Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/edcb5a12-94db-3fa8-870d-80a247af2f77.roa
File: edcb5a12-94db-3fa8-870d-80a247af2f77.roa (raw, json)
Hash identifier: Bs+yIj89kyZsHX3vJAK+NFUBXfD4WCwShpnnDFRMrUE=
Subject key identifier: 6A:E4:9B:E3:99:94:CE:90:05:D7:BF:0B:69:1D:AA:BB:0A:77:FE:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5427B2375A5BC4A9BE760
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/edcb5a12-94db-3fa8-870d-80a247af2f77.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.129.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:42:7b:23:75:a5:bc:4a:9b:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=3c23bc2c-bce3-46e7-bf1c-4aef99a4b513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:84:13:76:cf:41:b3:cd:6c:a9:a3:31:70:
4b:9f:9f:49:6c:a9:5f:f9:63:65:93:55:21:8d:4c:
b2:61:ee:5b:7a:6b:ed:1c:a4:6c:4f:48:d0:cc:4c:
45:0e:b0:78:4d:b2:3d:3d:2b:e4:88:66:24:82:84:
67:43:1a:c1:d3:4c:b3:89:e3:7e:2e:9f:2a:e6:e7:
04:e4:a6:27:a2:20:5f:7f:bd:7b:81:cc:84:07:01:
2b:b8:69:f7:3b:8f:54:33:b5:23:be:50:6d:95:f0:
66:c0:98:93:82:f3:36:4e:e4:c7:4f:12:9c:06:41:
cb:19:75:6a:8f:09:13:35:d5:f0:bd:5b:35:a3:fd:
8a:75:12:a4:25:81:5b:14:08:4e:14:0b:40:94:85:
06:bb:ad:df:14:2b:84:b2:55:bf:6f:10:d3:c6:4a:
ff:9f:c0:07:86:80:44:58:75:a8:72:bc:f6:fb:0b:
7c:e3:c3:75:a0:da:14:b1:13:47:31:3f:c1:1d:54:
b3:22:c1:8d:00:94:28:40:c2:95:88:66:c3:2f:c9:
40:1e:37:d3:b5:10:54:89:ea:e0:36:1c:db:6b:2c:
e8:43:36:20:53:f9:ce:48:4b:1f:d0:78:e4:8e:18:
95:b0:2f:77:b2:b3:93:46:93:a4:69:33:14:30:02:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:9B:E3:99:94:CE:90:05:D7:BF:0B:69:1D:AA:BB:0A:77:FE:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/edcb5a12-94db-3fa8-870d-80a247af2f77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:1c:d9:20:d3:2a:a9:8d:b0:21:41:02:e6:66:89:37:0f:ee:
0a:57:c1:63:52:93:f5:c3:ff:77:b9:42:17:81:53:7e:07:4c:
02:6d:49:76:64:fc:08:66:43:53:45:20:e5:17:6c:40:1d:29:
01:65:2d:30:54:f0:63:be:f5:9d:1f:5a:41:66:6d:b3:aa:8f:
87:41:b0:b0:d4:ab:b0:d7:14:49:70:72:3f:73:69:7d:49:6d:
ea:c1:fe:9f:90:c8:9c:19:73:5b:21:15:cb:12:c0:b9:40:4c:
e7:6c:79:5e:a7:95:65:5a:fe:56:76:3d:63:56:e0:b2:27:74:
67:fc:f7:72:3e:b1:0c:b3:4d:ca:e9:72:c4:d4:48:bb:df:96:
53:20:e4:62:d7:26:b1:2d:90:c9:a7:2c:6e:f5:fb:b5:b3:ab:
b9:77:93:2b:a9:aa:12:3e:fe:21:45:c1:91:63:cc:b3:ea:51:
5b:4d:d7:81:09:a2:ff:2f:96:70:c8:e1:d3:df:a7:36:a2:d6:
c4:f0:93:13:9a:f4:49:28:bc:2d:90:a0:c8:d7:8d:07:23:c3:
64:e1:ac:95:5f:e3:3c:c9:e8:b3:7a:37:f5:08:d7:6d:e4:a4:
31:31:ff:5c:fa:53:9d:76:d1:dd:1d:43:24:f8:dd:8f:45:dc:
2a:ce:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:42 2025 by rpki-client