Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa
File: 437990a1-2118-3c10-876c-e7495090df33.roa (raw, json)
Hash identifier: FHS6eQ1/i3PCnWRmTIqsq7bREb4AAdOsiyOSxEGUCOc=
Subject key identifier: BD:A2:9B:7F:43:DF:08:6C:A0:0A:8F:7F:DB:DF:37:9D:36:76:80:E9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC56B60EF5B3AB47031A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.143.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c5:6b:60:ef:5b:3a:b4:70:31:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ae15f8e8-09f2-47bb-93d6-652aa6f7310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:75:26:f6:b4:65:c5:ce:d7:67:b5:13:91:
b0:44:cb:6b:94:4e:1f:5f:fd:29:2d:98:47:22:44:
7c:67:9d:a2:d6:96:d1:3f:50:c2:ea:b9:35:07:98:
17:d2:42:be:47:79:53:9e:24:53:90:f1:c9:f0:b0:
fe:c8:55:cf:a3:c6:05:dc:b9:d0:74:5b:91:bf:04:
74:e7:9a:b8:c2:ad:71:73:cf:45:2d:e4:e9:04:a4:
2f:f2:3d:43:20:31:2b:71:d2:a9:33:af:b4:d3:00:
3d:fa:c0:ac:fe:15:25:f4:83:e1:06:50:f6:87:31:
5b:a8:99:05:c0:f4:26:c1:40:e1:c1:b1:77:af:f3:
5c:63:fc:e2:4d:3e:d3:a1:6e:cc:63:f9:fa:99:97:
1a:8e:26:98:16:b7:58:7c:05:3d:14:03:39:52:9a:
59:b9:29:cd:f6:23:ea:41:a4:26:ca:61:ba:37:2b:
9b:df:86:10:54:78:9a:ff:af:72:5e:d3:f4:90:76:
e0:a9:36:ef:60:40:48:b8:f9:d9:5b:82:11:a9:05:
4d:41:e0:54:e6:74:6c:6b:c3:9a:7e:70:0a:ec:ed:
45:50:da:ad:d5:a8:e9:c1:97:ea:d1:c4:e5:15:c1:
b7:bf:26:a3:bf:91:d6:75:30:f6:1d:09:3d:a7:73:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:9B:7F:43:DF:08:6C:A0:0A:8F:7F:DB:DF:37:9D:36:76:80:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:02:fe:32:cf:b6:be:62:49:e0:26:3f:6f:7d:e2:2a:84:a5:
e5:02:ba:cc:22:a6:57:2f:3e:b1:86:dd:08:9a:9b:ff:38:3a:
86:f7:30:b2:f6:aa:ac:8f:36:1f:f6:b3:36:39:3b:d3:c7:85:
66:58:c2:55:50:df:4c:68:e6:99:0a:fb:41:b1:f4:b8:2a:21:
8e:13:78:67:29:da:0f:71:70:be:64:ea:f8:78:63:45:eb:13:
c4:4b:39:17:af:fb:84:09:01:fd:e1:64:8c:e0:f6:50:60:9f:
22:66:ad:bd:f3:ae:01:c3:f0:1f:ac:f3:02:80:71:2c:ea:dc:
b2:41:a2:03:1e:fc:32:88:74:c5:a8:98:ec:d6:45:ab:d8:ea:
86:52:59:54:84:82:9f:f3:cc:38:aa:9f:22:79:33:bb:79:19:
95:66:67:56:b2:d7:20:1b:6e:50:70:46:1b:10:4d:a3:2c:1c:
c0:2e:b5:3a:de:f3:81:bd:a9:fa:b2:66:c6:98:2f:88:89:27:
6b:93:6b:82:16:ec:6e:d6:54:81:d6:1d:78:01:ac:81:43:37:
0e:ca:07:b1:a0:89:0b:4b:f6:be:ec:68:24:13:93:35:78:aa:
ba:2e:31:81:d9:b3:42:65:36:fa:91:65:ea:e5:d8:1d:af:c7:
c1:df:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:35 2025 by rpki-client