Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa
File: 2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa (raw, json)
Hash identifier: McQGRXdJZucICk0n065d1opz2idXdfBLdPhqd9DgSXA=
Subject key identifier: 81:F0:6D:50:DE:17:52:40:83:A0:6C:9A:57:E9:34:70:48:66:04:C4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC3F9A9C5B8526F74D8A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.72.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c3:f9:a9:c5:b8:52:6f:74:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=4ea5217d-1d0d-40b0-be05-c086b3e5002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:61:11:38:c2:ad:7e:98:cc:f1:43:55:67:
52:96:04:31:72:8f:b1:b9:eb:91:bc:4b:e3:b9:0f:
f2:37:37:35:64:bb:f1:4b:6b:27:77:0a:06:b9:3c:
31:01:cc:bd:ea:85:32:c2:30:3a:c2:90:d0:6e:df:
e8:48:40:80:81:1e:0c:86:f8:1b:50:72:8e:b2:8b:
22:af:7c:79:1d:2b:0d:e4:b5:b1:ea:8a:1d:e5:f7:
81:42:76:eb:6b:73:26:8b:7b:30:36:c1:3b:57:ad:
1f:eb:19:02:a4:37:62:9f:8e:94:e7:3a:44:04:eb:
ea:67:84:28:02:a1:78:e9:56:86:fc:11:cd:d5:d1:
6c:5d:a6:fe:23:b0:0d:28:18:b8:f2:09:22:6d:37:
83:0b:a8:f7:d0:9b:99:87:1e:92:68:28:3a:8e:4a:
dc:a9:fc:9e:fa:96:1a:25:47:db:7e:48:e2:d1:84:
cb:2d:eb:4f:de:1c:44:68:82:34:d4:ae:c5:11:4e:
9c:aa:08:b6:f8:30:13:be:13:42:aa:55:b0:9b:6d:
64:28:9b:17:7d:e5:46:9a:97:cb:2d:23:be:1c:a9:
aa:2b:5b:61:f6:21:58:04:2d:53:15:11:26:18:80:
8d:64:ca:05:f0:cc:af:fd:ba:9e:57:e9:2b:fc:27:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F0:6D:50:DE:17:52:40:83:A0:6C:9A:57:E9:34:70:48:66:04:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2f89f2fa-1311-3b68-8ad9-3faccdf74dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:de:de:91:da:ca:19:32:09:18:58:cd:76:7a:2a:bf:b2:b3:
5e:5a:84:31:67:ad:1e:2f:07:b8:7a:bb:53:ec:25:ab:b4:e3:
6b:80:43:10:c6:ed:f0:4c:b9:b4:04:d0:8a:4d:c0:62:de:ff:
5a:10:65:61:ab:35:a1:1d:9e:51:ff:63:68:d2:ba:cb:76:a3:
dd:ae:47:58:c2:ee:c3:95:55:61:64:61:9f:8c:5a:23:ac:2f:
31:36:bc:57:02:60:fb:69:2a:d7:0c:74:71:28:69:fc:40:f6:
a0:3d:67:69:49:33:67:d8:50:ca:c2:ac:f3:ab:2f:02:50:61:
07:5f:1e:c0:45:de:37:54:3c:56:dc:a7:fd:d2:c6:5b:6d:ea:
3d:6b:80:bb:b3:85:75:ce:b2:f7:d6:1e:2d:2e:3f:a4:e0:25:
6e:fc:50:a4:68:71:82:2a:9f:a0:74:b9:fc:c5:4f:98:98:b0:
49:b8:6c:5a:a5:78:82:96:35:52:8f:0f:19:f2:96:15:56:74:
31:de:b5:f2:9f:9c:fc:3a:99:f8:15:0c:ba:3a:62:7e:73:50:
e1:65:47:45:76:8a:6d:a0:e9:34:41:6d:c9:a7:72:23:3f:f2:
2d:38:92:23:63:7e:29:16:0a:9e:76:d0:54:1b:6f:ac:0a:bf:
8f:45:21:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:32 2025 by rpki-client