Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1046ff36-a038-3f70-a823-502a9062fb3b.roa
File: 1046ff36-a038-3f70-a823-502a9062fb3b.roa (raw, json)
Hash identifier: 6W6FKyOb1FivLmyx5iDrnjGdr3y8bM8n99FFCKOOLV8=
Subject key identifier: 6B:8D:3D:37:6C:BF:15:AE:E5:C6:1A:95:B1:93:C3:5D:E0:88:1A:C1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC8C01CDC52FEAFCA4680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1046ff36-a038-3f70-a823-502a9062fb3b.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.143.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c8:c0:1c:dc:52:fe:af:ca:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=c2c63a71-648d-4a20-8322-247ac9601e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:33:37:c5:30:84:76:de:3b:3a:a8:51:cb:
a4:a4:86:25:4f:3f:52:48:bb:5c:7b:e4:4d:0a:ba:
f9:6b:bb:a0:37:97:61:72:eb:d0:a3:e6:07:16:ed:
51:1c:03:14:0d:85:bb:4b:be:7a:04:fa:46:49:26:
1b:1c:5a:68:18:c6:6f:c2:b9:5b:ba:77:4e:64:31:
fb:23:33:1a:8b:5e:9e:3e:b9:11:86:e3:05:34:e4:
1e:29:e5:d9:69:a8:b0:da:c8:84:2e:d5:64:06:02:
99:09:62:9d:27:61:08:8d:24:d9:3f:4d:7e:c9:bc:
8b:30:87:b5:d8:35:d1:2b:6f:73:f7:79:22:8a:e0:
9b:25:ca:5e:d9:b3:18:13:e8:72:38:ac:3a:bd:3c:
1e:99:12:64:13:1f:ef:89:e9:8c:a9:77:bb:09:e7:
ab:f9:46:2a:1f:ae:44:64:24:d9:25:c9:d5:d3:c2:
c4:d7:4c:e8:63:ed:0e:45:23:06:0f:02:c3:98:13:
d9:7e:8b:dc:5f:94:ca:92:eb:81:1e:9e:33:d7:9e:
82:a4:9f:68:b5:94:eb:8b:57:b8:dd:4d:ee:f5:a1:
96:4a:e7:99:cb:db:bd:fe:fa:86:ec:20:6a:77:05:
fa:82:f6:d1:df:12:e8:40:0f:33:a6:cf:a8:5f:bf:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:3D:37:6C:BF:15:AE:E5:C6:1A:95:B1:93:C3:5D:E0:88:1A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1046ff36-a038-3f70-a823-502a9062fb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:9a:26:30:79:f4:87:c2:9c:af:9a:0b:e1:37:a2:33:5f:85:
12:dc:69:bc:66:9f:dc:b5:02:67:34:24:c7:6a:88:7e:ec:dd:
c2:ae:1b:3a:a6:78:14:40:19:d3:a5:26:b9:e1:85:2d:1b:70:
df:e5:3c:bf:47:3f:f7:9b:c1:d8:d8:ce:e3:98:cb:c5:7c:8a:
dc:cc:46:b2:e4:13:f9:63:88:65:99:a1:43:3b:f9:89:4b:bd:
93:a0:30:18:f0:8f:8d:7f:57:18:87:7c:0e:be:fa:78:fa:fe:
42:f3:02:15:7b:f5:d0:9e:d5:7b:63:5c:d3:02:88:3b:a9:6a:
44:c3:f9:ed:97:be:be:78:bb:4a:ad:9e:e3:02:1c:87:61:80:
52:87:54:5b:aa:54:29:43:62:49:f7:7f:17:bf:9a:30:da:bd:
07:8a:e4:67:80:d7:7e:3c:6a:bd:cb:a9:0b:bd:3b:d7:d9:5f:
50:a9:72:bf:fe:6d:39:fc:5b:eb:43:e3:80:cd:73:a7:c6:e9:
8c:29:af:90:a6:0d:6a:6a:be:06:21:d2:e2:9e:c2:fe:de:a5:
91:67:6c:c1:ef:1f:c5:97:b2:97:eb:27:2e:a3:4f:ae:8a:f5:
fd:f9:c8:e3:19:9c:38:1d:c0:9d:47:8e:30:12:7d:3a:48:f7:
de:de:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:48 2025 by rpki-client