Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa
File: 5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa (raw, json)
Hash identifier: hmhiWA65/rbH9ZQ6y0RX0ukOemWt6PDxfa05Vj9NA74=
Subject key identifier: CF:B6:B6:8E:96:11:A6:18:74:35:69:7F:99:12:01:C2:32:44:CF:DC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285849244E726B2445DFEE9ED70340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 19527
IP address blocks: 34.1.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:72:6b:24:45:df:ee:9e:d7:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=76014819-9102-424d-a444-b4128445c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:3f:7f:9f:b4:7d:51:46:a8:b0:9d:c3:90:
56:e5:d7:65:de:20:c2:8d:2e:89:69:6a:ee:36:27:
3e:b3:e7:e6:18:1a:37:f7:6b:76:92:9f:83:90:84:
50:2d:57:77:db:0e:4e:6a:89:06:79:51:e9:b8:48:
6c:33:df:9f:18:a2:75:6f:ce:6f:ab:d3:63:a8:52:
35:51:cf:ac:f7:13:9c:91:1a:a8:81:66:09:10:e4:
58:e1:a2:86:28:08:c5:f8:8c:72:fc:21:c7:c5:65:
89:04:ff:b5:58:25:ff:44:5e:ab:9f:6b:f9:3e:16:
79:df:c0:57:f5:16:e1:78:a1:92:b2:7a:4e:79:6c:
8c:32:65:c9:16:c4:d4:59:ab:05:57:a9:35:a4:04:
ba:81:86:d2:a4:a2:b8:d6:1a:67:be:b0:d5:d0:95:
7e:a3:b2:e2:92:27:7a:48:ed:30:82:16:6c:a9:5e:
00:5a:86:f9:f2:26:e7:43:cd:46:37:25:59:ab:c3:
e6:bf:7a:9e:01:70:ff:f6:87:4e:39:e2:dc:04:8f:
55:56:eb:e8:63:32:cf:33:c5:7b:8c:b9:a6:7b:52:
87:ec:1b:9f:26:bf:93:6b:75:d9:fe:c4:84:b6:4b:
ab:30:14:54:60:09:36:b4:72:5f:04:38:fe:c5:53:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:B6:8E:96:11:A6:18:74:35:69:7F:99:12:01:C2:32:44:CF:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bea2241-4f04-34c8-bd8b-5a8e4355a61c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:a7:f9:a3:4a:de:92:77:93:04:f7:bf:bd:b9:1c:cb:47:21:
f3:b5:22:cf:56:e8:a5:49:85:98:ea:0f:f9:95:4c:7c:3d:b9:
45:af:aa:a8:ba:7d:8d:9e:54:23:8e:33:18:3f:15:0d:05:20:
30:8d:1a:ad:73:be:07:48:c0:8e:5e:b8:13:7a:b3:fb:d5:09:
64:dd:36:59:c2:e7:17:33:08:05:ad:6a:b8:04:2e:e6:af:a8:
46:23:5b:ae:2e:cd:9b:5d:e9:86:ae:fc:6f:2e:57:cb:93:a9:
89:7e:47:2f:2d:5e:06:78:80:73:f5:04:7c:93:20:18:74:e0:
6e:89:a0:5b:e2:75:47:3f:82:ba:a4:fb:5f:5b:94:35:82:f2:
9b:79:9a:fb:1a:83:a0:e8:1d:d2:68:16:33:0d:fa:d4:2a:8b:
83:0c:36:56:91:99:55:fd:6a:7c:4d:4a:7d:37:f1:5f:38:5a:
6e:e8:fc:88:5d:4e:a0:ab:72:48:7e:ed:91:4e:9d:87:5a:79:
4e:1a:fe:4a:c2:ac:4d:87:3a:4c:32:e8:ad:91:a7:8b:31:2e:
af:d1:9b:8b:b5:eb:6a:7a:0e:8f:e2:01:ce:62:26:88:aa:8e:
88:85:9b:62:59:5e:00:ad:40:c9:58:09:c8:01:fe:18:42:22:
c6:f5:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:46:51 2025 by rpki-client