Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dae710a8-6d3b-3682-9f15-026869b36934.roa
File: dae710a8-6d3b-3682-9f15-026869b36934.roa (raw, json)
Hash identifier: Trm75TKqSrpaANXcNjpyOksSzWZd38+KDliswloVDqs=
Subject key identifier: 85:61:7D:60:F2:69:EB:51:67:3C:0B:D5:45:B8:98:54:40:B9:08:59
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50A02EFD97BDBCD5886C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dae710a8-6d3b-3682-9f15-026869b36934.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.150.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0a:02:ef:d9:7b:db:cd:58:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=57a24e3e-14da-4fb5-bd65-9d18d99b145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:61:d0:b5:bb:ff:00:e7:5c:da:0b:28:74:
af:4f:4d:f1:16:5a:22:c3:d8:ed:a9:70:3f:3c:93:
91:3c:bf:6f:2e:1a:1d:d5:f9:f2:6f:e9:1d:df:29:
27:dc:5e:db:34:02:7a:04:5d:46:54:d2:0e:a0:62:
72:95:3b:34:6a:9e:3b:b1:89:12:e3:bf:d6:35:09:
74:9e:9b:92:6f:05:55:be:a6:a4:5c:d6:54:2c:8d:
be:36:ab:80:ed:64:27:6c:9c:1b:f1:82:87:e6:20:
b7:6e:58:fe:6d:5f:69:d0:9e:a2:70:4b:d0:d2:e5:
d2:21:f3:fd:90:1b:d2:53:db:f0:21:c4:33:4b:d1:
95:3e:95:93:f1:64:d7:77:97:6d:47:6b:10:ca:36:
89:ad:de:c9:26:4c:30:c3:f4:c0:bc:24:89:b2:26:
d7:3a:6b:76:35:ae:92:1a:1d:dd:60:41:aa:ed:a5:
bc:65:ab:8e:8e:df:54:94:1a:f9:a0:d7:d9:f5:2e:
70:bf:65:ff:53:33:4e:59:ad:44:18:5c:6b:58:1b:
60:66:a1:92:76:ea:f9:b4:6f:55:6a:d9:05:55:83:
5f:e4:e4:57:29:e1:44:7d:80:20:c0:a8:2a:13:b1:
1c:30:28:42:2b:c6:7d:e8:fc:b8:73:6e:2d:4d:d2:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:7D:60:F2:69:EB:51:67:3C:0B:D5:45:B8:98:54:40:B9:08:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dae710a8-6d3b-3682-9f15-026869b36934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f5:a7:98:ae:c4:00:15:57:92:6c:a1:07:cd:b2:98:d4:87:
e1:36:e7:88:a1:12:97:1b:04:40:a7:6b:2a:aa:8d:82:7a:01:
31:38:4f:c5:0d:c1:1c:88:e8:25:9f:ae:80:9f:b1:45:22:af:
92:fc:37:6e:55:45:da:db:6b:4b:97:c3:57:41:16:e7:ed:cf:
6e:1e:50:d7:7e:3f:a0:a7:1d:31:4f:1f:89:d8:57:ff:83:d7:
a8:e3:b9:14:1f:f5:ce:6b:88:1a:7a:a9:7d:41:07:f6:93:32:
4d:ca:48:d6:3e:06:30:55:8e:4a:ba:49:67:aa:e6:45:94:27:
0e:55:59:de:53:8f:d0:45:ed:41:e3:74:b3:a8:9f:36:7e:de:
68:4e:95:64:b3:5e:12:88:ff:d8:65:ea:87:52:2a:ac:9c:7f:
e2:eb:1d:c5:61:d7:36:ed:83:eb:2c:51:f6:16:75:4b:10:43:
5c:a1:1e:7f:b2:e3:32:a7:25:c5:2a:4c:f4:ea:65:23:b6:57:
cb:ae:1b:ef:57:d3:a0:77:26:3e:27:b1:60:01:7e:c4:77:82:
d1:ca:3c:b7:b6:2c:d5:1a:77:2f:3a:7b:c1:c1:4a:4e:dd:be:
e9:64:02:de:49:f7:66:57:ba:fc:9d:aa:8c:f3:9b:63:83:8a:
59:aa:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:46 2025 by rpki-client