Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fea7bf54-2b9d-3a37-a71a-b82745044579.roa
File: fea7bf54-2b9d-3a37-a71a-b82745044579.roa (raw, json)
Hash identifier: qDyqqSH3pZZfbVB53pmCZ0LsAP87S15yBrpvt/27Ga4=
Subject key identifier: C3:57:A4:7D:7D:35:50:B2:22:4B:49:02:CD:85:5C:15:6A:0E:86:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50C42A5B272A44377E380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fea7bf54-2b9d-3a37-a71a-b82745044579.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.73.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0c:42:a5:b2:72:a4:43:77:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=a42595d1-f459-4e3e-a45c-b444f4be2ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:5c:1a:63:03:d5:1c:3f:1c:97:31:cc:a2:
c7:64:45:73:0f:a5:5b:67:dd:ee:a0:11:81:00:68:
34:3a:3a:da:4c:20:0c:0e:82:61:b0:ea:52:d1:13:
65:dc:21:f1:fe:66:7a:02:31:e1:e4:0f:0d:f8:ff:
3b:55:74:82:64:20:94:3b:c0:f3:53:50:63:48:b5:
f5:99:22:72:0d:14:63:f1:21:75:83:d8:f0:70:c6:
4f:12:64:bb:01:95:82:a4:10:fe:39:9c:eb:45:89:
a5:59:2c:ab:e9:17:d4:db:6a:19:e5:8d:59:fb:65:
45:4f:10:be:3f:c4:5a:5f:54:f5:26:cc:bf:00:1a:
c9:c2:de:77:44:c1:22:d2:96:2e:b8:9e:b3:1b:d7:
38:99:ae:ce:f9:71:1f:d8:6a:d4:6b:87:d3:66:2f:
8d:e2:69:37:d8:15:9c:1a:e0:7c:62:a8:b5:e3:80:
ef:9e:7a:40:23:c8:c9:21:9d:e9:18:4b:b2:ee:01:
c3:57:f7:a7:36:34:62:02:41:a8:4a:11:6f:53:8e:
37:9f:27:97:27:f1:39:85:34:10:ad:4a:ed:14:f9:
fe:81:f3:88:cd:52:1b:65:8f:a5:76:ff:4c:64:81:
43:d7:97:15:94:4c:a9:0c:d9:c0:d8:84:80:3e:19:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:A4:7D:7D:35:50:B2:22:4B:49:02:CD:85:5C:15:6A:0E:86:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fea7bf54-2b9d-3a37-a71a-b82745044579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.73.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8a:f7:03:c9:b2:c1:1f:d7:fd:b7:39:8d:52:fb:0f:49:68:
5a:53:7d:b6:42:a0:ab:8f:cc:25:7c:75:03:f0:fc:43:c9:ea:
18:d2:1b:45:bb:c8:5e:e1:f6:b4:47:e4:1a:7b:ba:31:60:95:
92:38:a8:e2:d2:41:86:e8:63:3b:3f:35:f4:d8:8b:95:69:ea:
b0:d3:ff:d1:1e:59:38:b5:22:51:94:d5:5f:12:24:63:cb:68:
b4:19:91:f7:99:de:2b:19:29:d5:df:37:57:38:2d:ec:46:e9:
50:50:6b:a4:ff:d6:ea:d7:ad:5d:2f:92:13:c1:94:33:d1:c5:
e8:be:80:d3:da:ef:8c:f9:50:64:44:7f:42:17:db:10:a6:cb:
9a:5e:44:80:ab:75:23:87:1a:3f:dd:ab:05:b0:0a:12:0a:38:
93:45:da:cc:86:59:e2:ea:cd:bc:11:76:b1:d0:97:cf:99:a7:
a0:f8:98:04:e5:26:aa:7d:da:b5:ce:10:ff:00:b0:30:77:1a:
aa:29:96:ef:00:7f:b7:48:e2:d0:7b:44:d0:18:5d:4f:9e:c0:
29:9b:ee:c5:08:d6:7b:56:61:01:40:63:7a:c8:94:c3:3c:56:
24:ee:dc:27:7b:40:e7:15:c5:56:78:3c:63:a1:90:20:35:22:
76:e7:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:15 2025 by rpki-client