Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa
File: fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa (raw, json)
Hash identifier: 04r0khU1eR5kDD/XB2mZD84gBsw/U6PlyWljOg2EfVY=
Subject key identifier: 88:E7:F6:3C:29:9C:DC:9A:D7:A3:62:90:FC:9F:0E:FE:B1:3F:61:6D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50D04BC5227C5704DE800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.98.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0d:04:bc:52:27:c5:70:4d:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=b2992eb1-d4df-4247-acb5-5308b38b07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:41:7c:92:9e:51:97:27:83:d9:e5:13:e4:
d2:9e:c7:7d:bf:6a:53:c3:85:3b:ba:ae:28:00:e7:
18:69:2d:c2:bb:0b:47:07:ff:28:75:3d:60:3e:41:
64:ba:08:3b:f2:fa:0a:ed:3f:d5:91:9b:02:11:58:
74:9d:a7:57:8e:69:d5:1f:3c:27:bb:1d:66:54:77:
3a:64:8c:66:cc:1b:1f:1d:69:ed:13:10:73:dc:47:
70:63:60:8d:21:85:e3:3d:21:98:8e:2b:ab:ed:96:
6e:8b:86:ad:c1:7a:d0:44:39:32:dc:a4:ef:a7:f1:
bd:e4:24:db:95:bf:e3:dd:55:75:3d:57:47:6c:dc:
7f:64:1d:1c:75:c6:56:87:8f:46:77:aa:c6:ee:1b:
bc:f8:45:5a:92:4e:ff:35:93:5f:49:40:e9:03:8a:
b3:27:94:4c:84:a9:4a:a7:b4:30:8d:57:bb:9b:0e:
9e:1d:bd:4d:8b:bb:08:f9:ee:a4:97:f5:05:f3:e7:
85:61:87:49:4a:96:28:1c:5c:f6:18:7b:f2:21:bc:
c4:26:98:4f:9b:02:da:13:10:1c:e3:44:f7:58:6d:
0c:fc:8a:32:97:46:07:a5:c4:0e:7f:fb:42:0d:1e:
b5:45:6d:10:4e:f5:b0:4c:90:48:54:d3:45:f2:6e:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:F6:3C:29:9C:DC:9A:D7:A3:62:90:FC:9F:0E:FE:B1:3F:61:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:e6:5c:7a:b8:8c:a2:41:7d:0e:43:82:8f:b5:ac:17:78:43:
e8:16:ef:13:7f:8f:8b:3f:7c:d1:cb:f7:6e:60:97:27:60:fa:
db:09:92:cd:fc:d4:6d:7e:7c:22:f3:38:e7:15:b2:14:39:88:
e7:7c:3f:fd:53:0c:43:66:e6:c3:7b:b2:ce:d1:6e:87:51:57:
4b:30:07:0e:c2:36:a4:ef:e1:be:25:3b:5d:26:53:50:05:c7:
1f:ec:61:aa:05:32:5c:6c:4c:e0:89:73:b0:73:00:7d:7c:c3:
19:8e:84:0b:0b:a6:75:35:a8:65:02:2e:a3:48:59:67:4a:bf:
6c:53:eb:d4:27:7f:26:92:88:79:9b:15:90:6c:f0:02:50:db:
dc:1b:f5:51:21:fa:21:c5:9e:05:a0:ab:a6:4b:7e:df:32:09:
98:30:3d:e3:5f:68:7e:73:01:34:d5:de:38:e7:1c:1c:1f:87:
8f:5d:4a:b7:d9:5b:6b:c1:58:85:f8:b5:45:c3:b2:d1:e2:c1:
0a:3f:da:09:be:6a:78:98:61:ad:70:c1:65:a0:f4:c8:ef:a2:
92:d0:74:8f:69:71:93:5e:29:5a:b7:dd:b4:32:a0:d2:ef:5f:
b3:6b:da:7d:e2:41:05:85:a0:70:e8:e9:22:75:07:09:b1:73:
78:ad:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:10 2025 by rpki-client