Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa
File: bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa (raw, json)
Hash identifier: u56PKfha2+NrdGpKXg7kqE6WRqndhMvINUw1eEOk+jA=
Subject key identifier: 58:E8:32:64:71:D7:A1:99:2E:DC:1F:F5:C7:FF:BE:24:6A:4A:A6:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F53A83BFE8A55F1F4FEC20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.69.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:3a:83:bf:e8:a5:5f:1f:4f:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8db188c0-46ce-4da6-b259-454f5e23e320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:9d:a3:f4:1d:31:23:72:e1:b3:06:f8:37:
71:d8:af:91:11:b0:e3:67:d8:93:b5:d8:2e:59:0a:
85:e4:41:94:98:4f:b0:9c:22:23:e4:ed:32:85:0f:
bc:c5:8d:2f:29:fe:5a:2a:81:e7:69:b7:32:2d:9b:
85:b1:06:ef:57:0f:8d:5c:9a:28:e6:af:aa:58:57:
1f:f7:44:04:29:4d:80:a0:b4:e6:94:8e:55:44:3e:
a6:de:4f:1c:10:3d:b0:a1:a8:e1:aa:47:01:6b:6b:
19:34:c3:41:0c:7d:b1:bd:58:c1:91:79:24:7c:04:
b8:d5:91:9e:9f:b2:af:38:8a:3c:3c:10:a4:0b:93:
2d:4b:03:9e:b1:24:cd:f7:af:38:96:85:f8:65:43:
a9:b9:7c:63:86:6f:bb:03:1e:d9:0e:49:3e:00:92:
8d:21:09:9c:c0:2f:c2:2f:34:e9:d0:c3:51:ff:a7:
b2:a8:db:83:02:07:ca:23:3e:b1:2d:cb:4c:c0:0e:
83:10:27:cd:b6:c5:8e:f9:d1:fb:09:4f:e8:46:d9:
9a:35:3c:42:c3:e3:62:f9:78:73:a7:5f:5a:ba:91:
2c:fb:fd:ab:aa:2b:f2:a0:57:64:ac:16:1c:e1:db:
f7:ee:6a:d1:a2:d8:d8:59:e1:94:b0:7e:57:0d:d2:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:32:64:71:D7:A1:99:2E:DC:1F:F5:C7:FF:BE:24:6A:4A:A6:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.69.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:fa:3c:b9:ee:c8:85:35:bb:e0:3a:22:2d:0a:5a:1d:61:64:
28:54:66:ea:f8:37:19:4d:78:bd:65:03:eb:33:0b:fc:32:7e:
ad:7d:44:58:a4:26:ff:33:a9:f9:72:a5:a3:f3:9d:cf:0f:83:
31:a8:cd:cd:64:9b:ac:a4:86:96:0e:d3:ee:2d:9e:8f:0b:6d:
8d:bb:b2:22:a4:af:c4:f5:cb:e5:f7:19:95:6d:53:c8:19:58:
7f:62:21:19:44:48:c6:3c:70:6a:34:8c:48:f1:bd:11:a0:23:
88:37:0e:26:29:78:b3:51:22:25:d8:01:5b:7a:8b:2a:01:8b:
40:15:d3:ed:d3:1e:2d:39:26:11:22:51:0e:d3:1f:d0:d7:44:
6f:11:af:e5:aa:ec:34:de:10:95:28:fb:cc:89:05:07:89:fb:
63:66:b5:f1:58:06:fb:8b:99:f9:3e:8a:68:93:d5:bd:68:0f:
2d:0a:4c:59:b0:6c:c9:69:75:5b:4e:ad:f4:5e:16:d2:52:84:
8e:75:97:28:c7:c3:1f:28:02:56:0e:fa:18:17:a1:08:3d:5b:
6f:02:b9:c0:f4:9f:64:73:6e:fc:f5:dd:73:a5:7e:ae:72:9b:
9f:1b:bf:55:e5:17:49:67:3d:44:21:e7:de:7d:ba:9e:34:45:
09:5e:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:34 2025 by rpki-client