Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c700c903-f5e7-3271-9da8-0172521ad906.roa
File: c700c903-f5e7-3271-9da8-0172521ad906.roa (raw, json)
Hash identifier: SN2AYPsxJGjrPXnQAx9kpQD1kNP1Oe98qGXtFHU/5Xw=
Subject key identifier: 99:6B:B3:AA:81:D1:26:EA:6B:DB:3D:E4:58:88:11:78:B8:18:CF:2E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4E9DA0C769EDFF403B880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c700c903-f5e7-3271-9da8-0172521ad906.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.135.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e9:da:0c:76:9e:df:f4:03:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=18bb2e12-85fc-473c-b6e9-aae5991822be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:80:d6:a9:99:a6:94:77:a5:a9:19:8c:71:
e7:3e:68:c3:5e:fc:8d:df:86:a4:3f:6c:3c:a5:a6:
8b:37:77:c7:ad:a1:e2:18:cb:6e:aa:f9:d9:8a:9f:
ba:a9:b4:c4:77:33:46:3c:5a:e3:3d:d4:5b:cf:0f:
ac:54:f0:84:72:b4:9c:fe:79:2d:61:3d:1c:c8:b2:
bb:b3:2e:29:f9:7d:84:15:f3:b8:e4:54:70:88:eb:
48:01:fb:89:b8:f0:a2:d7:70:99:17:19:cb:b8:7a:
38:e1:98:04:21:12:7a:56:dd:e5:2f:26:73:a1:9f:
50:8b:6e:93:6b:2d:56:4f:a7:5c:70:ee:81:7f:4a:
9a:3a:6f:75:ec:6c:47:e8:85:cc:a1:ae:07:85:30:
94:a0:70:67:43:2f:4f:00:19:a7:fe:50:e8:6b:4f:
b1:cf:ba:ee:c6:d1:a8:92:55:80:8e:d4:8d:bb:9e:
32:5b:24:ab:f3:bf:c3:55:8a:63:84:71:f5:f2:55:
6a:e7:7c:f8:62:4c:66:87:45:61:56:ce:e0:69:08:
1b:26:c5:82:31:84:90:fe:3e:37:74:4a:76:12:c1:
3d:8a:c0:69:bb:91:07:dd:11:89:ff:74:c4:81:a5:
a0:57:ee:83:dd:5f:6f:12:87:51:f8:78:a0:2c:86:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:B3:AA:81:D1:26:EA:6B:DB:3D:E4:58:88:11:78:B8:18:CF:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c700c903-f5e7-3271-9da8-0172521ad906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:2e:e1:8e:2d:8d:b6:95:da:2a:2c:9c:1b:e3:e6:32:fe:53:
2b:97:14:9c:42:6a:0f:60:4c:9e:5e:9e:50:5d:89:a4:06:94:
40:2c:6f:aa:fd:1e:ad:74:81:2f:12:75:6e:66:cf:1f:e0:a0:
b6:e0:c8:f5:8b:97:2c:8b:a5:ae:02:36:0f:47:1b:d6:42:16:
40:73:c4:43:01:c8:db:38:d0:39:b2:07:cf:b4:c3:ed:3c:1e:
d2:ae:4b:23:d9:bd:53:1e:2b:72:f0:52:73:5f:0b:21:f6:fa:
23:4d:b8:f3:38:e5:c1:4e:f5:b2:30:cd:95:1a:18:e1:26:ab:
43:57:fc:74:65:fb:8a:4d:e8:a0:dd:92:57:07:76:74:36:64:
55:78:9a:1d:1b:0e:d2:3b:ae:b6:3b:a6:78:21:22:bb:f3:4e:
2f:68:04:56:57:b8:ab:39:62:fe:43:b4:7b:0f:be:ac:af:3f:
08:06:f6:22:0f:8c:7f:f5:46:f1:76:12:d2:d7:19:79:c4:1e:
ea:0c:28:59:c7:b3:dc:eb:3d:02:d5:d6:3a:71:f5:c8:b7:b1:
e6:03:4c:a9:1a:f7:e5:ee:8a:64:97:50:81:6f:e3:c4:5f:30:
62:a2:95:1a:14:78:e6:e0:d1:5e:7b:b8:46:0d:82:7c:27:f7:
08:47:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:18 2025 by rpki-client