Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa
File: bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa (raw, json)
Hash identifier: OQSRggYLeKKz1Y+kQHTsudGIkYCXhjF2VNGXqLZU5oQ=
Subject key identifier: F7:11:39:6D:6A:9C:AD:04:FA:69:53:83:E8:C3:84:60:CD:3C:0C:3D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5447FC9474614DC2E4A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.158.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:44:7f:c9:47:46:14:dc:2e:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=b80b37bf-729a-4392-81ed-f851519b759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:32:66:76:d4:1c:ec:8e:a2:1f:b0:b6:e4:
7c:8f:0e:88:43:a6:bf:bf:f0:49:07:61:be:4d:c7:
6c:cc:f5:f1:86:d9:4b:93:b4:37:b5:a8:a9:1d:44:
e5:37:35:3c:92:9c:b3:49:90:ef:b9:6c:50:df:5c:
63:20:38:3b:be:0d:c7:db:23:09:d6:08:74:ab:0f:
11:9d:dc:34:ea:64:98:72:74:54:92:29:76:f4:07:
28:a4:c1:d3:db:58:ef:74:61:9b:0d:ba:05:94:da:
91:b4:f9:72:1a:9d:37:b0:22:60:fe:2e:a6:34:f1:
48:e0:5e:fd:13:0a:94:96:52:99:86:00:b0:73:47:
b2:87:e8:ef:a2:2f:5a:1e:63:d6:ec:86:80:4f:76:
6c:bf:b6:6b:68:e8:00:81:29:b8:31:b6:19:83:b6:
be:de:69:0a:10:ca:fa:80:06:c6:90:a3:d6:2b:07:
6a:18:59:85:06:f0:90:4b:8e:3f:08:a9:71:66:1d:
2a:fb:02:ec:97:e0:47:ab:4c:8e:a6:0d:eb:cc:45:
83:04:59:3f:d6:97:78:0c:7d:dd:de:5e:00:fa:a8:
f4:d9:f0:1d:b6:40:e7:72:f4:5d:29:1d:72:ae:0a:
9c:3b:80:f8:76:14:39:76:54:26:d3:ab:f7:bd:bf:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:39:6D:6A:9C:AD:04:FA:69:53:83:E8:C3:84:60:CD:3C:0C:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf024a64-7dca-3fd4-b9b4-c4d9494fc25a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.158.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:37:5c:60:06:9d:60:cc:be:be:ce:d1:3c:61:e2:c7:b0:dc:
cf:e4:be:c1:ce:de:91:b3:07:62:27:2b:21:4f:ac:af:f3:3d:
67:73:90:48:be:c1:d8:6f:6a:a5:73:94:22:be:ff:8d:48:e8:
6c:49:16:6c:df:9e:f0:4f:13:f6:e0:f7:df:e4:b6:c9:3a:d0:
14:b9:b8:74:57:96:a6:1b:86:00:6a:6b:6e:c7:32:ad:04:35:
81:c4:86:96:72:07:35:9c:10:cf:a7:f6:40:11:01:a3:42:b0:
53:86:15:27:18:cd:2f:fb:6f:46:6b:4a:40:54:5e:d0:c7:14:
d6:d7:61:3a:89:85:e1:bc:e0:10:0b:1b:dd:3b:04:b2:f2:0a:
0d:dc:85:b2:e8:ab:76:7a:e2:a5:0a:0a:61:85:69:38:de:67:
0b:96:1b:e3:47:f0:a1:bb:45:90:33:58:4a:53:68:ac:09:8f:
92:57:2d:c2:5e:d8:fd:7d:5b:f3:9e:59:4f:6c:f2:99:a8:d2:
b8:be:fe:0b:41:db:1a:eb:7b:7d:93:9c:5b:7a:2e:f7:a9:28:
d4:8d:fc:6e:30:5d:f4:7c:95:2a:2b:d1:87:d4:cc:b5:79:8e:
24:78:3e:d0:34:11:9a:14:89:f6:04:0f:2c:30:c4:b5:ad:ef:
b0:1a:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:20 2025 by rpki-client