Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28305696-6fc4-3837-a6d0-a08288c624ff.roa
File: 28305696-6fc4-3837-a6d0-a08288c624ff.roa (raw, json)
Hash identifier: e+bF5zLOIG+oXwWpt2KNTx9VzVS1PHfMXtm8rmlu8dA=
Subject key identifier: 0F:FB:95:C4:4B:00:8D:A3:F9:13:C0:9D:2F:F1:63:4D:50:DF:3A:CC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584891EE09EDDF853360990B2400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28305696-6fc4-3837-a6d0-a08288c624ff.roa
Signing time: Fri 17 Jan 2025 02:38:43 +0000
ROA not before: Fri 17 Jan 2025 02:38:43 +0000
ROA not after: Thu 17 Apr 2025 01:38:43 +0000
asID: 396982
IP address blocks: 34.13.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:ee:09:ed:df:85:33:60:99:0b:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 17 02:38:43 2025 GMT
Not After : Apr 17 01:38:43 2025 GMT
Subject: CN=58c00c50-5313-4415-b996-619663b2776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:25:25:93:ef:9f:38:0f:4a:9c:1a:91:e0:
e4:23:70:8f:15:6e:3b:e2:ff:64:ca:9b:81:02:f1:
e7:f6:f9:83:22:ae:46:af:90:29:f5:4b:fd:aa:a8:
73:9f:1a:e2:3e:8b:c0:58:65:c0:55:5c:fb:ed:8d:
93:f9:b6:6f:9d:c1:b6:f5:2c:76:e3:5e:c1:16:8a:
07:3f:09:1f:4c:e3:65:50:54:e9:9d:e7:7c:63:62:
37:63:c7:26:63:6b:e9:1d:17:2d:7b:39:88:91:a9:
ef:c7:26:44:1d:96:70:6b:9f:b3:4d:62:18:74:06:
4d:86:06:e2:3e:bd:4f:26:3e:8e:10:b7:5e:98:1e:
e1:93:88:68:5c:ed:31:c4:70:19:89:6f:ff:a3:ba:
9c:d7:78:44:e2:fd:96:36:28:ec:9f:15:7b:05:04:
e4:d4:46:e6:f8:17:80:3d:b6:e6:af:b2:65:b2:48:
bf:9e:18:e0:8d:89:59:35:67:fc:af:92:e7:fb:39:
ec:d9:e7:5d:28:ef:be:a5:ce:ba:a3:7c:c0:71:48:
0c:4c:bf:45:6f:e2:e6:7a:a9:a2:b3:43:56:ec:e0:
da:ff:d1:08:79:31:df:53:f4:dd:20:5d:0a:54:0b:
51:27:af:c1:ed:33:78:a3:50:93:bf:ae:9b:d6:78:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FB:95:C4:4B:00:8D:A3:F9:13:C0:9D:2F:F1:63:4D:50:DF:3A:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28305696-6fc4-3837-a6d0-a08288c624ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.13.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:4d:e2:e8:35:37:4f:e4:f8:df:9e:4c:9c:b0:e3:aa:ff:0b:
c0:b7:46:b4:8e:9c:04:12:a6:6f:84:a3:58:f7:c2:d6:56:63:
d3:15:7a:0c:97:91:54:de:e3:7a:5f:f4:2c:6a:f7:47:94:b1:
a2:97:bf:11:26:4b:cc:e2:26:03:2a:64:76:26:62:b7:84:f6:
10:e6:b3:e0:e6:b4:34:57:a5:1e:79:e7:3f:10:a5:fa:bd:a5:
8b:6d:d5:73:ed:0f:af:77:a7:44:55:51:d2:33:be:d7:1f:78:
e5:ae:84:e1:8f:7b:0f:db:cb:a8:c9:f0:2b:30:61:05:c1:73:
10:e2:7b:89:ae:51:14:ad:ec:33:6e:d6:1f:a7:3e:b5:25:e9:
71:c1:00:40:27:a5:f2:63:77:3e:d8:c9:de:ba:66:db:d4:3c:
cf:c0:22:a9:9d:40:8c:fd:2c:e3:9d:8b:6b:5f:c2:c0:59:07:
6a:ce:83:d7:fe:6b:d8:60:60:51:0a:40:11:5f:5b:6f:75:64:
63:95:6b:de:d0:6d:06:10:07:d0:c3:26:41:15:a5:e0:c3:69:
04:6e:72:e2:4a:08:65:90:ff:b3:e5:2f:f7:a5:3d:fa:d3:ce:
12:00:3f:98:02:f3:32:84:6a:85:5e:c5:1a:db:e7:be:b2:eb:
37:d3:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:12 2025 by rpki-client