Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa
File: 3be2fd1b-ec09-346a-8459-60b5003eb551.roa (raw, json)
Hash identifier: 8QBOqJYp9WU0HHHokGSEgi1tnvfDiyJ4MLfTid6dxig=
Subject key identifier: 72:D5:3E:90:F8:DD:10:4F:BC:A7:52:BD:EF:E7:82:8A:12:E3:C3:AD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BA99FCC0C102D5982D580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.76.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:a9:9f:cc:0c:10:2d:59:82:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=4615e648-b30f-4f99-a86d-3aa972a63b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:23:4a:6f:d3:15:90:f7:42:f4:41:56:ee:
5e:1a:5e:32:66:47:f9:c0:22:8a:92:5c:43:c3:29:
00:5e:f0:fc:68:c5:08:a5:ff:65:7b:cd:8f:ce:58:
3f:9e:58:25:5d:b1:90:23:90:af:17:e8:5a:97:ef:
89:42:8f:e0:ac:3e:3d:78:0e:4d:28:0a:69:91:d8:
f5:9b:87:5d:57:9d:48:f9:b3:57:b3:52:37:29:df:
01:85:fa:18:b3:fd:e0:63:d1:f8:1e:61:44:64:7b:
42:1f:04:e2:c4:27:15:c7:9f:7d:9e:01:14:bb:91:
bd:bb:3e:08:f9:b0:f7:fe:28:95:35:b5:b5:b2:93:
57:81:68:25:e0:2f:85:cc:2a:45:03:e4:3a:76:a5:
c3:d2:1e:98:fb:41:a7:8c:28:24:79:d2:0d:d9:0c:
7a:9b:51:b2:57:0f:df:93:40:5b:01:23:47:a5:09:
89:b0:e4:fd:4a:81:35:e9:9e:93:b3:f4:c6:0c:be:
c0:55:15:fa:0a:6f:ba:76:a6:61:8e:86:be:1a:d5:
31:d9:62:19:ce:79:b4:ac:d8:e3:58:ce:0b:da:41:
80:eb:66:35:e5:e0:ac:0f:7a:d8:f2:f7:1c:d3:de:
51:d5:49:31:6e:97:cc:93:5d:1a:69:a7:4a:0a:e8:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:3E:90:F8:DD:10:4F:BC:A7:52:BD:EF:E7:82:8A:12:E3:C3:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.76.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:66:bd:b9:02:2a:10:88:dd:26:6f:dd:4d:d0:91:15:ef:77:
47:13:1e:d2:e9:3b:91:60:dc:f0:51:12:2c:09:91:52:48:3b:
91:0b:8f:cd:0c:17:14:a4:74:ab:20:1a:d3:6b:70:e8:b6:1b:
67:96:f3:0c:79:ef:eb:ce:90:57:fe:0c:b5:15:4a:fb:47:6a:
bc:58:8c:fc:d1:2d:d1:61:c0:f1:e8:0b:69:2b:11:cd:46:28:
2f:cb:8e:14:5d:61:a6:0d:ab:37:e3:df:25:bc:81:23:a4:04:
85:4b:2d:88:82:e6:ef:31:31:ba:33:07:9d:91:8d:e7:01:aa:
99:11:0d:17:e2:4b:85:11:b5:39:8b:db:d2:91:61:8c:50:47:
94:49:7b:9e:0b:88:31:e0:a8:9f:ff:2b:71:6a:54:fc:01:f1:
fd:fa:67:18:f9:31:ad:79:6e:19:32:73:e5:48:d5:72:81:33:
54:ad:27:6f:b0:d9:d7:46:2d:1a:72:90:67:e2:11:b2:29:ad:
ad:29:c8:4c:0f:92:1c:01:8f:3e:73:c0:fa:e0:37:79:99:86:
9c:a7:78:07:fd:f8:01:ad:fb:b0:55:97:d3:1a:b9:8e:db:18:
46:b1:4b:24:cb:80:91:90:75:96:06:43:2d:31:ae:08:3e:fd:
8e:e3:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:09 2025 by rpki-client