Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f149171c-d786-3014-9aa6-a5d24de74674.roa
File: f149171c-d786-3014-9aa6-a5d24de74674.roa (raw, json)
Hash identifier: vaN3Sp9+0aPizABYtcuFfsBzj1kkTAPmBoEXI0TW2QE=
Subject key identifier: 42:DE:3D:AF:37:3E:7B:A8:88:4A:6C:05:B0:A2:E2:3F:07:07:D0:E0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B44246B606D2D62611A50
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f149171c-d786-3014-9aa6-a5d24de74674.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.116.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:44:24:6b:60:6d:2d:62:61:1a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=84036cec-e41b-493e-9b50-91f6481e2ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:ab:4e:69:cb:5e:45:e8:f1:cb:2d:30:d5:
4d:60:9a:f5:25:a8:0e:77:97:1e:bf:d8:6a:f5:b7:
39:06:ab:2c:27:82:58:09:16:52:4a:39:7f:b6:34:
ec:4c:e2:0b:ae:bf:be:6f:ac:9c:28:6b:75:09:ab:
7e:c1:30:ca:6d:a5:12:ee:04:80:65:85:c0:ac:c5:
31:e9:ac:1c:93:b7:0e:ec:17:d5:36:ec:31:52:b7:
36:25:80:fa:a2:21:86:60:04:12:6b:b9:f0:7a:8c:
f6:30:52:e5:88:1e:41:c2:36:a7:54:4f:2f:a7:4d:
d2:e8:95:26:97:b0:53:d8:a7:2a:b3:ea:27:ed:ec:
36:64:83:9a:45:e5:a4:39:0b:2c:fa:0b:72:e0:e0:
53:53:e1:78:37:3d:3a:2f:88:f0:f2:62:fd:32:01:
04:5a:4b:6b:4c:0d:ae:c8:d5:6d:8d:6b:af:b2:71:
04:ab:ff:01:e8:45:ad:2e:27:b1:3c:60:4c:35:35:
96:96:40:75:f5:ec:6f:1a:db:9e:e3:1b:f2:ef:c9:
bf:59:99:9b:e6:c4:e6:66:20:59:51:42:f7:9a:31:
54:00:46:ca:68:c8:58:18:cb:7e:a2:b2:c4:bb:65:
cb:18:0a:b9:0c:eb:98:08:0f:aa:43:fd:9e:36:27:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:3D:AF:37:3E:7B:A8:88:4A:6C:05:B0:A2:E2:3F:07:07:D0:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f149171c-d786-3014-9aa6-a5d24de74674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f5:e3:b7:54:12:79:40:51:29:2e:1a:11:1b:36:b6:e4:1d:
a3:23:33:f6:53:f0:6c:97:4e:fb:5e:87:16:00:3f:11:22:39:
15:00:55:97:a0:1f:39:09:a9:a5:95:45:d3:72:f7:92:43:09:
b5:e5:38:b2:61:6d:4b:c4:cb:d3:5e:5b:40:b4:8d:3c:3c:4f:
29:d7:24:f6:17:a9:d6:a3:0f:ad:e6:38:af:49:14:74:ad:50:
ab:ac:21:d1:43:2f:d7:51:21:b6:ae:c0:62:51:e4:27:17:58:
64:ab:64:ba:e7:03:a4:f2:d8:1b:36:9b:63:1d:3d:39:b2:61:
a1:91:a7:81:53:9e:75:08:1f:b1:00:be:0a:4d:7e:40:48:46:
ca:a2:ae:8f:02:07:24:7a:c0:04:15:26:3d:f1:ec:f3:8c:cc:
93:bb:62:6c:e0:6f:c2:f2:d0:43:0f:c6:16:c9:b3:47:78:c4:
e5:36:66:83:4c:9a:35:da:d5:36:02:91:5a:ba:dc:24:cb:64:
b2:84:44:67:4d:ed:29:f9:7a:ff:ae:f0:4f:7d:f2:dd:9d:c8:
77:9e:61:a9:94:8a:31:15:de:05:a7:2f:f2:83:fa:0c:0d:5d:
cf:8f:3e:62:aa:07:3d:59:52:a6:f0:40:95:52:90:a5:cc:2f:
c8:a5:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:26 2025 by rpki-client