Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf4300f4-578f-32dc-9eff-c1e110a58d24.roa
File: bf4300f4-578f-32dc-9eff-c1e110a58d24.roa (raw, json)
Hash identifier: 3HaFUE7aKB8gYtZcE29GIY9EPDMeIF8XAzzPrkSCqPw=
Subject key identifier: 45:49:0F:B5:E4:E5:91:84:55:74:97:C4:10:C1:B3:17:F6:6E:20:DA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584891EE11A178711C1A6D6D4640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf4300f4-578f-32dc-9eff-c1e110a58d24.roa
Signing time: Fri 17 Jan 2025 02:38:47 +0000
ROA not before: Fri 17 Jan 2025 02:38:47 +0000
ROA not after: Thu 17 Apr 2025 01:38:47 +0000
asID: 396982
IP address blocks: 34.13.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:ee:11:a1:78:71:1c:1a:6d:6d:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 17 02:38:47 2025 GMT
Not After : Apr 17 01:38:47 2025 GMT
Subject: CN=a8be5177-0e3d-41c9-8a54-1609aebb7856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:e7:0f:5d:2e:8e:37:93:5a:af:42:e5:e7:
14:ae:54:02:f1:1c:95:11:7a:6d:f1:71:d2:cb:e1:
8e:5c:b7:a0:54:24:89:31:2e:57:8b:66:d4:0e:fe:
8f:ef:fe:91:a0:09:f4:66:62:23:96:f7:ff:c3:d4:
fa:5f:2d:18:b2:66:11:15:31:85:fd:4b:00:a5:13:
a9:2a:eb:50:2e:84:e6:4d:24:c4:98:8e:e3:7f:a3:
8c:0f:20:c1:1e:cb:ac:23:3a:a0:36:c5:b8:6f:6e:
30:b7:1f:48:91:a0:47:85:63:c8:21:eb:fd:86:0f:
0b:30:c8:91:7a:37:50:04:80:0f:18:2e:ae:1e:5f:
3c:dd:fb:09:ca:f9:1f:9f:39:a2:27:83:3d:00:81:
53:ca:22:92:1c:d3:a3:96:92:32:a5:b5:de:95:18:
18:75:e1:ac:2b:3c:06:15:da:ae:69:e8:d4:18:0e:
37:5c:1d:fd:e3:1e:5d:3a:aa:25:96:74:48:ad:6b:
e2:d9:ae:b8:db:5a:cf:cb:fd:bd:4a:4b:af:a6:19:
bd:d4:70:bf:f6:26:4b:4a:01:a4:39:a4:b6:c8:cb:
52:f3:6b:cc:42:d8:9c:99:e8:03:cd:e5:d2:c2:a3:
35:42:a8:93:8e:c3:f3:d6:2d:f0:a4:d6:8d:79:7c:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:0F:B5:E4:E5:91:84:55:74:97:C4:10:C1:B3:17:F6:6E:20:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf4300f4-578f-32dc-9eff-c1e110a58d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.13.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0a:3d:43:0b:09:b7:08:fc:2a:92:7f:54:88:9b:9c:d0:2e:
08:8b:76:62:47:6a:a6:c0:8c:e1:5e:ed:30:b5:d5:ae:6e:8e:
47:ba:36:79:8d:2b:32:4c:d3:27:3c:aa:be:77:84:27:3e:72:
99:24:5f:74:e6:e6:00:26:c8:01:e8:29:3d:74:91:4f:df:75:
c3:94:a3:59:70:1c:bd:f7:99:8f:cf:cd:e3:d8:7e:c7:03:14:
b9:5d:8f:bb:eb:10:b4:f7:2d:3a:63:0f:8a:d6:50:ac:0f:e6:
a5:02:c4:6f:1b:d1:81:c0:5b:ca:32:24:86:01:0e:1d:98:d5:
b5:a5:04:f0:66:6c:8e:48:c8:b8:48:ec:5f:bf:5b:bc:98:32:
fc:81:6e:04:a0:d0:fb:a4:a3:7a:84:00:ba:8c:77:33:5b:2b:
2b:b9:1e:cc:45:12:d0:1f:d4:71:cb:f3:09:be:40:bd:b0:34:
ea:bf:2f:7a:b4:6b:1f:48:49:13:8b:3b:73:ae:00:c2:86:78:
d0:34:8b:fd:ba:3a:31:12:3a:6d:7e:75:3b:1a:47:26:2f:ab:
f5:6b:34:c4:33:b9:5c:61:1a:e4:1f:0c:70:2e:a4:7a:e0:d4:
f8:cf:70:5a:53:31:7a:34:b7:b2:63:6a:33:1f:c8:b1:0a:66:
ae:ff:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:00 2025 by rpki-client