Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa
File: cf6e7b37-0772-32d7-9247-62099beb3cd5.roa (raw, json)
Hash identifier: FFeRagapBRd0oMjd12aObYxZz63IyoEaMj1NrhfZZGk=
Subject key identifier: C1:EC:3B:60:83:9D:3E:31:36:B5:24:C4:84:BA:D3:0B:45:21:B7:44
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D56E8DD8D2035ED8B070
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.88.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d5:6e:8d:d8:d2:03:5e:d8:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=3397f3ea-0c96-40f7-8ca5-ed67f7fd4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:96:c9:ee:62:0d:87:0c:f1:b6:1d:8f:bc:
a0:8a:66:88:2e:2c:1a:01:1f:b5:31:c2:f1:6e:05:
2d:65:5a:3a:18:56:57:38:c5:6b:d0:b1:3f:aa:1d:
94:04:8f:7d:1c:0b:48:7a:0c:85:21:c0:85:f9:80:
86:4c:29:1b:dc:7c:ef:49:45:15:b4:47:af:fe:f5:
f1:6f:5c:14:73:24:30:66:1c:91:ab:e6:e7:34:eb:
c1:c3:10:f8:61:6c:81:f0:8a:e7:46:b6:33:de:c5:
ba:3f:49:ca:2b:19:92:e2:f0:a7:3b:0e:ac:59:fa:
63:62:14:5b:94:74:fa:31:00:9f:aa:40:f7:6e:8f:
91:23:3d:22:29:24:1e:67:00:05:42:1a:0e:db:ba:
cf:35:39:8d:d0:d9:93:ce:1d:65:53:66:bc:f2:2f:
2a:7d:d7:eb:00:ca:df:ac:15:62:46:4c:a2:77:6d:
54:94:51:6f:ba:81:8d:98:e9:39:58:96:b4:c6:ad:
3f:97:78:bd:a2:8d:0e:1a:40:d7:e8:48:08:16:90:
44:57:fd:59:be:78:21:37:43:67:97:9a:94:8b:03:
0a:83:47:fd:84:24:80:a8:27:81:a4:35:cd:46:ea:
f6:66:49:88:7b:5d:16:b7:28:32:1a:9a:e0:81:ed:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:3B:60:83:9D:3E:31:36:B5:24:C4:84:BA:D3:0B:45:21:B7:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e7b37-0772-32d7-9247-62099beb3cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.88.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e9:10:6a:61:67:df:23:8d:9d:5f:a3:1a:47:f7:d9:91:e7:
68:1b:a8:e3:43:cd:f8:8b:4e:e0:68:82:59:29:f8:e8:76:5b:
75:36:b1:9c:98:43:d2:94:fa:fa:d6:2a:46:3f:b2:c9:c9:1d:
a4:06:2f:70:80:aa:f4:d7:98:27:af:cd:43:71:d3:6a:4c:79:
b4:13:ef:5f:67:31:0f:01:46:fd:46:a5:07:f1:69:f5:fe:83:
8c:14:be:9d:b8:44:67:dc:a4:6c:69:6e:77:15:3c:6e:88:7f:
63:bd:ee:9e:01:2f:6a:f9:24:f9:94:96:fb:56:cf:cc:10:2c:
79:8f:75:20:8c:19:03:41:94:71:17:e2:37:f6:e2:8d:58:2e:
48:ae:65:e2:c4:f8:c1:e4:d1:fe:40:09:71:f4:e8:5a:02:b3:
b2:13:bd:d7:3b:c9:17:36:1b:90:1e:87:ed:2a:0b:9f:fa:5a:
91:eb:f0:a1:4a:63:69:fa:90:45:75:3c:2b:03:00:28:6f:cb:
86:32:d8:db:91:3c:76:1b:fe:d9:c2:ff:19:f9:64:ea:f9:9a:
79:ae:09:97:0c:5d:b4:29:5e:18:eb:a9:44:dd:3f:7d:a3:e9:
b6:11:1e:76:91:12:d3:c5:10:e7:2e:4f:df:d8:a3:3a:54:24:
db:a4:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:21 2025 by rpki-client