Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa
File: 0f437b64-3b4e-3685-84cf-90c254ccd35c.roa (raw, json)
Hash identifier: 1YNPFdL2wprcgh1tN8GlvlXAqyY3qmGw2leFvyRqL6o=
Subject key identifier: 98:58:10:E3:43:AD:AB:53:8A:1E:2F:2D:1B:F9:84:60:5D:94:B0:2A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BD87B60EBF94DE99E7340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.128.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d8:7b:60:eb:f9:4d:e9:9e:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=164508cc-6296-4f56-b3f4-dfb74167d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:ed:b1:78:72:fa:64:2b:aa:d3:f7:cd:20:
06:18:97:10:19:a5:7a:a6:bf:86:0e:fc:23:83:bc:
20:4c:62:cc:50:c6:27:c1:e2:29:8e:f2:4f:33:5d:
ce:c3:7e:e3:a3:28:0a:66:cf:44:f4:6d:bd:ca:93:
10:fd:e9:3a:31:d4:83:8d:65:82:50:0d:5e:d2:bc:
c4:63:2d:46:01:74:ec:69:6b:0b:21:b3:d4:b0:fe:
33:c2:6d:8d:9c:97:fd:a4:3b:9f:50:21:e1:28:31:
c8:c2:b7:da:66:ba:e7:d1:69:7c:6a:75:f8:a4:d0:
be:b2:ab:1d:01:b2:f2:c9:3c:9d:f1:6a:a9:9f:e9:
f6:01:c6:65:46:59:d5:c0:93:99:ed:60:64:cf:a2:
5f:09:c7:ff:a6:0b:1f:22:b5:5f:22:86:47:71:3b:
7d:b6:7c:04:1b:90:5e:c2:9e:e0:4f:c0:3e:71:4f:
c8:3e:73:bf:94:45:7d:96:8f:b5:c3:08:b2:4a:92:
ef:e6:e0:1d:e8:3f:a1:68:af:17:91:55:b3:13:66:
42:8e:37:0d:4a:09:ce:a4:4f:32:a4:51:07:42:e4:
bd:18:34:1f:67:a4:27:70:f2:5f:62:4d:07:9e:f1:
43:de:d9:12:ad:2c:33:b6:97:f0:c6:41:f6:0f:54:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:10:E3:43:AD:AB:53:8A:1E:2F:2D:1B:F9:84:60:5D:94:B0:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f437b64-3b4e-3685-84cf-90c254ccd35c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.128.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:49:49:72:4b:ee:5a:ec:01:78:2c:fa:6b:4d:d8:23:7b:69:
ab:a5:8e:a5:84:9e:88:92:e9:8a:59:11:77:ba:fd:cc:eb:07:
25:4f:d4:ec:88:d9:74:b5:17:6f:1c:72:fc:fc:e3:e0:e5:0f:
46:9c:ac:72:81:ce:ec:8f:84:26:c4:e5:f3:1b:69:ae:bc:2f:
f8:30:13:47:58:8c:08:1e:d6:1a:4d:c5:37:7c:99:fc:1b:a8:
aa:8a:7c:04:7a:4c:d4:d8:d8:88:78:c3:b5:37:fc:43:9f:50:
52:ea:d4:29:02:32:21:4d:d0:fc:5a:39:21:de:88:87:98:7a:
4a:76:09:c4:61:dc:68:65:e4:ac:3b:d5:98:ec:d6:9b:59:6c:
c4:82:a3:4d:be:21:6f:68:7b:d1:47:14:94:e0:2d:ff:5c:35:
e4:ab:70:59:5e:8d:69:01:22:22:a6:ab:42:e7:24:23:0d:e9:
4a:da:7e:f1:1b:b3:81:1d:c4:3d:e8:37:95:7e:e3:a3:15:4a:
c6:59:0c:8e:4a:b1:10:2d:92:c0:00:b5:75:e7:93:68:13:14:
9b:d0:81:13:4a:5c:cb:2c:f7:1f:ef:67:04:e9:23:33:ad:19:
86:92:c9:d6:98:ff:6d:d6:d0:68:7d:c6:f5:d6:d1:d3:ad:5a:
30:47:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:47 2025 by rpki-client