Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29f1ec3f-acc9-3c2a-beae-54f38ac0d7ab.roa
File: 29f1ec3f-acc9-3c2a-beae-54f38ac0d7ab.roa (raw, json)
Hash identifier: gDwu78OiJW4AE0nKU7i7IsgpUpqTYC6DGCjA9atd9P4=
Subject key identifier: B4:DF:3E:F3:40:8F:A4:6D:44:0B:B3:C2:A6:27:86:32:C2:2A:6A:89
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848854B6C678CF0F2FE74267780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29f1ec3f-acc9-3c2a-beae-54f38ac0d7ab.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 19527
IP address blocks: 34.1.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:6c:67:8c:f0:f2:fe:74:26:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=50d814d3-fc21-4c31-98a7-26b57c7926f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:3e:18:91:4b:38:aa:96:0b:26:8d:92:99:
1a:75:67:ca:5a:e2:fe:bd:4c:a0:83:4d:ac:c5:ef:
26:65:e6:9b:d7:ed:a8:7a:79:f4:9e:5c:85:6d:e6:
b9:40:9a:20:5e:15:ac:72:77:5b:2d:14:15:11:b3:
ea:52:2a:91:6a:ee:37:b5:2f:11:16:f1:c4:b8:f5:
2e:5b:75:87:88:81:26:a6:10:2a:d7:49:51:fe:d3:
3f:e5:96:59:28:77:38:e9:21:00:99:76:d6:55:8e:
3c:e2:a3:c0:a2:24:39:ef:6e:5d:11:bd:c4:7e:34:
52:99:be:13:f1:f6:a2:ca:f7:f8:de:d3:94:18:30:
4f:1d:32:f4:7c:bc:b0:4e:a0:84:5e:57:a8:87:9e:
be:7a:1d:6b:6f:13:ab:43:c3:37:e7:3a:cc:cc:f8:
a4:de:df:ef:3c:07:e9:42:22:b6:43:e8:76:cb:cf:
04:55:0b:9b:e9:eb:36:ae:e1:9e:f4:f5:0e:0c:60:
e3:a8:0a:7b:70:35:50:28:e1:0e:55:b2:4e:35:b1:
63:aa:df:73:38:5c:1e:c4:66:fb:44:5b:4b:4d:52:
cd:40:10:bf:bd:cc:77:fb:3a:d8:61:ab:99:e3:b3:
c6:51:ce:80:a2:ef:00:7c:dc:fa:a0:cc:53:e0:77:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:3E:F3:40:8F:A4:6D:44:0B:B3:C2:A6:27:86:32:C2:2A:6A:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29f1ec3f-acc9-3c2a-beae-54f38ac0d7ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:9a:c6:98:97:ab:99:d5:95:3e:f7:a5:32:e9:d0:cd:b7:44:
07:f5:73:68:f9:21:03:c9:5f:fa:d5:8d:69:a8:ca:08:f0:9d:
9e:b8:9e:4c:ab:f1:08:86:27:25:26:9a:6a:68:a3:40:eb:1a:
1d:37:87:12:b9:f6:5c:86:f9:3e:6a:73:8f:a1:5d:5d:8a:aa:
cb:33:98:37:f1:c3:2d:e3:17:11:9c:80:26:82:70:b5:31:ff:
9f:8e:5c:ba:3c:bd:53:6c:ab:47:aa:60:1e:db:d5:f2:5f:99:
32:5d:46:85:c2:f9:d9:e2:fe:8c:72:2a:79:40:1f:c8:b8:46:
cf:a4:98:1a:b3:42:de:b6:00:3f:c6:62:76:e9:55:49:4f:bb:
d5:c7:8e:f6:96:4d:b0:80:a6:db:3b:82:f5:bf:01:1a:f2:10:
4b:b9:67:b5:fe:5c:c9:45:71:2e:e0:4c:0a:65:31:c7:7a:32:
33:d1:9f:9d:7f:34:92:12:df:97:b2:6b:6f:eb:2a:48:63:dc:
62:22:97:dc:2f:04:2a:7d:c6:02:69:dd:4d:dc:ee:9c:63:ac:
f8:0b:47:1a:63:7c:66:94:31:af:a7:9f:42:c3:47:ab:59:79:
43:59:d7:ab:26:0c:63:70:41:2b:81:7f:ba:30:da:ef:ad:8a:
cd:43:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:56:04 2025 by rpki-client