Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/119ecade-fd31-34a2-91be-b452ea92007d.roa
File: 119ecade-fd31-34a2-91be-b452ea92007d.roa (raw, json)
Hash identifier: LipRr//khyVV4qImX9eds2vdXOB9KCJIDrfq50Czewc=
Subject key identifier: 53:18:2F:6E:AE:99:C6:91:3A:2F:8C:2A:C9:30:AC:EC:73:80:21:BB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858488F21D54CD1660F4B15D53C6C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/119ecade-fd31-34a2-91be-b452ea92007d.roa
Signing time: Thu 16 Jan 2025 02:35:39 +0000
ROA not before: Thu 16 Jan 2025 02:35:39 +0000
ROA not after: Wed 16 Apr 2025 01:35:39 +0000
asID: 396982
IP address blocks: 34.13.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:21:d5:4c:d1:66:0f:4b:15:d5:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 16 02:35:39 2025 GMT
Not After : Apr 16 01:35:39 2025 GMT
Subject: CN=dc0d65d8-42b8-4e81-bc74-42b6317a1327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:fe:d2:2c:a7:ff:f8:88:f5:80:71:38:7d:
24:a8:bf:bf:8e:f6:ab:10:f9:de:7a:50:d1:fe:48:
c7:f8:30:f7:bc:2a:c3:63:50:19:0a:15:5d:f5:04:
d9:bc:0a:98:fc:66:c0:89:ca:e0:81:e7:4c:d8:e4:
67:77:50:4a:86:3f:c2:07:75:8f:14:e3:ef:46:6f:
06:49:9a:14:d8:0a:6a:49:9b:d8:0a:34:b5:0d:8c:
90:86:f4:f7:5e:89:e7:dd:b7:53:f1:59:0e:8c:3c:
d2:74:c5:22:36:15:21:9b:2b:0c:92:23:0a:0b:9d:
e8:5d:d4:fc:90:bc:76:06:5e:c9:e6:b2:00:e0:1c:
0b:8f:c1:09:40:e9:ad:39:80:f7:ea:0d:79:77:cd:
02:0e:13:9f:23:24:2a:2c:60:c8:9b:a2:1e:77:0d:
d5:ae:0d:ac:6a:01:17:01:c0:eb:f1:28:bc:8c:28:
7e:23:bb:f3:7c:3b:38:40:24:c9:a8:c4:01:7c:4d:
bd:45:56:12:55:3a:a3:d7:5b:87:35:f2:2f:57:64:
bc:49:79:00:52:2f:91:d1:63:b8:0b:87:a7:60:9d:
a2:ce:72:69:08:d2:68:1e:db:57:39:bd:a4:dd:84:
eb:97:1e:5d:06:9f:54:53:74:4e:95:99:08:bc:59:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:2F:6E:AE:99:C6:91:3A:2F:8C:2A:C9:30:AC:EC:73:80:21:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/119ecade-fd31-34a2-91be-b452ea92007d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.13.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:0e:3f:52:d7:71:59:fa:74:15:f8:66:c1:6c:f1:2e:43:7a:
f4:a8:13:90:ab:5e:84:72:3c:eb:5c:92:fb:43:3e:e3:34:66:
dd:c3:d1:7d:b2:3c:70:b9:df:66:39:44:e5:78:89:4e:6e:e0:
59:cc:22:13:e8:1c:23:22:c0:9c:bf:7a:44:0a:c0:4b:37:6f:
f9:99:c4:bc:59:23:d0:18:d6:a1:b0:4c:5c:34:28:56:e3:e9:
88:22:d1:da:7a:88:43:d9:73:1b:2d:24:66:dd:e1:fe:cd:4d:
3f:de:7c:98:0b:3d:fe:36:a7:69:fa:97:86:64:b0:d1:da:b5:
b2:31:8a:33:b7:7b:20:40:3d:2c:3a:cd:9f:54:7c:39:b3:d2:
1c:f0:62:be:2e:7c:59:28:8a:f8:e6:3c:66:67:e4:87:23:02:
85:81:d3:b6:5f:11:36:c7:86:cf:b4:b2:dd:32:5d:d0:e8:f0:
60:52:f8:cd:9c:50:98:f0:c5:09:82:29:ba:e0:5e:01:3b:80:
09:8e:66:87:6f:b6:ec:9f:49:9b:f2:6c:00:64:7d:06:41:38:
6b:10:d0:bf:09:01:e6:06:4d:98:e2:22:bf:01:2d:42:22:ff:
02:82:e8:bf:d7:a9:b7:9e:06:28:6d:17:47:7c:49:e3:66:4a:
25:d6:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:10 2025 by rpki-client