Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/349bdf63-ec86-3fb9-a3dd-2f0b421c0e02.roa
File: 349bdf63-ec86-3fb9-a3dd-2f0b421c0e02.roa (raw, json)
Hash identifier: Tl2+9d2EQE5LeCjZIyIn5yrs8fOA9n6hKJPg9eb93Ls=
Subject key identifier: 65:4A:F9:E1:65:8F:BB:88:A4:58:8F:79:55:4C:9D:9B:08:DB:AB:FE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BD08D34408889EF6E5F40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/349bdf63-ec86-3fb9-a3dd-2f0b421c0e02.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.129.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d0:8d:34:40:88:89:ef:6e:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=e9ad1897-3d68-4750-b5b8-c2ff9ff3089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:ea:56:d2:10:b0:d1:c2:4a:08:7a:b9:9f:
0b:cc:8d:82:f8:d8:cc:50:70:13:75:14:25:2a:9b:
6f:a8:fb:e4:3c:f3:e0:8e:d3:66:c2:45:93:1d:c3:
13:a3:e8:79:33:a4:ad:49:59:5a:a2:2c:4b:43:1d:
84:60:c5:88:6b:21:b4:e1:fd:93:cf:16:20:c1:9a:
e0:e9:95:84:5e:ca:c4:d6:e9:96:e3:c9:f1:69:28:
bd:43:80:b9:56:33:3a:23:84:10:ba:a3:f1:65:00:
87:21:5b:ed:d0:58:4a:d8:78:0e:37:4b:95:3f:9d:
f6:0c:f8:bd:cf:96:51:33:13:55:de:bc:2a:92:9b:
bd:05:10:2a:37:58:ba:58:5b:77:0a:2b:8e:be:69:
08:f9:a3:48:5c:c3:3f:0a:7a:38:aa:89:1f:7c:08:
a1:2e:f6:be:d5:89:d6:95:af:ed:90:6e:19:8d:8e:
d1:2f:0a:89:4e:78:95:f7:e8:7a:a7:ba:5b:00:84:
ea:17:af:5b:d5:43:8a:1f:41:08:75:45:71:68:17:
cb:e0:2b:d9:76:31:3d:e0:93:8e:87:3e:fd:3d:c2:
a0:39:c5:b1:5b:67:f1:63:13:5f:d0:df:4b:e6:4b:
01:a3:2b:5f:1a:38:2e:6e:f3:9b:a0:d9:96:e5:76:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:F9:E1:65:8F:BB:88:A4:58:8F:79:55:4C:9D:9B:08:DB:AB:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/349bdf63-ec86-3fb9-a3dd-2f0b421c0e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b0:03:16:ae:51:d2:ce:50:bc:d1:3f:ab:b0:5d:8a:ba:84:
8d:f7:17:21:26:16:6b:91:48:2d:dc:7d:45:4b:5d:f9:b2:b2:
f6:ff:af:d9:c4:c3:35:85:c0:9a:95:eb:02:73:b5:52:43:de:
4e:7e:1d:af:65:aa:34:39:a5:10:ff:54:f6:93:0c:05:ea:7e:
a6:8d:04:0e:96:34:a1:09:c3:52:10:32:79:30:0d:01:e8:38:
d6:59:e4:09:40:f0:af:5a:76:f1:7a:95:d4:09:f7:37:b3:07:
7c:76:c5:5e:26:54:46:31:fa:73:9c:ac:77:e2:75:1d:76:63:
f3:41:63:37:52:b7:26:57:14:fb:75:64:3c:e8:55:bb:a7:3f:
53:0d:32:67:68:1f:65:db:15:b7:54:33:3b:17:dd:b9:bc:cf:
05:e6:b9:20:2f:54:45:bc:98:61:18:b7:2d:e2:72:cb:45:b9:
28:1c:e3:c4:56:64:5c:db:9b:fd:2b:3c:81:6f:86:3b:6e:ce:
94:5f:58:21:c5:b3:55:a2:5c:fe:8c:78:bd:26:39:d6:e0:eb:
6a:f1:56:ad:b7:f3:23:7a:66:06:25:fd:9b:a1:94:e6:c8:dd:
85:62:ce:c9:1d:20:5b:32:8b:64:21:d0:06:17:0a:48:85:64:
17:10:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:13 2025 by rpki-client