Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
File: 33f7bbe6-9997-3a80-85e2-40e243874534.roa (raw, json)
Hash identifier: lBVtGmqEeB4Qz7oLOheABYfLWmbVPS2ZWv8RBhv1T1g=
Subject key identifier: B6:03:A0:98:4B:4A:2D:CE:CB:7E:88:23:58:EE:C0:4D:40:1A:E1:2D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5816EBCBF0036C3F98F145C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.103.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6e:bc:bf:00:36:c3:f9:8f:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=cd3b95dd-9f71-4192-a863-0a85a5ffa08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:68:5e:1b:c7:35:11:46:f1:b3:8f:be:0a:
87:5f:44:9a:54:b3:b1:41:42:69:be:6c:5f:c4:f5:
72:6f:1e:28:73:09:cf:bd:9f:99:2b:5e:7b:fe:c7:
00:0b:71:df:61:de:51:c4:a3:09:dc:84:61:74:80:
b9:1c:2f:d9:98:55:58:3a:44:15:af:10:8a:d1:03:
27:65:b0:8a:3e:ae:ff:f7:12:74:d4:50:a8:23:af:
10:fb:dd:3f:12:05:97:ba:96:d4:45:72:a9:8d:cc:
5a:ba:71:ec:51:1c:45:e4:22:7a:4e:c0:a7:b7:f1:
58:12:b6:b0:81:75:f5:5b:12:20:4e:81:bb:4b:74:
b5:25:ae:52:e3:3c:6f:9d:4f:38:e3:98:8d:02:85:
80:56:c9:fd:2c:72:a6:b2:b0:2c:7a:09:73:8f:b9:
12:b8:e4:c3:58:7a:aa:96:85:42:1a:a1:a1:03:8b:
cc:f6:b4:fd:77:a4:05:e8:cd:b1:2e:3d:b2:a3:f1:
c8:4b:38:91:cf:98:84:ee:43:e2:1f:c3:55:3e:47:
32:45:a3:eb:2d:19:d5:c0:e3:ab:74:61:89:be:61:
2e:45:1b:fb:33:36:5c:93:a9:df:e9:a0:e3:26:48:
7e:ae:bd:fd:ba:f5:a1:6c:56:f4:86:9c:57:af:cb:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:A0:98:4B:4A:2D:CE:CB:7E:88:23:58:EE:C0:4D:40:1A:E1:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.103.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:af:d0:fa:93:4f:29:d3:47:fb:f3:6c:6b:cf:9b:e1:8a:3f:
ca:1e:19:9f:24:4b:d3:e3:7c:7c:f6:17:ec:63:06:a7:be:e0:
cd:e3:79:97:94:34:1e:fa:f4:b5:47:b1:5c:88:89:e8:34:85:
06:9d:69:3f:f0:d6:28:93:0f:33:ab:3c:c6:94:8a:87:b9:be:
9f:1d:ec:2c:ff:50:22:b0:6f:12:4f:2c:e4:7d:64:d4:83:70:
c7:54:b8:24:fa:a7:9e:35:ce:48:d3:6b:7c:b6:ff:0f:ef:36:
e0:e7:9a:96:24:e2:f7:07:f6:ee:94:be:fc:99:47:b2:52:f4:
eb:e9:59:91:e3:d9:1b:cb:7d:fb:5d:4b:7b:95:33:c7:71:49:
33:ef:03:41:67:bd:8b:8e:d8:d1:16:f0:71:a0:66:b4:4b:d9:
27:be:c8:c1:fc:4a:b9:ef:46:46:2e:13:ae:af:a1:ae:64:0d:
b1:0e:e5:15:81:ad:6c:63:fd:ff:64:61:87:c3:2d:d1:45:52:
d4:07:39:31:51:0d:4f:b0:00:6f:7b:79:90:be:1b:3a:43:0b:
6f:0d:22:d3:e2:28:83:c8:1f:62:84:37:d9:36:f9:a7:6e:b8:
cb:0a:43:14:18:50:c0:3e:d5:34:20:5a:27:1d:f1:bc:ee:62:
46:9f:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:06 2025 by rpki-client