Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa
File: d2e85e8c-7a74-3a11-93ce-8129452bde22.roa (raw, json)
Hash identifier: 67qKv12YJOiyja5ngurhbUePDhOtxTZLNRzmxpBZAD8=
Subject key identifier: 74:A0:5E:A6:91:72:D9:B4:E5:71:99:F8:A5:40:09:90:A8:BB:CC:60
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50B0615D841C974749580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.131.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0b:06:15:d8:41:c9:74:74:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=1f59592a-bab7-4dc9-91d1-56587f0e29db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:c9:2e:1c:4a:0f:ce:bc:f5:75:53:a4:3b:
99:d8:d6:d4:50:7d:9c:73:35:97:8e:47:12:8a:1e:
8d:49:06:2e:de:ad:c1:c7:49:0d:a5:29:d7:30:9c:
06:7a:f7:0d:72:95:a7:19:4f:6c:86:e6:96:25:d0:
e8:a9:1d:ec:c7:0e:dc:68:bf:22:73:40:00:99:6b:
7d:aa:07:cf:18:b0:cd:30:f2:7c:cc:e4:a2:ec:8c:
43:59:b8:97:49:d5:f8:bc:fa:e3:88:3e:c8:94:da:
0a:c1:44:23:f0:4e:b9:48:3b:e7:f4:a0:21:f9:68:
b1:7b:98:f3:7a:c3:73:d6:d0:5e:c7:34:b5:e2:b4:
ed:c9:78:38:cc:2b:ac:b7:49:98:02:38:5e:8b:05:
e9:79:06:9d:96:8f:99:4b:c0:53:4d:35:72:8d:2f:
2f:41:22:90:3d:d4:d9:d3:49:7e:47:31:73:6d:e0:
e2:c5:08:92:d6:55:da:96:07:3b:23:05:47:e9:27:
79:60:15:30:e9:ea:10:b9:09:e4:5f:f3:e4:e1:ea:
fa:71:b0:f0:2a:1e:b7:26:67:7b:b9:33:e4:e5:81:
05:6d:d3:7f:85:26:fd:ce:89:e5:96:b8:82:da:01:
92:c2:75:70:36:f7:21:b9:cd:00:61:65:3d:5c:e5:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A0:5E:A6:91:72:D9:B4:E5:71:99:F8:A5:40:09:90:A8:BB:CC:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.131.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f8:fa:8b:7c:b0:09:48:11:4e:6b:50:41:19:03:f8:5d:87:
ba:46:24:d4:83:9c:7e:47:04:db:13:ab:b9:05:17:2a:97:57:
ad:20:d9:74:e8:33:79:7d:a0:08:36:e3:1d:4f:b7:04:4e:35:
ec:7f:5d:12:ae:18:92:7c:b6:c6:6f:ee:1d:65:e6:a7:ff:72:
cb:d6:ef:1e:22:7a:93:02:eb:03:a2:a8:77:0f:55:37:03:6b:
61:f0:17:89:3b:22:b8:03:ad:ca:51:1c:2a:13:e2:4e:fc:79:
d6:9b:62:0f:de:10:ce:ef:2b:16:7c:4a:26:b9:e1:a9:db:15:
f2:6f:b7:ff:e5:7f:be:48:24:1b:79:d1:ce:b8:ce:4a:50:3d:
c4:6a:64:1b:9b:da:eb:e5:48:b1:78:2f:f1:62:03:a1:7d:27:
ea:c7:4c:16:91:11:42:ca:d2:c1:01:e2:fb:0e:8b:5c:01:7e:
ec:c7:ed:09:a6:6c:12:62:20:91:e4:7c:0d:36:36:86:59:9b:
f4:50:a0:33:03:15:3d:00:8f:38:bb:87:1c:86:f8:c5:a6:b3:
ee:2a:2a:ce:09:0c:3d:f3:37:2f:e9:00:65:0b:07:21:8b:38:
fe:0a:4e:b2:2d:dd:e6:cd:5f:24:b4:44:01:be:6a:68:3e:15:
9d:51:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:31 2025 by rpki-client