Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2f8be89-32ff-3578-ab94-361fd44b929a.roa
File: f2f8be89-32ff-3578-ab94-361fd44b929a.roa (raw, json)
Hash identifier: mLT7z1IZ96MOKWeBmL6sEC2uliNoAWdPB/8dVnn0TAw=
Subject key identifier: 0F:CA:87:65:CD:08:C4:B0:7A:E2:E8:6C:CB:84:1F:1B:80:E9:45:A7
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FDE4D28AF4E60352FA758060
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2f8be89-32ff-3578-ab94-361fd44b929a.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 396982
IP address blocks: 34.34.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d2:8a:f4:e6:03:52:fa:75:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=410b923c-e9c5-4987-9e8a-eef9e16d48d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:f9:35:f5:45:bf:cd:36:b7:ab:74:72:58:
d2:11:b1:2f:ab:3f:4b:3d:1c:00:c1:6d:dd:5b:64:
b2:7a:92:ec:30:a8:ec:2a:63:98:27:36:58:a7:18:
7e:fd:ab:c4:48:ca:cb:b5:0e:ad:94:f6:ad:40:3b:
af:35:ea:7b:0c:32:f1:36:d9:82:6a:01:72:7d:6a:
f3:78:1f:b9:ff:c6:ce:d3:a7:4d:0c:85:b5:db:f1:
2b:90:a8:2d:b4:e1:30:20:ae:b3:82:6e:b5:71:3c:
74:b2:3e:e7:7f:09:d6:98:8f:1e:42:a3:5e:19:8b:
3d:cc:9d:18:b4:b3:e4:fe:72:fc:82:53:52:d4:1b:
b0:26:d1:45:f5:30:cc:a7:22:5d:eb:5d:a6:91:00:
3b:5e:f7:cc:d6:30:d8:88:49:d5:10:a5:4d:91:74:
56:61:93:c7:b3:5c:b9:0d:4f:4f:a6:85:fe:e7:22:
6c:13:65:e0:4a:3a:e9:58:f5:d4:bf:d7:04:3e:2b:
f4:c4:7a:b2:bf:97:a9:1f:65:72:f4:5d:e7:d8:f9:
43:d3:98:2f:4e:99:11:ee:18:8f:46:a7:27:da:44:
a4:e6:89:0f:4c:d1:4d:3f:ec:f3:b9:f1:e3:89:2e:
a2:47:7d:1b:dd:b7:41:52:2c:7e:ff:76:d0:77:6a:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:87:65:CD:08:C4:B0:7A:E2:E8:6C:CB:84:1F:1B:80:E9:45:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2f8be89-32ff-3578-ab94-361fd44b929a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.34.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:dc:71:b1:04:2a:ed:87:56:bf:7e:89:e7:74:a1:4a:2f:fb:
62:37:32:3d:81:2e:e6:9b:64:0a:7f:4a:0f:8b:80:f9:16:de:
b0:73:cc:a5:46:e1:11:1f:93:b8:54:41:b6:92:bf:b1:06:dc:
17:88:60:4f:5d:2f:72:93:d9:43:7d:27:45:02:20:24:0c:c2:
76:e3:86:51:8d:71:72:ef:07:3b:c3:d8:38:94:8f:f0:d0:20:
3c:fd:f1:b0:f8:94:07:66:7e:cb:6c:13:af:c1:6d:29:b7:f2:
55:ff:d7:8f:b5:1d:72:5a:39:13:24:d5:51:74:8c:18:ad:5a:
ba:af:bb:25:f5:56:db:7f:20:6c:e3:5c:5c:c3:9f:4f:b8:7e:
d0:35:6d:e1:7e:2e:2b:30:ab:15:61:9c:d7:d7:d6:90:05:4d:
c9:1a:95:ad:bd:98:d2:9b:76:f3:51:6f:50:45:4b:d2:e7:51:
2b:69:cc:2c:42:a5:58:bb:3f:f9:7b:b4:0e:8b:b5:0f:9c:ce:
f0:8a:15:27:b9:5a:22:ba:42:11:cd:88:40:57:ee:cd:d0:67:
b8:f8:4c:55:ef:13:dd:ec:7a:b1:f4:9b:d4:c0:bc:e2:d6:70:
0c:00:81:14:ff:ce:39:ed:e0:f1:fe:70:1f:1f:b8:0a:14:be:
bc:4f:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:22 2025 by rpki-client