Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc4def19-ef3f-3666-848c-2fdb405a778b.roa
File: dc4def19-ef3f-3666-848c-2fdb405a778b.roa (raw, json)
Hash identifier: tRHHKkubquMfTbVvVI72KO1WcxFMfVgpNGiMZywByLE=
Subject key identifier: 03:59:B9:F7:B7:D4:09:4A:DC:81:02:81:64:A9:63:D4:93:AC:F0:DF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F9AB8CFA4246548F3700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc4def19-ef3f-3666-848c-2fdb405a778b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.148.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f9:ab:8c:fa:42:46:54:8f:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=e1ebb4e6-70ed-4045-9f08-db0705134da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:e3:47:2a:3e:8d:b2:3f:58:34:c3:b9:8b:
10:d8:2d:31:38:7b:92:2c:a6:4e:0a:bc:c5:be:5c:
cd:77:9d:09:a1:ea:db:b5:52:c5:99:0c:bc:ef:0d:
9c:ba:2b:5b:61:2b:73:05:7e:f6:33:6e:11:00:cc:
62:c1:cc:8c:1d:76:29:9d:1c:8e:b4:d7:f4:dd:c8:
f8:0d:8f:d4:aa:1b:1d:47:fd:ba:37:bb:5d:7c:18:
3c:65:66:68:35:0b:3d:db:75:11:9c:4d:6a:90:f9:
4e:4f:50:13:5f:2f:1f:bd:93:a1:06:25:7f:c3:d3:
c1:f6:4b:ca:4a:0e:f4:48:d2:3e:26:ea:f2:e8:05:
cc:ca:a5:10:28:9f:f0:de:a6:f6:84:f7:4e:81:41:
3e:0b:ce:aa:e3:99:b5:97:34:20:09:b3:50:6f:74:
c3:9e:d5:f1:ec:2f:a0:05:35:60:10:7a:06:60:3c:
d2:6c:ce:24:43:0e:f8:97:71:65:79:97:e7:33:50:
36:cb:64:29:21:60:bf:a2:22:e3:0a:a2:1a:0c:42:
bc:67:98:10:87:c2:f9:43:c4:5a:78:af:0e:8f:b5:
c6:25:c5:6e:10:fe:b3:48:48:c7:d1:79:87:e4:b4:
0c:49:f9:90:5a:cb:33:ee:f0:19:20:34:1e:f0:a1:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:B9:F7:B7:D4:09:4A:DC:81:02:81:64:A9:63:D4:93:AC:F0:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc4def19-ef3f-3666-848c-2fdb405a778b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:2e:ee:a3:0e:33:96:ea:ff:24:57:7b:78:57:d9:49:85:e0:
f6:d3:a0:56:74:56:2e:f7:62:13:c0:a8:ee:45:9c:cc:55:9f:
2a:06:b5:5b:d3:68:3b:e1:6d:69:93:53:bb:b6:58:49:17:bc:
e2:2c:a4:25:1e:05:74:2b:d3:85:4b:2d:3f:39:c0:1b:3b:d4:
2f:88:32:ff:38:a0:73:78:df:b2:94:b3:75:7e:e2:ed:fd:e9:
d5:94:45:0b:68:1a:bc:4f:fc:11:cd:c5:76:eb:b2:a6:fd:26:
2f:2c:a2:df:59:d4:84:08:b4:78:d6:06:87:a3:d7:c7:82:19:
6a:09:0a:84:d7:a4:43:cd:a9:a3:28:e5:03:ce:0a:98:7e:4e:
35:77:86:1f:dd:a6:22:f6:6f:e7:e4:da:9b:8a:9a:44:1a:69:
ba:7f:f3:ee:38:8a:83:71:39:e1:8d:c0:00:3a:08:e2:48:50:
60:33:ea:43:3e:d8:bc:28:d6:17:1a:93:ee:4d:47:d9:c0:98:
43:d2:31:40:b0:70:38:60:33:c9:ee:ca:f1:d7:0b:dd:ff:81:
42:75:81:84:87:bc:66:65:5f:38:a8:0c:cc:76:68:a2:22:40:
3d:54:04:22:24:01:5a:a9:a1:bb:3b:61:a1:41:88:0f:ec:09:
d5:b2:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:00 2025 by rpki-client