Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa
File: d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa (raw, json)
Hash identifier: lBj4hFvxgBZ2ZglPiHBN3sOdPdbEuE7qUKJTSWo+LK0=
Subject key identifier: 63:EC:8C:83:F7:22:32:50:82:DA:AC:D7:5D:A6:35:5F:F9:4D:53:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5001F54E3D9052CF33D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.99.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:00:1f:54:e3:d9:05:2c:f3:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=9f7b1b02-d6b2-439e-b74e-8eb780d2c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:fb:bc:46:80:ea:e2:ce:59:2d:20:b2:9c:
0d:18:46:57:2f:79:aa:f4:68:58:39:66:1c:72:17:
72:52:cc:b7:e0:4f:91:cf:89:17:bf:8d:0b:6f:15:
07:c7:a9:6c:c2:a3:a9:2a:a0:d4:f6:e2:fb:19:ce:
d8:cb:d1:86:71:99:36:98:60:e7:7c:2c:5a:58:bd:
4f:51:4a:37:39:23:08:72:3a:e5:d3:56:af:72:ca:
54:97:4d:73:9d:6b:fe:6f:f6:70:b3:61:69:c1:13:
0b:e9:10:08:90:2d:a8:ed:02:82:05:9c:28:c1:5f:
e1:0f:f5:39:a7:a2:a0:17:41:bd:81:04:4c:42:23:
07:ac:f7:17:4c:5c:d9:30:1b:2f:46:6e:d8:94:1d:
0b:b3:dd:57:9c:3c:71:e4:5b:a9:13:59:d4:93:fc:
70:42:b3:fe:4f:77:d9:22:a4:5d:87:4c:87:86:94:
42:87:81:d5:8b:81:66:a3:e9:ba:27:a3:a7:c3:fb:
07:91:61:e2:bb:77:6a:b8:63:b7:29:4f:71:7b:27:
ae:dc:d8:6e:e1:d0:a4:44:c6:21:26:f7:04:62:1e:
00:c8:41:84:0e:a8:13:a0:55:3d:e0:9a:7c:d1:82:
4a:ee:e8:3e:48:40:1b:02:44:dc:e7:38:e4:e4:1d:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:8C:83:F7:22:32:50:82:DA:AC:D7:5D:A6:35:5F:F9:4D:53:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:29:02:11:8a:43:d7:4a:1e:9c:6e:5d:28:69:a8:c3:09:9c:
d6:66:10:86:38:93:bc:e9:0a:a2:46:97:75:a1:1e:12:d9:ec:
46:31:10:3c:c8:86:ee:bd:7e:81:7d:4f:50:05:e2:fb:07:a0:
22:ca:f3:b2:ee:a9:d2:72:ec:ed:12:69:26:bb:8c:2a:c4:a5:
a2:ae:65:bd:89:c2:70:3c:a9:fc:44:78:79:e7:b0:d6:5d:45:
41:69:a7:c0:14:05:03:be:51:ac:47:0b:49:c8:96:eb:9e:c9:
0d:aa:a0:fe:b3:70:82:5b:40:ba:92:bf:c4:fa:a5:9d:d9:8e:
af:8a:c2:ce:f6:1f:8e:19:e9:b6:9b:6e:11:09:b5:2f:5a:ef:
94:02:01:4c:c2:ff:7c:a8:dc:d8:55:5e:ba:9f:69:65:72:14:
76:f7:3a:4f:a9:23:57:7e:9d:47:d7:f3:09:89:ad:fb:c1:14:
a6:14:3e:bc:d5:e6:d2:69:d9:6a:73:84:d1:bf:fa:1e:f7:95:
de:0d:e2:b1:4d:30:c1:31:61:93:b3:67:33:51:9c:56:e6:fc:
e7:76:37:10:ea:86:5d:5d:c4:b7:b7:42:b7:f1:da:1c:e6:7e:
22:0c:47:02:2e:67:2b:84:45:42:c3:61:41:ff:0c:0b:a1:cf:
5f:e2:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:09 2025 by rpki-client