rpki-client