Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa
File: df26c213-e8cf-35ac-80c4-252c455f379b.roa (raw, json)
Hash identifier: sgKFo7WC83sHLZP9jNzu8Gci/zwx4B1mIuoksugjGJI=
Subject key identifier: 50:BD:0D:E9:20:1F:68:9B:A0:BE:1A:23:D1:ED:1D:11:5B:9E:9A:A2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5196180FE0CB4D5D3F540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.124.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:19:61:80:fe:0c:b4:d5:d3:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=afe1a223-7690-4048-afbb-2270b4aea34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:87:73:5d:7e:50:00:31:aa:ae:5c:e8:9f:
83:5d:ad:aa:77:bc:1f:0f:f0:cb:22:91:36:70:54:
5a:74:55:c8:da:3c:e2:90:2f:c4:2a:20:25:07:ff:
2e:69:e6:21:33:96:27:de:a7:fd:e9:e0:91:e1:bb:
5e:4a:d7:07:12:32:5c:be:8d:76:01:05:d0:6b:d4:
eb:10:a2:f7:6f:e2:4f:2f:a1:11:8c:5f:1b:7a:c2:
ab:59:e3:5c:3e:6c:9c:8b:49:72:c4:5e:fd:da:86:
7b:34:f4:8e:0f:21:a2:b7:0a:9a:15:38:5a:dd:3d:
4e:c3:b2:ae:a7:08:a7:8b:a1:cf:34:36:36:00:4b:
05:60:11:ad:54:c9:14:60:2c:3b:f6:be:07:8c:78:
d7:18:bc:12:35:55:b7:7d:ce:ff:04:ac:64:cf:5c:
34:57:07:04:04:56:33:66:91:ab:fa:0b:ad:a8:7a:
92:ef:29:b3:ca:5e:f2:6c:20:19:4b:6d:60:16:b6:
04:9f:36:f0:4d:b1:74:79:9a:6e:01:bc:a2:10:36:
21:79:c8:01:41:43:a8:e1:d6:23:d9:9c:bb:f3:04:
99:19:21:99:23:95:44:89:62:7e:17:ad:bc:9e:2d:
b4:00:a0:54:9c:eb:e4:3a:e2:2e:ee:ec:49:73:c3:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:0D:E9:20:1F:68:9B:A0:BE:1A:23:D1:ED:1D:11:5B:9E:9A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:60:3d:84:96:9d:45:ed:a7:f9:b8:52:c5:b0:88:87:37:0f:
c7:43:75:4c:e3:d6:e4:c5:fc:86:4f:6c:1d:f1:75:58:98:4a:
a6:eb:be:d4:b2:81:5d:c0:ed:be:3f:44:38:ce:52:f5:ce:b9:
8a:ff:94:ae:e1:69:81:6b:3f:f1:1b:f8:ec:a0:6d:53:2e:87:
c9:9b:40:96:74:a6:88:81:fc:67:76:69:fb:57:db:6a:54:37:
82:5a:d3:af:d8:01:05:88:27:52:47:2e:c9:fd:7f:d2:f0:54:
67:21:fd:08:fb:5a:5f:70:f7:de:d8:14:eb:94:e1:5d:dd:18:
f1:82:4e:32:b4:78:1d:10:ca:2f:71:cb:9b:2b:da:6e:ee:c8:
40:e7:32:4a:33:42:8f:66:19:4d:a9:14:45:2d:0f:e7:bd:85:
2e:4f:c8:84:59:20:8f:2e:4e:c9:e8:93:e5:05:b0:b9:1f:e5:
e1:c0:64:e8:89:18:ea:1f:6b:62:44:5d:ec:96:59:bd:f2:5c:
09:be:f7:da:bb:66:14:e7:00:7b:33:71:a0:ea:d7:dd:bf:f6:
2e:fc:6c:9c:75:a3:ec:d1:97:d2:2e:57:36:84:1f:b8:b1:6d:
37:b1:c4:da:4e:fd:88:db:f5:6b:2b:b6:1b:0a:4c:9e:a9:e3:
21:a2:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:38 2025 by rpki-client