Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa
File: bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa (raw, json)
Hash identifier: e7hHLxs3svYg0bQ67bqRRUzXqNn9upvjS0A37jHVM1M=
Subject key identifier: FF:28:E0:F3:28:6D:0F:17:1B:A0:8B:9B:E4:3A:8A:04:93:27:A4:7F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584883E5C0C5934F9451EAB19A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 19527
IP address blocks: 34.2.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c0:c5:93:4f:94:51:ea:b1:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=d14fc996-550f-4a26-b777-f6a8fb2cb7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:55:69:29:62:df:e0:be:c9:f8:b3:74:1a:
a3:af:63:c0:fe:00:9c:8c:54:14:02:d8:47:a2:6e:
83:3b:d3:fe:78:8f:e9:cf:f9:68:5f:b9:2d:7d:44:
31:c5:43:dc:33:9d:7d:51:a7:17:57:cd:01:5f:9e:
9c:dc:90:db:4f:20:c2:2c:1b:f2:f6:4e:b4:34:a1:
89:a2:b9:31:90:4e:34:8f:1f:e7:91:34:61:b0:3c:
b4:04:7c:84:52:bb:7d:be:c1:6a:25:0d:70:7b:48:
91:53:56:1b:00:0e:86:17:82:7a:a2:be:15:c6:6c:
91:80:61:59:fe:f6:5f:a9:d4:25:07:4c:dc:a4:f3:
32:aa:5d:1c:78:ab:8e:6c:c7:c1:91:ec:f8:a5:df:
37:cd:36:ae:79:43:01:af:3a:f5:99:d2:46:27:7b:
5d:be:eb:ed:e4:66:dd:3d:f5:94:25:05:e5:80:03:
31:b3:99:3d:fd:b8:52:a3:33:65:4c:fc:04:f3:85:
f1:e7:79:b7:f4:04:a9:ab:11:10:73:b0:a8:4c:52:
3c:38:41:90:d3:1f:bb:b0:8a:f6:89:c0:64:57:54:
84:1b:a9:e9:94:eb:96:9c:cb:80:70:67:8d:13:8b:
68:4b:48:10:3a:c7:f4:5d:dc:14:a0:69:e0:20:05:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:E0:F3:28:6D:0F:17:1B:A0:8B:9B:E4:3A:8A:04:93:27:A4:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf31511b-1dd6-300f-9dcb-a0132ebd8970.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d3:be:b8:f9:e3:3f:40:9d:7c:2b:21:58:6b:c4:87:6c:c6:
12:9a:44:ca:1e:2f:a5:ac:36:a7:0e:17:da:bd:12:f9:c9:68:
8c:a3:68:22:8a:1d:0a:84:84:2c:b6:cd:a0:3e:61:7d:d9:64:
a9:eb:7e:59:bd:a0:77:2e:b3:af:fd:89:e6:92:46:05:4a:df:
85:4a:5a:9e:47:24:79:ec:16:7b:31:77:8a:4a:31:31:a1:f4:
a9:51:e1:d9:af:e9:20:6c:38:1c:a9:27:7e:08:7a:84:c6:1d:
82:b0:b5:c8:07:14:d1:43:e6:23:07:a3:3f:bf:61:02:c7:74:
bf:46:9e:d2:00:05:5a:84:40:1d:f6:1e:b2:dc:33:ac:17:7a:
58:44:a7:2e:b9:a5:48:91:2e:34:00:5a:54:6b:35:63:b5:3d:
81:0e:ab:fa:a3:5e:05:bd:46:68:5a:96:0e:f9:ab:78:cf:44:
4e:2d:0d:92:66:3b:ee:ef:eb:5d:f7:bf:3c:14:40:69:00:40:
49:96:53:23:32:c4:f2:c5:60:be:38:e2:ba:81:7b:55:07:e7:
5b:b8:db:bc:67:f5:77:bf:9c:e9:b5:c2:34:e6:39:ab:b5:5d:
4c:2b:3d:c0:cb:fc:58:51:f2:03:45:fe:fe:19:1c:7e:f0:7c:
89:6b:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:27:53 2025 by rpki-client