Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa
File: 2ab519a8-30a7-3662-b133-9a4028e98d2d.roa (raw, json)
Hash identifier: pjumamLqrMEF136paa/5UhMrkPILnhj7TeQNX+AeGfs=
Subject key identifier: 02:14:95:F2:1C:D0:43:A8:B3:92:1B:F3:5A:AC:BB:6C:32:F8:3E:B4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BBA0F0B596841D2E89600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.99.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ba:0f:0b:59:68:41:d2:e8:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=855cd579-a47f-48b0-84fc-7cd278092c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:36:25:ce:d0:e3:ad:50:99:7d:4f:7c:58:
41:cf:f4:b0:2f:cf:d1:6d:cb:18:28:63:49:00:e2:
cd:35:98:ae:df:86:9a:52:6f:d1:2d:fa:4e:13:c4:
47:2f:bb:20:ec:3f:89:63:4e:73:1a:0c:14:16:72:
b5:e5:ee:59:34:5f:eb:6d:45:7c:13:49:00:07:fb:
45:12:e2:89:32:1b:ea:d5:b3:61:cf:ef:8e:e1:ab:
19:3b:93:54:9c:f7:ad:2b:e5:c8:a4:4c:34:6e:13:
e7:ae:f8:24:c7:ba:a8:97:e2:43:3b:46:2e:f9:8e:
93:ea:71:67:48:f7:e8:36:9e:5c:8b:da:d2:cd:9d:
c5:3f:35:af:47:92:34:09:f5:88:f0:28:85:64:7c:
8b:8d:b0:f1:a1:67:f1:a5:57:c7:ac:a8:b1:bf:70:
30:6c:bd:f9:26:be:28:31:a0:91:82:1a:c2:06:ef:
f8:82:aa:5b:09:e6:d1:06:88:a8:6b:ae:38:b4:f0:
d2:51:51:91:ea:c3:51:5e:73:30:01:75:90:9f:e0:
30:9a:fb:c9:56:4a:e0:b4:7e:7e:cf:8e:e0:f8:a7:
38:f7:b1:3a:de:0d:96:a2:fe:dd:f6:62:e4:0e:8c:
d5:d0:8a:44:8d:f1:70:9d:a9:6c:81:d2:0a:19:89:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:14:95:F2:1C:D0:43:A8:B3:92:1B:F3:5A:AC:BB:6C:32:F8:3E:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:a9:b9:77:6f:60:64:da:52:69:61:68:df:7c:98:5d:1f:6f:
33:ef:77:b7:e0:8f:f4:86:a6:bb:86:28:5e:90:c2:21:9f:d6:
2a:10:74:77:3e:98:5b:9f:dc:3f:1e:9f:11:3f:77:d2:dc:68:
6e:86:e6:1c:66:68:ef:4d:1b:02:df:42:b5:56:91:e4:ea:d2:
9d:ac:80:39:f5:6b:ae:4a:28:a2:fc:35:c0:3d:dd:9f:83:14:
bb:cf:c6:c5:ad:87:e2:06:ce:d2:d2:6c:38:c6:ec:f4:c8:32:
36:1b:58:73:98:cc:cf:71:6b:ed:74:b5:24:07:f0:b8:a2:41:
ba:49:d0:13:e7:7b:84:fc:ed:0c:3a:aa:2d:93:64:6f:23:9b:
9e:d1:91:ab:a2:db:cf:e5:97:58:bd:a8:b8:a5:ae:e6:fb:ef:
60:d0:29:e8:63:e8:36:81:ee:37:6a:ce:b6:e7:dd:ad:5e:14:
48:58:3b:de:bc:9d:61:32:60:36:56:fb:73:a4:2d:c0:ed:23:
e7:54:82:c9:39:c1:96:7f:d1:b0:d6:f5:ce:40:dc:26:81:89:
84:3b:b3:bc:9c:8b:40:56:64:a3:bc:d8:9c:cd:0e:17:d8:b8:
eb:82:0a:d0:8e:1e:80:8e:aa:e1:a6:2b:72:8f:84:af:80:3e:
b7:d1:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:28 2025 by rpki-client