Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b923acca-0610-30e7-8989-d0627ce3e95f.roa
File: b923acca-0610-30e7-8989-d0627ce3e95f.roa (raw, json)
Hash identifier: LaDInSEuXXrX5f41b7uKF6+x5vDxNarV/W05zEPYsOo=
Subject key identifier: 29:65:AA:DC:42:EE:B5:1B:B9:7E:36:0B:6B:AD:4B:76:EA:49:FE:A8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F545192BADEBB49D3FBD40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b923acca-0610-30e7-8989-d0627ce3e95f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.79.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:45:19:2b:ad:eb:b4:9d:3f:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=607e3a18-c0bc-46e9-a977-eda53fbada19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:d3:1c:52:f2:65:32:7b:a0:86:1a:86:74:
25:ab:04:ed:0f:ec:42:95:bd:80:8c:ad:1a:e8:e8:
b5:fb:cc:80:c4:ab:5c:19:79:ac:41:9e:29:0e:c7:
ef:2d:0f:25:32:67:a1:49:63:85:a3:4a:c5:7b:50:
e8:69:97:64:d0:04:a9:51:1e:1b:91:ce:11:d9:44:
b4:5f:cd:36:76:40:95:20:f4:e1:2c:cf:00:0c:33:
80:06:c1:10:c1:4d:9a:47:99:e9:d7:21:77:d7:10:
80:a6:5c:a3:59:32:ab:dd:ba:0b:ba:6e:22:a2:65:
d8:cf:7f:d2:a0:2e:21:4c:94:5c:f0:41:02:30:b2:
31:94:95:a3:98:2e:98:bd:63:68:2b:a6:79:86:9b:
9a:73:75:82:68:9e:a7:f9:c2:59:bf:6f:08:63:85:
92:b1:27:d9:b2:a6:86:4a:e5:c5:43:33:5b:06:e6:
32:0b:07:f2:ae:de:64:c8:dc:a5:dd:da:1e:9d:23:
12:cf:84:d0:49:05:50:04:f4:c2:f8:ae:f9:3c:97:
8c:17:79:7b:ae:73:2f:d8:e7:91:8c:84:44:e9:9d:
1c:87:76:9b:1e:aa:c8:70:cd:ca:51:c6:c9:9e:b3:
0b:85:d9:42:19:5b:28:5c:bd:ab:f3:b3:02:bd:81:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:AA:DC:42:EE:B5:1B:B9:7E:36:0B:6B:AD:4B:76:EA:49:FE:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b923acca-0610-30e7-8989-d0627ce3e95f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.79.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:1a:cd:97:62:f0:e7:ad:38:a7:e6:99:bb:ff:fb:51:fd:37:
09:40:c8:bb:8b:06:a3:70:5d:a5:83:8b:d8:0f:bf:a5:cd:4b:
5d:22:c0:30:0d:45:fc:ef:b5:e6:c2:87:60:18:d4:5f:aa:fd:
28:4d:97:9b:c0:50:91:d9:6c:b7:8a:55:50:4d:d2:0d:c5:90:
c9:4b:a9:ad:66:8b:de:b7:0f:87:8d:a2:f8:94:04:90:60:7b:
9e:92:94:57:03:c1:cb:90:b9:79:4b:7e:95:d8:af:2c:8f:b4:
b3:86:da:1a:8b:07:16:16:c8:dc:c7:49:64:53:78:c3:83:78:
df:6a:1a:1e:67:a5:12:93:af:7d:f2:1f:a1:fd:a0:75:1e:27:
5d:01:f7:a3:9a:ea:e6:8e:07:a8:61:9e:81:98:73:55:8e:37:
97:97:f2:a7:3d:12:02:e6:89:42:bd:96:00:90:12:47:91:8f:
02:4a:39:89:ca:f5:39:19:84:f8:41:d3:ed:a8:f7:66:9b:7f:
ca:70:dc:c8:ec:93:5e:80:26:e2:f7:74:81:80:f3:b2:0f:b3:
12:b3:7c:88:28:46:df:4b:e8:fa:5e:9d:fe:34:1d:60:ca:0d:
bb:d7:88:6c:07:54:0b:7c:0d:21:76:70:47:c3:7d:e0:5f:d1:
fb:10:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:42 2025 by rpki-client