Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dca64f1d-b724-3c3e-a0f6-ea1b0884a8c5.roa
File: dca64f1d-b724-3c3e-a0f6-ea1b0884a8c5.roa (raw, json)
Hash identifier: edbg4S7UWG2NOM7lVE9sDqQ1KWXn5y4V+8k5ROMKOvA=
Subject key identifier: B9:8E:BC:EE:D8:31:DE:F1:81:9E:DF:D8:72:CC:3B:34:24:4C:65:7B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52BE6B72BC0BBCDDE5F60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dca64f1d-b724-3c3e-a0f6-ea1b0884a8c5.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.133.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:2b:e6:b7:2b:c0:bb:cd:de:5f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=d42ae312-fd6a-4e17-8ab8-8a54746434de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:96:15:77:32:80:a6:92:3e:73:6b:48:fb:4b:
83:1e:b4:22:6c:91:68:51:5b:cb:5f:18:fe:5d:71:
a9:b9:ad:d1:e2:e7:9f:bb:d7:a3:b7:ee:b5:23:de:
f7:d6:54:8c:23:9d:de:cf:8d:35:48:58:de:15:02:
07:37:9f:fa:6f:d0:4b:25:41:84:17:af:34:20:88:
6b:e6:17:12:f2:a7:3d:87:4e:7a:58:bf:7f:10:ed:
9c:47:b2:06:16:8f:5a:f7:2e:2e:6b:83:0e:6c:a3:
57:f3:bd:17:ca:1d:2d:2f:ba:6b:55:ef:cb:c1:a5:
53:d1:b1:98:a0:20:04:65:12:76:13:33:03:4e:06:
de:a2:58:e5:9a:cc:d2:74:a7:82:55:9d:dc:13:5b:
1d:c8:99:64:32:3b:cd:03:de:30:af:dd:19:8d:9d:
57:63:05:40:02:79:ea:66:8c:ca:f7:6d:f0:eb:5e:
79:23:37:78:fc:f5:e3:09:36:ca:e0:1c:c1:8c:c9:
42:b7:cf:ea:69:15:53:89:23:1c:0c:a0:85:84:ca:
24:5a:d7:b4:dc:57:98:ec:42:ea:f2:76:f2:75:9b:
1e:7e:a0:c4:43:a0:f3:44:db:f6:7b:ac:78:e3:83:
2a:ec:4d:fe:36:0b:50:6a:af:3c:80:e2:74:8b:ce:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:BC:EE:D8:31:DE:F1:81:9E:DF:D8:72:CC:3B:34:24:4C:65:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dca64f1d-b724-3c3e-a0f6-ea1b0884a8c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b9:7e:4f:aa:ef:01:a7:0b:1f:fc:34:98:e1:49:d0:e1:35:
24:48:f3:ce:ee:bd:d5:62:af:6d:61:c9:58:6f:29:58:f4:4c:
74:db:41:8d:3d:bb:10:56:48:7f:10:a1:39:91:44:2d:ce:f7:
20:ef:c9:99:41:8d:3b:db:16:01:66:8f:44:c9:9f:9f:36:e3:
9f:66:85:e1:5f:d3:14:1e:86:33:de:2b:4f:11:28:66:f7:ad:
c4:e4:dc:32:eb:13:d2:4c:ff:6a:20:e2:14:2d:fc:32:94:1e:
43:44:ca:11:9e:20:bf:18:83:9c:e1:4f:e3:6c:80:6e:8e:fd:
99:21:1d:09:af:49:36:92:5f:2a:88:2a:15:eb:4a:a3:c0:89:
74:89:5a:f0:dd:6b:74:88:43:1f:83:ef:a1:63:c3:d5:c5:5f:
e0:27:51:a8:16:84:80:6e:54:83:e6:87:9c:08:84:5c:a4:5e:
b1:c5:f0:52:e5:0b:d9:34:71:9f:a7:e0:f5:ad:aa:d4:2f:ec:
b0:ee:45:ef:23:5b:19:cd:a3:76:97:d1:c2:d0:5b:a2:f8:39:
2e:3f:32:a9:b8:82:19:dc:1b:ee:be:ad:f1:1c:70:b8:c8:22:
b2:d6:5b:9f:55:bf:82:9b:e5:a2:dd:ec:7d:70:1f:e6:cf:71:
5d:1c:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:20 2025 by rpki-client