Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa
File: cf6e93e2-e568-3483-98ed-28d64c164239.roa (raw, json)
Hash identifier: uHBPtmezKp7lmGzr7JP2HQhF+5Jcyp+MYq1kZokwwQQ=
Subject key identifier: 92:31:EE:54:DD:85:3B:42:FF:6A:4C:F5:44:79:54:36:61:55:7D:13
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4DE10B8D1C2A4AC110E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.143.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:de:10:b8:d1:c2:a4:ac:11:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f04123bb-f408-4716-b55f-7de877325007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:14:db:a4:42:d1:fc:ef:b9:65:0f:c6:a4:
48:84:0c:89:26:69:e3:45:8a:cd:fb:09:26:a3:3f:
15:a0:c8:c9:a2:2f:75:60:49:b3:cc:14:2d:23:97:
86:03:0a:af:cb:b5:d7:51:f8:54:b9:d1:33:53:cf:
5e:ff:97:1b:ff:78:84:b1:ca:70:53:8b:5a:d8:c9:
b1:52:e7:bc:03:d9:03:70:e6:98:39:ae:e4:24:bb:
5f:5b:ee:19:2e:6e:a2:d8:40:03:ae:94:41:d2:fc:
38:00:0f:72:4e:04:a0:5a:09:81:e9:0d:13:00:2d:
13:d9:d5:aa:dc:d2:78:96:7d:1d:ed:e8:a8:96:58:
a2:9c:49:60:d0:b5:24:3d:3d:6c:84:59:10:6d:2d:
98:45:16:c1:d5:71:cc:d2:6e:c2:ab:bb:81:11:2f:
3d:e2:56:a0:0f:a4:df:b5:ed:6f:08:e4:14:3b:32:
c1:38:f5:59:5d:9c:7e:b0:18:df:d1:79:d2:bf:7a:
43:dd:0b:0e:ff:e0:67:dc:95:a0:15:7c:23:4a:a1:
8c:44:40:73:69:95:ce:5b:01:8b:46:33:f4:89:8a:
4a:1e:15:db:53:6b:9a:99:0a:83:d5:0d:cc:79:dd:
27:c4:37:c1:49:cd:9f:a0:e6:47:55:d7:d1:72:c2:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:EE:54:DD:85:3B:42:FF:6A:4C:F5:44:79:54:36:61:55:7D:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf6e93e2-e568-3483-98ed-28d64c164239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:49:2f:c4:e6:c1:f0:77:e1:3c:59:0a:c8:f3:48:ba:6d:b5:
9c:de:f9:90:78:67:0a:f2:e3:f3:c3:5c:97:06:db:5e:78:31:
dc:04:3c:bd:4e:5a:1b:fa:fa:90:e9:4b:28:ab:bb:2a:26:68:
96:e2:67:df:b3:f4:64:6d:4d:08:5d:94:8a:0b:66:8d:52:86:
0e:c8:73:97:3f:ed:a4:a3:35:98:ee:d6:0d:51:6d:9e:65:d3:
ed:5f:9f:da:96:2a:60:d0:27:57:20:25:80:36:ae:db:30:f1:
69:e0:1b:1e:97:5a:99:d3:09:00:df:9f:b1:8e:8e:28:91:0b:
50:4c:da:1e:37:a5:b7:ae:1a:a8:ad:7e:9b:43:b6:f5:3e:08:
42:3b:48:a6:2b:59:9c:80:d9:5b:38:80:72:21:74:b0:27:5a:
70:99:a3:24:cb:c7:af:d9:7e:37:ca:c9:ed:83:17:80:47:23:
2e:a4:81:2e:66:eb:3b:79:8d:e9:19:52:7e:20:e5:5a:da:f8:
4e:af:71:d4:ed:9d:1e:3c:ad:06:7f:de:80:bc:12:1b:2a:37:
de:34:e6:45:18:70:d5:93:58:65:6e:f6:9f:73:97:57:4c:2b:
d8:a9:bc:c7:47:92:a3:1e:d5:24:5a:89:e4:66:85:0d:f6:f7:
1e:a2:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:36 2025 by rpki-client