Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa
File: bf6f3051-38bc-3abf-a853-242b9b807f71.roa (raw, json)
Hash identifier: MsqX5DCxOEzMCV5WXnbtQdlBVRtwTivJ4r8T6HF9B5g=
Subject key identifier: 60:D8:7B:67:11:44:BF:A6:BC:B4:09:97:EB:9F:35:47:5B:8E:42:D0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F544ADDED7E30F0A4E9000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.171.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:44:ad:de:d7:e3:0f:0a:4e:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=521b89b6-62e7-4f66-986e-f70db4750789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:b7:4a:a6:07:22:0c:ca:84:93:c4:04:4e:
83:b0:7f:07:4e:59:32:26:1c:90:c3:90:95:4b:24:
91:0b:9d:0a:87:11:54:fb:64:f7:f7:06:60:ed:6e:
8c:79:7b:98:cd:c3:08:9d:a2:0b:e5:0c:fe:1f:67:
7c:d3:a4:c6:56:f0:c3:79:6c:d2:90:15:c0:b0:93:
d4:56:b7:e1:6d:8c:33:64:15:c3:a6:e5:ce:99:13:
ab:32:d2:fc:fd:31:e0:f2:e5:ed:a4:57:83:0c:4e:
c7:db:35:aa:39:83:2c:d9:29:77:90:cf:7f:d7:bf:
9f:0d:2d:93:33:33:f1:2a:e5:3c:e0:15:83:ad:98:
8b:6a:17:21:12:a4:ba:03:e0:53:be:ae:24:7f:9a:
c2:8a:93:12:1f:ca:da:ea:9d:0b:3d:97:b4:05:46:
84:da:df:11:be:c7:8e:a9:99:86:41:d3:2e:9d:a8:
90:e8:31:fc:93:30:8f:24:e4:53:9d:b9:91:46:52:
00:8f:bd:52:89:06:7d:71:3c:5d:5d:f5:b0:f2:0d:
49:e7:7b:9b:a9:61:3c:0d:f5:76:90:5b:8e:a9:76:
73:a7:4b:8d:d7:5f:e6:3f:93:a5:5d:84:b4:78:7e:
05:ee:fc:51:65:40:53:4f:aa:fe:70:18:6c:1d:76:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:7B:67:11:44:BF:A6:BC:B4:09:97:EB:9F:35:47:5B:8E:42:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.171.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f2:0f:24:b5:b8:26:98:9b:b0:0f:c7:20:de:b7:7a:40:00:
4d:b3:e9:d6:fb:07:df:25:88:47:21:c7:30:fb:6a:2d:c8:a8:
80:a4:62:a4:1d:cb:75:dd:3a:eb:5d:97:1f:92:41:c5:fe:ae:
16:08:75:ba:62:83:a3:01:53:a6:3a:2b:bb:ff:89:34:b7:25:
52:42:1f:2c:6a:3f:88:7c:3d:99:72:2a:7d:45:54:bc:72:92:
0b:3e:e8:3c:19:d8:19:13:40:22:ab:86:ca:81:38:b6:33:19:
18:a9:b3:f7:d1:db:57:28:a5:19:d6:45:3a:e3:be:10:18:b2:
06:2f:fa:db:8b:9f:15:4e:bd:c9:0c:a2:db:07:44:3e:ef:0a:
6c:51:b1:b8:e9:5c:c4:19:5e:11:b0:9b:83:b9:de:b0:23:b9:
20:3b:ff:38:ee:cc:2d:a8:5a:47:b8:a4:69:9e:f1:a3:d0:26:
a2:9a:d0:6c:80:fc:8f:7f:1e:01:87:28:d9:91:04:74:88:19:
f4:cc:e2:b6:b4:06:ae:90:db:82:62:f1:60:47:cd:aa:0d:db:
a5:9e:07:9a:c8:fd:b6:23:4e:ea:a9:02:ff:cc:12:2d:ae:f2:
b1:55:34:41:13:23:e5:46:3a:cf:f4:d3:55:2f:21:79:06:04:
d2:c7:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:50 2025 by rpki-client