Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ae7cb2-0c27-3a6f-858e-1ae87747479e.roa
File: d1ae7cb2-0c27-3a6f-858e-1ae87747479e.roa (raw, json)
Hash identifier: c7RLT8s3SaiAXHakNZQ/eZj3WMRROAAIN3TAKMBnabw=
Subject key identifier: 0A:73:1A:AC:13:68:08:6A:07:2C:05:A0:19:EB:DF:84:98:5F:C0:AA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50BFFF9FEE066111A0600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ae7cb2-0c27-3a6f-858e-1ae87747479e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.80.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0b:ff:f9:fe:e0:66:11:1a:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=15166737-c1a8-433f-b8dc-6a719f0776d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:d4:54:7d:3e:25:a3:cf:ab:21:91:43:11:
f1:e4:d6:f5:16:e8:ba:65:83:ee:44:9d:e7:b7:06:
f3:48:9d:af:31:1f:0c:d4:ee:5d:5d:20:0d:9e:f4:
fb:af:e6:7d:49:7d:98:52:c4:a6:f0:8d:4e:00:8c:
ec:f6:af:d7:54:0a:f3:04:60:bf:35:c0:5f:62:9a:
b8:7f:c9:c2:94:ac:d7:7d:59:bb:ca:72:3b:c1:6a:
11:87:f9:72:eb:6c:bf:5c:7e:ce:cb:57:5d:21:1d:
25:ab:4b:c8:72:80:90:5e:b8:06:f5:03:80:ab:c3:
d1:8e:64:08:16:b7:47:65:bf:07:f7:51:2e:50:11:
9a:88:fc:0b:4d:67:80:6c:57:ed:d7:88:57:45:06:
10:55:e3:9f:e0:63:36:79:d5:1f:9b:ae:7a:f5:50:
24:b3:59:26:63:2d:37:17:43:85:e8:70:b0:8a:61:
62:54:af:c2:73:ac:35:39:a2:09:10:a7:00:96:8d:
71:cf:65:02:34:a7:31:60:6e:89:4b:e7:a4:26:1e:
da:c9:ba:e6:96:fe:a7:a0:8c:71:90:84:41:cd:d8:
76:0f:91:0d:f0:ac:86:ab:e1:99:c7:d2:6a:df:12:
66:b0:55:46:63:6a:26:7f:32:fc:4e:11:db:7b:c2:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:1A:AC:13:68:08:6A:07:2C:05:A0:19:EB:DF:84:98:5F:C0:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ae7cb2-0c27-3a6f-858e-1ae87747479e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.80.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:0b:66:84:7b:68:34:3c:5f:62:35:6c:50:e3:a9:3b:62:e8:
74:28:fe:9f:12:06:a7:30:c9:47:b0:57:b5:75:cf:72:ea:b7:
30:84:34:c9:1d:05:9f:e4:e7:cd:7c:8a:9d:f5:8c:73:6d:78:
9a:a8:4f:80:19:a2:68:95:13:f4:99:fb:e1:76:4c:36:8c:b5:
2c:32:78:de:7a:0b:69:c8:e6:fc:45:ec:5a:96:82:30:95:cd:
8d:07:75:c7:f4:f6:2f:39:1d:23:ec:64:2c:ad:52:f4:71:82:
51:23:68:2f:45:76:3a:5e:87:35:7e:d5:04:8f:ca:cd:99:78:
c7:36:40:86:dd:03:cd:da:54:b7:e1:8f:c2:11:94:f3:a2:b5:
02:71:27:ee:f7:14:a3:f7:86:ea:c2:7d:ac:34:8d:b9:5b:5a:
55:38:1e:00:1f:cc:96:25:06:2e:fd:7c:8e:84:c9:08:d4:21:
12:51:df:b3:a4:73:97:d7:7b:c3:4d:d6:07:1e:8d:e6:55:da:
5d:f1:68:d3:ca:91:85:ab:e8:67:38:f1:21:cd:57:2e:b7:49:
e5:bc:ef:61:75:4b:af:79:88:2c:c6:28:30:cf:dc:70:13:be:
a9:64:23:fc:15:20:fd:df:a8:92:03:d2:a4:3e:fc:5b:93:5c:
fb:91:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:27 2025 by rpki-client