Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ad6dd55-8f78-3276-b79e-842c22c9fa0c.roa
File: 4ad6dd55-8f78-3276-b79e-842c22c9fa0c.roa (raw, json)
Hash identifier: 4ml+cfKsRXhy3XyTVjDrLx/PeGEYg+RxnoWUNCsGGUI=
Subject key identifier: AE:30:B9:84:44:3A:51:C5:9D:15:54:E8:4D:58:C1:44:37:5B:50:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584955589E53A229CBBE3BD58D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ad6dd55-8f78-3276-b79e-842c22c9fa0c.roa
Signing time: Fri 28 Mar 2025 02:36:05 +0000
ROA not before: Fri 28 Mar 2025 02:36:05 +0000
ROA not after: Thu 26 Jun 2025 02:36:05 +0000
asID: 396982
IP address blocks: 34.13.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:58:9e:53:a2:29:cb:be:3b:d5:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 28 02:36:05 2025 GMT
Not After : Jun 26 02:36:05 2025 GMT
Subject: CN=6c4a754d-53ce-47ab-b312-800e70a123aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:97:b0:87:08:44:56:1b:62:1c:76:e3:31:37:
29:36:32:78:25:bf:3c:7e:a4:c7:db:ac:fb:6d:3c:
c4:9d:17:6a:d9:1b:76:4e:7f:6f:7e:e4:dc:fe:64:
28:6b:34:f1:9f:29:28:54:1f:9d:11:55:85:e7:88:
9b:63:9e:c1:5a:c1:9e:d1:4b:ef:e6:9a:54:92:2c:
e9:16:6b:2a:d2:70:24:cf:df:51:5c:9d:88:c3:99:
b5:25:fa:e3:22:d3:2f:8f:c5:e6:23:df:10:8f:b1:
12:e4:5c:96:ad:b1:cb:c2:6d:3b:76:db:ff:1f:ef:
24:17:6a:a2:10:a2:7b:80:64:35:89:32:06:b0:61:
e6:25:2e:03:13:bd:aa:cf:f7:eb:09:d8:ce:98:bf:
17:b0:38:bf:3c:94:ed:c8:bd:55:d4:07:70:8b:4d:
ad:db:6a:2a:2e:e7:2b:cf:1f:14:5f:1d:cf:c9:b3:
9b:c9:ca:00:c4:a6:4d:78:58:55:2c:82:7a:1a:5d:
61:6b:be:62:ab:e2:b1:a1:16:34:5c:ea:d3:79:1f:
6e:8c:59:ba:2d:8c:ee:c9:f2:1d:fd:73:cd:ae:91:
df:26:60:ae:a2:99:95:b0:7e:29:de:88:3d:29:1f:
4a:26:7b:87:f1:cf:d4:34:d7:a9:de:94:50:70:75:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:B9:84:44:3A:51:C5:9D:15:54:E8:4D:58:C1:44:37:5B:50:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ad6dd55-8f78-3276-b79e-842c22c9fa0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.13.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:44:5e:a8:cb:c0:1b:4c:12:82:71:6a:56:56:8d:96:aa:91:
9e:86:f9:43:36:14:27:ef:8d:40:6a:e0:4e:e5:5f:5a:37:8d:
62:81:ff:2c:7e:7a:a3:ef:41:fd:a8:6a:f8:6d:e7:0c:44:33:
d4:9b:22:fe:8e:d7:8d:a7:fe:1d:82:b1:3b:b4:3a:13:ab:73:
56:7c:28:81:cd:2a:2c:ff:33:da:63:4a:e6:2f:eb:be:f8:c6:
01:0d:aa:6b:55:24:bb:26:40:8e:3b:f2:9d:f7:73:fd:86:a4:
9f:36:44:f8:9a:de:16:4d:09:d0:0b:03:0b:35:12:2f:b1:b3:
ed:9b:c3:a8:d3:d5:92:8a:32:a9:9f:dc:09:e6:f4:50:cd:1c:
85:a0:f9:99:b9:d9:8e:27:8e:af:b9:72:15:3b:a5:d7:73:de:
a8:7f:7a:3b:01:5a:1c:51:a5:89:45:01:b9:ca:db:e4:a2:32:
c0:34:b1:4a:50:f1:fd:8c:f8:1b:9d:7b:f8:fc:ce:58:43:e6:
a6:46:4d:e3:ce:26:d5:5d:32:af:b8:15:e8:e1:4e:0f:8e:81:
ed:36:3b:68:1a:c4:cb:00:47:34:c6:a5:10:fe:a9:08:ff:be:
24:bc:b6:5d:32:04:0b:e3:db:09:7d:a1:7f:15:55:68:a5:73:
f1:58:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:14 2025 by rpki-client