Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6540f0e7-b828-3c01-a8c3-26aba1ffef25.roa
File: 6540f0e7-b828-3c01-a8c3-26aba1ffef25.roa (raw, json)
Hash identifier: mscnsqk0nn7utdQXQx3soR+i8eqXhp6VKlc/FWs36jY=
Subject key identifier: 20:48:4E:8C:23:B6:8F:C4:F7:8E:AA:9A:D4:1A:05:89:78:90:00:05
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C010701DCF4DEEE2FD780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6540f0e7-b828-3c01-a8c3-26aba1ffef25.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.126.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:01:07:01:dc:f4:de:ee:2f:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b216d07f-b14d-4a0a-a5d5-00a56d3c1ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:c3:ad:db:83:5c:3a:18:c6:32:52:05:49:
25:52:ea:8f:fa:c4:4f:7a:fc:d6:38:f8:ff:e7:cb:
3f:ed:f1:22:68:6c:25:6f:2b:b2:83:89:80:f4:b9:
18:5a:75:b5:3b:23:83:a0:9a:c9:48:69:4c:28:c8:
f0:02:9b:46:55:37:70:aa:3b:a4:87:f5:fa:67:dd:
a5:d3:f4:a1:cf:e9:46:8a:5b:b9:4b:cc:19:e9:07:
79:91:f2:94:25:db:36:5d:cd:3c:47:34:67:43:c6:
e5:4d:02:8e:32:69:f7:da:a7:58:48:97:44:bb:d1:
dc:78:1e:28:f8:76:88:64:94:6f:d7:d8:b6:09:7d:
6c:bd:20:4c:58:7f:3c:f2:00:21:52:3d:a3:ae:ee:
15:79:24:45:6f:c8:53:fd:51:1e:74:53:5e:b2:c9:
96:e5:d6:06:e3:83:08:68:10:2f:09:cb:56:55:89:
3b:1a:4a:7a:a0:17:95:c8:28:54:fb:66:c9:45:62:
24:90:f3:e1:98:ee:0c:b0:9b:21:76:29:88:d9:1c:
4d:53:cb:37:39:45:f0:a2:27:8b:d5:c7:20:a2:1b:
3a:35:99:11:0e:ed:13:c3:e9:92:89:f0:eb:b9:52:
82:77:af:a7:3d:13:1d:06:b7:f8:89:95:6d:a3:dd:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:4E:8C:23:B6:8F:C4:F7:8E:AA:9A:D4:1A:05:89:78:90:00:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6540f0e7-b828-3c01-a8c3-26aba1ffef25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.126.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b4:2d:a9:07:2b:cd:54:27:a1:95:62:19:66:4e:e8:bf:8b:
6c:10:52:6d:e3:f6:f8:14:7d:4c:9c:03:eb:0e:b4:86:61:18:
8f:9b:9a:f8:fa:7c:4a:99:a0:0c:d9:d6:7e:47:27:b3:63:09:
e8:23:b8:09:47:32:1d:00:60:d1:59:08:e4:12:d9:01:41:79:
05:2d:75:0a:f1:6a:f8:f4:7c:ad:2b:ac:41:e7:c3:ae:81:08:
8f:2c:d2:4b:5e:cd:23:14:e5:b2:ff:0d:98:7b:65:c9:f2:26:
f0:78:36:1f:ae:c5:09:3e:2b:42:dd:f4:4b:c2:97:63:73:9e:
de:59:4d:f1:6d:56:50:8b:84:4e:44:72:ed:e3:97:37:b2:d3:
dd:c4:92:0d:74:19:5b:a0:af:8a:50:c6:ff:c9:00:3a:a6:2e:
02:81:5e:c4:9d:f5:44:35:2e:33:26:e7:23:3f:da:cb:2c:d6:
a9:22:6b:73:bf:b9:4b:a6:25:9d:6d:9e:2c:4b:7f:6c:65:8a:
ef:b1:52:bb:2f:f3:00:ae:38:d8:73:7d:38:d0:e7:ef:92:9a:
bd:ab:a1:b5:51:84:94:13:97:99:89:75:88:b7:0d:b1:8f:1f:
5f:f1:4b:75:59:24:8e:b0:dd:bb:28:2d:0b:c3:f5:d0:2e:cf:
2f:f9:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:20 2025 by rpki-client