Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa
File: 471c598b-79c5-39a6-bb6d-435de2f97b10.roa (raw, json)
Hash identifier: o828oFEz7ip0QADVpTn5mBafxc+se+oDhjGGXnyz6ZA=
Subject key identifier: 20:06:CE:CD:FA:60:40:E1:78:C9:CB:5D:9D:F2:29:39:33:A4:2D:8D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BC23B00CA758E1A902800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.73.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:c2:3b:00:ca:75:8e:1a:90:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=4b017a4a-3a29-4712-b5af-e6b9f5e3e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:4c:64:b7:31:0f:37:6e:ea:bb:4e:6b:3b:
70:e9:2e:06:19:97:10:8c:da:76:4d:d6:36:ac:97:
13:6c:82:70:ba:63:83:90:6d:16:e0:17:09:70:db:
e0:2e:db:c9:89:b3:03:90:2f:f7:26:90:7b:1a:81:
43:5e:33:d0:56:ff:40:78:cf:9a:80:45:0f:3a:cc:
9f:51:8c:ef:c2:1f:61:05:ca:bc:4e:f6:9d:ae:01:
2f:13:cf:ff:f7:97:f3:a9:6c:3b:c9:a5:da:68:15:
e0:88:a1:7d:7c:ce:29:a5:3a:65:b5:a4:12:92:bb:
64:00:b3:ca:6b:3e:ac:2e:d0:14:3d:8a:60:cb:d4:
be:0a:8d:f0:93:ba:eb:c5:eb:f7:fe:56:06:90:41:
e4:40:f9:93:77:8c:9d:fc:38:b3:ec:fa:f5:ea:55:
0a:95:36:1a:05:fc:13:57:81:24:30:7a:9c:d4:81:
71:02:0a:48:47:67:2a:7d:44:8b:e4:f0:f4:e4:af:
ff:dd:5c:8e:4e:cb:b7:c6:e9:fd:e8:1d:11:dc:7f:
12:86:88:2b:71:b0:5d:73:38:dc:d9:35:9d:b6:3a:
33:f6:73:70:40:7d:de:65:79:21:40:b8:40:3a:9b:
a5:54:e9:67:e1:55:12:ec:3d:14:e9:8e:a0:60:08:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:CE:CD:FA:60:40:E1:78:C9:CB:5D:9D:F2:29:39:33:A4:2D:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.73.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:72:66:94:8e:7c:17:27:69:7a:a6:be:61:98:3d:08:3f:5a:
d5:e9:4e:7f:e2:b6:af:64:c1:87:d1:34:25:d6:ed:18:1c:73:
49:21:35:39:00:0c:26:f7:54:ec:23:ef:e8:74:71:c9:85:13:
d8:d8:2f:0a:cc:e4:d2:ca:28:5e:ea:ba:02:d5:64:41:2f:cb:
9e:d9:18:95:54:82:03:65:ac:b8:d5:b1:d8:56:08:53:3e:2e:
6f:55:8c:65:b6:6a:4e:0d:66:0f:fe:51:03:cc:e4:9d:1e:4c:
38:23:d1:cc:8d:d9:b5:54:e3:44:30:5f:8f:c8:0f:07:8c:3c:
7f:f5:f9:02:a1:ad:14:15:31:82:bb:f9:eb:38:71:5c:dc:b9:
30:8a:37:ff:42:6a:04:81:44:df:7f:c1:fc:d5:be:de:42:c3:
75:d0:55:b3:f1:25:dc:99:b2:21:28:c8:9f:5a:95:b9:07:6a:
2e:59:e0:29:9c:18:df:19:7a:13:ce:c7:0d:c2:67:73:31:97:
56:ac:19:ae:23:c4:72:10:3d:be:55:48:e5:98:d7:36:b1:5f:
8b:1b:02:48:95:16:f3:93:e0:cb:f4:84:10:a3:2d:14:54:89:
fe:9e:5c:7a:8d:0a:4c:38:8f:50:85:33:8b:4d:39:07:0f:c3:
0a:61:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:02 2025 by rpki-client