Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa
File: d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa (raw, json)
Hash identifier: pthYAZd96IRtAVa7Hc7ZH+Du1B8KB1Pgw2rw6z5ZMbA=
Subject key identifier: CF:9B:87:DE:CC:A7:02:A4:2D:36:7D:F1:E1:30:10:2C:E1:92:93:EF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4FF7FF77B6E1BFD703200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.167.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:ff:7f:f7:7b:6e:1b:fd:70:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=420c27fd-e79c-4bea-861e-e57e27fb0c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:1e:9c:6e:3e:42:fa:54:34:f2:97:4f:c6:
35:5d:b0:49:9c:55:95:ae:db:6a:8b:1a:c0:b7:ad:
ad:75:8a:8d:f3:91:08:60:07:b8:2a:22:8e:3d:66:
d9:4c:82:d8:92:3c:01:32:bf:6c:b0:16:5f:fc:53:
98:91:1e:22:33:7f:b7:5f:c1:43:e8:a6:ff:0b:63:
86:dd:c5:57:91:c4:02:fb:11:7e:02:7c:08:d4:34:
59:e0:a7:03:47:1e:b7:88:dd:d6:32:26:6f:cf:74:
ad:47:e6:b8:a8:67:b9:45:48:60:6f:56:fd:7e:52:
1a:36:6f:e9:a9:99:a5:02:6b:86:a4:35:b0:10:c8:
4d:c5:a9:15:9b:ba:32:31:11:40:18:06:2d:d1:a4:
4e:6f:a5:53:58:4c:62:f0:9e:7a:2f:c8:32:9d:69:
ce:ce:e8:fd:04:12:56:d1:5d:e5:b3:ac:08:7d:1c:
08:25:61:8d:06:14:a9:0f:e7:07:7d:3b:a6:e1:6d:
a6:af:57:ad:71:0f:67:b9:3f:7c:d4:6f:df:ed:a4:
1b:73:ea:17:00:26:ce:ff:99:81:fc:b3:29:15:84:
ef:6d:a6:51:15:09:bc:98:0d:7d:b0:dc:59:85:ca:
43:db:eb:87:08:86:32:f5:aa:cf:3a:41:5c:c2:cb:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:87:DE:CC:A7:02:A4:2D:36:7D:F1:E1:30:10:2C:E1:92:93:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.167.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:14:bb:98:7c:56:f5:cd:6d:f6:7b:3f:c6:db:43:04:d1:4d:
4b:a4:8a:ac:e8:f6:45:72:e2:17:d2:e0:fe:97:34:10:bf:c0:
da:f9:b8:75:0b:ac:22:ac:19:b7:ae:ae:9e:53:17:ef:3b:b8:
80:9c:f0:7d:ac:46:cb:44:ed:60:4c:9a:b5:ed:bd:55:39:95:
14:1e:3b:7c:4a:a3:e0:e1:fe:b6:d5:35:ae:a1:1c:9c:54:40:
23:7a:61:f8:09:ce:70:c2:b1:03:03:70:53:b0:67:18:61:4a:
de:6d:ea:ec:49:c5:34:24:f6:00:49:c0:d1:0d:b5:66:c2:dc:
c4:6c:57:a6:cd:1b:78:28:98:f1:93:23:d1:aa:da:ce:a8:65:
b3:ef:a5:78:f6:81:44:4d:c2:d8:ae:37:7e:29:7c:32:b4:a5:
1c:52:8d:48:4c:87:a6:0f:1f:38:c9:99:8d:12:4f:7a:50:7c:
fd:ec:67:63:86:96:65:03:29:1a:77:34:61:70:d2:b3:e2:b3:
d8:4b:0e:0b:73:0f:f7:08:2e:ec:32:e8:02:d1:95:15:ba:c7:
73:bf:02:f8:06:a7:23:7c:a9:c7:27:67:12:be:59:df:e4:45:
ad:39:ac:64:c4:63:9a:63:0c:15:4f:7c:06:5f:1a:83:9d:9b:
a9:d5:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:36 2025 by rpki-client