Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0545bbf-989a-3be9-9195-3800e6fd6d50.roa
File: c0545bbf-989a-3be9-9195-3800e6fd6d50.roa (raw, json)
Hash identifier: FA3AwGatnbseY1EHNwkor7oMzygH+cKGfsQmcGlsph0=
Subject key identifier: D8:A5:3C:17:23:DB:D4:AD:21:BE:38:0D:6D:97:FD:90:82:35:60:39
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D69D9C4EAC02BA5D09C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0545bbf-989a-3be9-9195-3800e6fd6d50.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.78.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d6:9d:9c:4e:ac:02:ba:5d:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=d4e8dba2-f927-4a17-8c05-fa5b5e0c6231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:21:df:eb:40:5e:f3:3e:29:67:9e:af:73:
de:28:4a:8f:2f:0b:1b:a9:fe:5b:d7:71:aa:7d:34:
5a:ed:d3:69:8a:5b:8c:7b:e8:5b:b5:e1:30:33:78:
ca:8e:35:a4:5c:f7:8c:23:8d:41:49:ba:c7:08:74:
37:42:7f:ea:a2:0a:e6:13:9d:7f:f4:15:84:7b:cb:
30:49:dc:71:36:b5:35:29:b1:d8:a6:96:e2:2e:d7:
95:44:40:fe:42:6c:ab:11:af:15:03:29:84:2e:b5:
3e:79:70:58:45:52:a2:fb:f8:61:73:e7:24:cd:d5:
50:a3:01:1a:4e:59:1d:70:43:b9:d8:20:4e:31:a9:
a6:f9:4a:c1:0d:e2:5c:c3:2e:72:8c:52:48:af:13:
b6:cb:4c:14:52:dc:f0:1c:b3:06:72:47:2f:82:ac:
90:9c:19:4e:2d:4e:4b:3a:a1:7c:ee:89:32:a4:f4:
69:45:c1:6b:ab:1a:7d:b9:8f:50:08:4e:75:ad:80:
b9:86:e3:e3:67:51:3e:2b:31:08:59:2f:fd:9f:c8:
6a:90:dc:08:c4:ad:f5:41:43:a5:a1:5e:d8:ae:db:
fa:c8:75:f2:75:61:84:e1:34:a2:04:a9:3a:c3:c2:
58:2a:01:7c:22:93:f3:80:ad:36:73:d4:9e:f3:be:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A5:3C:17:23:DB:D4:AD:21:BE:38:0D:6D:97:FD:90:82:35:60:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0545bbf-989a-3be9-9195-3800e6fd6d50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.78.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:92:11:2a:27:96:e7:f4:fb:bf:b1:d6:b1:02:14:39:21:b9:
e4:02:02:17:c0:df:a8:66:ab:31:22:c3:e9:21:c8:a4:69:6d:
48:c4:e6:a8:c5:3d:c7:0a:8b:3e:c7:ed:24:96:49:9f:43:ee:
8b:fa:b0:84:ba:d2:73:40:f4:d6:2a:db:6e:cb:5d:85:e2:51:
07:24:39:85:e5:9d:95:79:59:92:76:59:e3:58:81:81:46:f8:
34:90:52:a3:d3:c7:ac:66:02:3a:1b:5c:2f:f8:ba:13:98:99:
48:5d:e3:d4:d0:d4:ff:43:c6:8b:b2:76:7f:0a:5d:e0:b1:23:
cf:ae:f6:a9:ce:2c:c1:66:92:3a:92:14:a1:37:3a:33:10:ed:
b8:e0:d4:0b:94:82:c4:b5:f3:4b:57:4e:33:fc:ff:f6:76:6f:
c0:cd:f6:ef:ae:09:f2:bf:74:92:e7:2c:f9:7f:9b:4c:9c:3c:
58:f0:ff:ff:e0:2e:3d:b9:63:55:c3:03:b4:f4:3f:72:f7:10:
49:02:aa:51:2d:f6:e9:ff:3f:26:5b:12:d2:6e:48:9f:93:36:
c5:3f:f7:fd:37:5e:21:49:8c:16:11:75:5e:42:86:71:e9:33:
73:ec:16:fd:86:c4:fa:ea:92:fb:13:2d:54:61:1c:80:41:ac:
56:83:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:06 2025 by rpki-client