Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29854dc8-2b5f-31a7-a3a5-c54e6a25eb61.roa
File: 29854dc8-2b5f-31a7-a3a5-c54e6a25eb61.roa (raw, json)
Hash identifier: AQ3LwIe9ofJBw3HS0Gxp1TTMkbE6tLpC6GVsW3jc8yA=
Subject key identifier: 99:54:44:72:1B:89:2D:DB:DA:DD:82:CF:5D:EF:AD:71:1F:09:45:53
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5822C2A67169CD37F69DEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29854dc8-2b5f-31a7-a3a5-c54e6a25eb61.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.118.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2c:2a:67:16:9c:d3:7f:69:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f0284692-6b4a-49ca-9917-e23e42f19ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:03:ea:c7:a8:c3:83:96:2a:10:70:c2:42:
be:1e:61:c9:e2:6f:99:15:f2:de:f0:a6:17:1c:d3:
10:64:6f:9b:0b:96:a1:6d:5a:cf:e9:a2:5b:48:fa:
71:28:c9:5f:9e:90:b4:a7:90:9f:ad:fa:45:fb:95:
02:21:0c:6c:89:ec:27:84:ac:65:fc:ed:c0:52:d7:
61:db:7a:72:49:90:f9:5f:25:5e:ee:63:4f:e8:0e:
b9:fe:6d:88:43:6c:66:1f:46:d8:30:80:47:d2:e3:
76:09:be:73:0e:20:ca:97:51:9f:4b:71:a8:51:5d:
f8:38:6d:a2:d0:c8:e4:40:d7:86:04:ba:e1:39:c9:
61:c8:3d:12:1e:81:6d:7c:66:a7:53:3c:31:18:73:
b3:05:c1:39:10:4e:5e:8a:d1:41:82:b4:33:66:ce:
76:a7:f4:23:b4:27:5b:a0:c1:4d:df:55:23:17:48:
11:e9:79:36:58:53:30:10:ae:7f:23:a7:c1:e5:d2:
2c:4b:83:58:3d:b9:04:6f:22:81:fc:37:3b:45:4d:
ed:0e:5e:8e:0e:61:49:56:ce:de:1f:26:9b:42:af:
36:de:35:e8:4e:e2:88:88:30:51:9f:d9:3c:3c:ff:
35:38:94:0c:9d:16:65:14:fc:30:6a:50:b5:bf:ff:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:44:72:1B:89:2D:DB:DA:DD:82:CF:5D:EF:AD:71:1F:09:45:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29854dc8-2b5f-31a7-a3a5-c54e6a25eb61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:cc:0c:5b:f8:b8:2a:76:e7:95:77:87:45:38:39:fd:58:2a:
7a:dc:b9:19:05:80:b6:01:2f:4d:5d:c1:9c:86:d4:6b:b6:96:
05:60:a1:e5:33:da:03:a5:2e:87:28:96:cf:4e:30:6e:f6:5f:
86:4b:53:ad:a8:a7:5c:eb:53:1d:b3:e9:f4:4e:ff:be:e5:71:
40:91:1e:70:2e:ba:66:5c:de:9f:dc:63:03:d1:b8:16:1c:9d:
d0:f3:0f:51:51:1f:17:6c:37:93:2c:95:53:ad:c4:a2:17:20:
07:78:85:21:44:29:db:3a:55:14:d7:d6:5a:4e:a4:e7:20:af:
c4:bb:c8:5b:f2:70:90:85:32:cd:c9:11:28:e1:ea:fd:5f:63:
54:6c:8c:9c:31:eb:6a:f7:ed:2e:a0:a9:d9:ff:c1:ac:8f:06:
ad:64:22:05:92:a2:19:c9:de:4a:7e:f3:f1:f8:9b:4d:f2:41:
2d:68:3c:72:7b:af:b2:a5:7e:fb:5b:00:29:69:05:a7:f6:fd:
06:b5:70:ae:c1:65:ae:c4:a6:4b:b7:99:12:d7:12:02:b1:75:
00:87:65:42:81:23:8e:6a:37:9b:c2:8c:77:de:d1:ee:28:be:
57:1f:f9:f9:88:c4:51:51:e1:ee:3f:27:ba:4e:b4:67:b2:4d:
23:1e:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:15 2025 by rpki-client