Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f56f7b30-47dc-31d8-a59d-ee41bcb1f1ba.roa
File: f56f7b30-47dc-31d8-a59d-ee41bcb1f1ba.roa (raw, json)
Hash identifier: FyI5DJ11JYCdFwEWdlLa0yHYugTXSnNBETaSEn0UqzU=
Subject key identifier: A9:A7:66:05:FD:44:93:F4:D5:F6:D2:31:80:A5:FE:F1:8B:D4:43:B9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51FF31B20468D958C4140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f56f7b30-47dc-31d8-a59d-ee41bcb1f1ba.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.135.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1f:f3:1b:20:46:8d:95:8c:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=1256f048-8dfd-46da-893a-bd9af4efb6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:61:cd:61:99:7e:59:c8:50:9e:37:c4:da:
2e:a3:2f:57:72:1f:61:90:1a:cb:b3:78:96:69:b7:
77:7d:f1:1c:cc:bd:27:fb:75:0d:80:b0:e2:58:be:
54:5d:21:3f:08:23:67:33:ad:24:b0:1d:df:cb:a9:
c9:9e:b7:de:5b:4f:92:43:2f:a2:11:67:95:ae:79:
38:d9:ac:fd:77:ce:cf:0b:fd:6f:71:6f:26:17:5f:
d4:f6:ec:26:68:05:d7:3c:bc:51:ce:42:52:cf:ea:
c7:af:82:fe:5c:db:a6:8f:3a:a2:22:76:16:17:2e:
23:bc:12:bf:45:20:e8:52:40:48:96:e8:73:e4:80:
f4:ac:66:02:f9:49:03:81:92:30:62:0a:68:0f:74:
1e:f8:fe:a6:48:13:83:6f:de:7a:53:b4:5a:ff:05:
cf:60:5b:43:8b:26:20:91:cd:7e:25:b7:2f:bc:c0:
e3:65:88:e6:6d:e4:95:c2:e6:ea:01:a5:fb:a6:67:
f3:fe:5e:db:17:9c:cc:52:97:98:44:6f:bf:4e:8d:
b2:e4:76:85:ad:26:6b:7d:18:31:3f:4b:f4:d6:2d:
e8:a9:fe:61:7a:41:63:f4:fb:d2:7e:fc:e6:97:e3:
62:bf:ca:83:a6:1e:a5:ec:d0:04:d0:18:a4:8c:e9:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:66:05:FD:44:93:F4:D5:F6:D2:31:80:A5:FE:F1:8B:D4:43:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f56f7b30-47dc-31d8-a59d-ee41bcb1f1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.135.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:0b:40:b9:78:e2:0f:cb:0e:e4:b4:e8:a6:7f:62:29:d0:b6:
c1:23:bf:45:47:c5:1c:4f:6a:27:dd:a5:25:58:46:43:e5:0b:
8c:73:8d:38:93:2b:ce:5a:7e:49:e1:db:2f:97:5c:31:ba:66:
25:2d:1d:00:83:14:3b:00:6c:bc:d9:f9:dc:45:47:4d:8a:3b:
5a:84:20:d4:60:8b:6d:39:c8:a3:81:71:cd:ec:00:72:f3:42:
20:e8:49:af:57:e1:61:87:23:44:a9:47:c7:2e:23:18:ed:d3:
c5:3f:60:fd:78:4c:6a:f9:84:27:ce:bf:d6:c2:27:84:eb:70:
05:c5:5e:a7:f7:db:c1:3f:f2:8c:ea:bf:8b:8f:48:4d:b9:2c:
8b:3c:da:52:c5:bc:ce:92:c3:0b:67:34:ec:bd:de:d6:e3:be:
05:d3:22:2f:e2:23:ce:e6:02:a3:77:6e:3b:af:ad:73:34:52:
f7:b1:9c:d7:05:39:42:54:c0:6a:a6:dc:66:8e:89:5f:3b:27:
57:5f:fc:3d:4c:6e:08:bd:91:a2:ef:d6:93:66:46:98:46:38:
31:1b:ba:7f:eb:11:1e:b4:14:8f:fa:f3:e5:e5:69:48:d2:cb:
fe:62:72:35:fa:5d:10:65:1b:b7:98:5a:e8:4a:bb:f9:e0:18:
95:30:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:12 2025 by rpki-client