Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8ced05a-a578-3242-a97d-386df51d9e7e.roa
File: d8ced05a-a578-3242-a97d-386df51d9e7e.roa (raw, json)
Hash identifier: CdXW76dD3IWC5sKblFi/JCHYenM6mhky4iSjF9WhnMs=
Subject key identifier: F6:B7:7E:4A:9A:D9:36:55:6F:1B:F2:E0:13:1B:84:23:22:FF:69:4E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4FDFB422293609C54AA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8ced05a-a578-3242-a97d-386df51d9e7e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.73.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:fd:fb:42:22:93:60:9c:54:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=9cb8050f-2ec3-4d68-9d4f-3e524ce1aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:c6:27:0b:15:51:0b:3f:d2:58:42:67:a1:
d2:dc:e9:f5:ee:19:9b:f7:1e:8a:9a:8e:b6:d9:72:
3c:28:02:cd:9a:93:e8:8e:15:47:25:33:8a:d8:ac:
7a:d8:f3:f6:83:42:59:0a:74:8a:57:20:ee:d9:a3:
a4:82:6a:e2:79:15:f5:54:d0:96:0f:00:5e:19:2a:
be:8e:7c:80:47:61:7c:bd:52:fa:41:01:3e:ca:1e:
e0:54:1e:8e:8d:22:47:a3:ba:ed:2f:b0:39:06:f5:
1b:e4:80:ad:f6:32:6a:9b:92:32:f2:e8:8b:2f:6e:
9d:d7:6a:19:a3:24:aa:b7:cc:4a:c4:97:7e:3e:ce:
d5:73:1d:b0:c8:a3:45:92:36:16:c9:98:50:f7:5c:
ba:a8:2a:88:13:50:b0:75:4a:62:d2:d1:85:60:e3:
64:3a:69:75:d8:94:99:58:d2:8d:5b:85:33:53:50:
80:c2:a0:4e:b8:32:5b:37:87:d2:00:08:f9:0e:27:
e6:49:23:22:46:11:55:bd:c9:b3:95:eb:07:c5:b9:
5c:f4:19:08:1f:5c:9d:2b:a5:fd:62:19:52:69:de:
08:8f:2f:43:9e:1a:e0:aa:c2:61:7b:d9:a0:a4:f5:
ee:d8:3e:82:05:59:98:fa:f4:ed:28:eb:76:fa:5e:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:7E:4A:9A:D9:36:55:6F:1B:F2:E0:13:1B:84:23:22:FF:69:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8ced05a-a578-3242-a97d-386df51d9e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.73.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:29:29:8f:8f:41:a4:93:62:07:74:42:4c:5a:e5:96:bc:9c:
41:d9:6b:65:64:51:0f:15:58:e7:08:b4:8f:e2:12:b3:0b:cd:
64:b0:92:15:80:40:71:b3:6c:50:0e:0a:53:71:67:ad:23:c8:
5b:d5:a0:e7:43:a2:02:19:f4:8a:e4:2f:5a:f8:10:61:4f:26:
84:e0:d4:27:ff:61:aa:40:b5:2b:ff:ff:9f:0d:2a:37:38:81:
8c:c4:82:0f:1f:6f:73:d2:7c:35:0b:bd:ee:2b:80:3e:28:a4:
92:c2:46:eb:4c:39:7c:1b:c1:de:c8:75:ff:b1:68:e4:65:80:
7b:df:f2:95:67:27:43:08:13:ee:8e:6a:99:18:1c:bd:25:c2:
6c:98:35:04:44:4f:5b:34:04:22:a7:bf:27:ac:cc:41:60:29:
3b:0c:1a:cd:9b:64:18:29:42:43:8e:c9:01:6f:3c:c2:ce:ea:
32:86:02:2b:8e:a7:4d:fe:39:c3:3f:38:61:cd:17:2a:f8:23:
eb:d3:9d:45:39:94:a9:04:82:11:4a:f3:89:db:7b:ca:67:a4:
74:53:03:ee:9e:a7:36:40:59:66:1e:71:23:50:28:b0:e0:25:
72:a5:39:b7:a2:cf:8a:a3:0b:d6:5a:3f:35:7f:bc:53:ed:05:
13:ea:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:30:30 2025 by rpki-client