Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/096963a5-ff01-3d3d-b174-2f46d19d620e.roa
File: 096963a5-ff01-3d3d-b174-2f46d19d620e.roa (raw, json)
Hash identifier: AfpQNGQ173+EBejua/dx4z5i8atBP5IyGwyLXJ97SHc=
Subject key identifier: 69:20:02:DE:5F:13:BC:95:CE:7D:97:62:8A:31:86:44:02:40:A0:18
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BCB3FD35664F9F42F6F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/096963a5-ff01-3d3d-b174-2f46d19d620e.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.91.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:cb:3f:d3:56:64:f9:f4:2f:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=7f08ace1-304e-492b-a960-4f110bd292cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:a1:39:35:75:80:0b:1f:1c:58:6b:7d:7f:
8e:26:0e:8b:33:65:9b:e0:f0:35:cc:ea:ce:b9:76:
d3:05:a8:41:0d:c3:cd:76:9d:70:0a:89:95:f3:e7:
05:c0:fb:54:b2:9e:c4:66:8f:5b:ef:b3:a9:8f:b5:
02:7a:1e:86:2f:0f:67:6e:3f:31:79:97:b2:b3:8e:
29:e3:7f:b7:0a:1e:de:35:34:17:c2:64:c1:f7:8d:
5b:9c:e5:aa:f3:f6:ca:70:a2:9e:d3:ca:c4:6d:bb:
93:89:bf:c5:0e:76:5f:54:f2:04:f9:bf:c2:ec:4d:
d3:15:c0:9f:20:d8:be:07:2e:80:de:6a:ae:68:8d:
c6:86:07:fa:12:a4:72:33:92:d2:97:3d:bc:ad:b9:
f9:88:e2:9a:f6:53:43:bd:5b:09:49:12:8c:5e:b1:
f1:2c:57:39:b5:84:8a:9a:66:ec:4c:50:f2:07:f6:
fb:47:09:d7:2c:f3:2e:9f:0f:8a:e7:c8:c9:cf:b1:
84:70:ba:2d:c5:50:87:f4:ec:ee:fd:3f:2f:4d:1c:
4b:50:67:ea:a6:f7:c7:92:99:0e:e3:b0:cf:7f:02:
27:dd:15:7b:82:95:a1:75:61:24:ed:55:fe:15:58:
13:c3:91:4e:cb:6f:e4:04:42:eb:1f:39:c6:c7:d2:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:02:DE:5F:13:BC:95:CE:7D:97:62:8A:31:86:44:02:40:A0:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/096963a5-ff01-3d3d-b174-2f46d19d620e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.91.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f0:f9:de:3f:cf:2b:c1:75:1d:ad:3c:ed:4e:1e:72:7d:5a:
2c:b0:34:8d:cc:f5:84:28:e6:f6:05:09:d5:37:ab:d5:9e:e4:
ee:99:46:09:d1:3a:23:3b:e2:2a:65:3a:33:05:d3:5c:bc:29:
d0:9d:55:d9:0d:af:33:4e:93:a2:71:22:c5:5a:a3:8f:ea:88:
7e:dd:08:58:52:72:af:e8:fd:3f:62:2e:cb:dd:a8:57:e8:b9:
cc:b9:ed:3a:31:78:d1:72:48:0e:7d:75:f6:3b:88:d3:33:c9:
2b:c9:89:8f:dd:7e:bf:f8:02:9e:58:e2:db:f1:10:55:7b:a2:
6c:58:90:41:ea:86:db:7b:5f:57:ed:ec:5e:69:c9:43:5c:24:
4e:3a:24:b7:74:d0:2a:b6:c4:e2:5e:74:d3:5f:26:eb:bb:ea:
30:ed:d1:08:50:5f:e0:85:cb:4c:ab:c5:8e:10:9d:a8:8a:cf:
0e:31:db:bf:5e:68:ee:ad:96:2d:af:36:56:af:a0:4b:12:c8:
79:1d:3b:2f:d3:9b:40:b5:9e:66:c5:96:35:9f:7f:39:56:93:
19:ca:8f:93:f6:e7:e5:dd:63:07:8f:ce:73:4f:2d:4e:42:eb:
dd:ce:0a:36:a8:75:cb:98:32:7f:41:33:cf:1c:6a:19:a4:88:
9e:ad:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:31 2025 by rpki-client