Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27edea96-3147-3559-946b-c5ff20aa13c6.roa
File: 27edea96-3147-3559-946b-c5ff20aa13c6.roa (raw, json)
Hash identifier: pFq49sb8s1HXro2noE1VGCun5qK4MHtsjuvszMG+hTM=
Subject key identifier: 04:35:58:8A:3F:F1:21:9A:65:F2:78:E6:E2:00:87:76:8F:1D:7D:41
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C58189DA64505CC9BF9C5980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27edea96-3147-3559-946b-c5ff20aa13c6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.116.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:da:64:50:5c:c9:bf:9c:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=95f0bb6a-f603-408c-b4dc-6dac0a9c1365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:50:ac:5b:c6:3b:7f:55:ad:07:66:f5:27:
d4:84:50:f1:5a:a5:c9:19:ee:f0:cd:d3:e0:3e:73:
c2:dc:7f:2d:75:ba:db:42:2e:4d:75:de:da:05:7b:
85:35:cb:c8:b8:a3:ea:4d:14:0b:f4:b2:65:e2:f0:
21:c4:7b:22:63:1f:14:78:3a:59:a3:6b:cf:6d:c4:
b1:e6:47:8e:14:0a:51:7c:43:25:cf:08:ba:25:8d:
a2:d9:db:af:1f:b7:ea:92:26:70:f5:86:81:9b:2d:
b4:33:4b:73:b4:39:ed:a9:39:1b:78:f3:aa:51:b0:
bf:0f:e3:21:b1:e0:5b:1e:9c:89:2d:e1:71:00:c1:
bb:a5:c9:bd:49:f3:74:fe:34:31:a0:c6:68:a9:17:
ec:74:f9:3a:3f:48:99:d8:b9:72:3d:9c:0e:9e:3b:
f2:e3:cf:d2:f5:59:37:e2:c8:1e:e4:5d:db:94:03:
2d:e0:b6:05:58:20:bf:0a:51:95:4b:f7:87:5a:14:
2c:7c:a7:b0:c1:c6:1d:0d:e6:ed:56:58:fb:2d:35:
89:c5:66:3e:23:83:30:79:e1:0b:39:5c:90:01:2e:
d5:8e:5f:c2:d3:f8:85:2f:6c:7d:42:b5:15:fc:bc:
ba:39:cc:df:d8:c8:74:7a:d0:96:48:b4:fe:f1:be:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:35:58:8A:3F:F1:21:9A:65:F2:78:E6:E2:00:87:76:8F:1D:7D:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27edea96-3147-3559-946b-c5ff20aa13c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:3a:a8:83:c7:09:0b:81:d0:5b:94:2e:74:f1:76:ac:2f:db:
65:e3:c5:f8:2b:d5:d2:0a:c1:30:c5:e3:d4:3f:33:5a:94:31:
48:cc:19:aa:3c:28:81:64:54:f2:96:d5:5d:52:ea:40:29:80:
ed:ae:0b:ec:f4:11:c2:20:0d:70:df:17:a0:53:a6:aa:a5:5b:
c6:31:f3:01:a0:e4:73:cb:73:60:3c:91:9f:d1:ea:f8:18:d5:
a1:18:f7:85:11:1c:f6:d8:00:07:9d:1d:7d:5a:57:90:8f:80:
b6:e9:26:f5:16:98:46:fe:dd:06:99:58:e4:1d:42:b6:ba:23:
c2:6b:30:4e:da:5a:f0:d5:cf:5d:d8:94:29:6b:da:b8:b8:7b:
c4:d7:80:09:a7:a5:6f:01:e3:a6:4a:c7:9d:fa:44:0f:77:27:
9e:b3:15:fb:b7:b4:92:6a:08:ca:39:ba:cb:8a:54:ca:2c:65:
1a:2d:a8:53:0d:cc:e7:8e:d7:fe:6c:5f:87:f0:52:d9:fc:9f:
8b:5f:b5:b0:30:1c:77:c3:fd:bc:0e:c1:f2:7c:c0:21:eb:ee:
12:f7:3b:a3:dd:c3:35:0c:07:41:5e:40:ff:7c:fa:8e:70:49:
65:e3:55:76:8e:ed:09:7c:ca:cc:1f:75:92:99:14:86:3e:b4:
eb:f8:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:11 2025 by rpki-client