Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66cbe500-b941-344f-9e80-0dde25d02810.roa
File: 66cbe500-b941-344f-9e80-0dde25d02810.roa (raw, json)
Hash identifier: 8Cl9Jc30nuQtTZKNx5qNHTDwDf6KuNNe7zM+tFyEg38=
Subject key identifier: 23:E2:F5:CE:C1:10:78:55:7A:AA:71:15:E0:6E:2C:75:0E:6C:A4:52
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C0A395AFD8F14B0E78280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66cbe500-b941-344f-9e80-0dde25d02810.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.74.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:0a:39:5a:fd:8f:14:b0:e7:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=62d1e3f2-c4e6-4cd8-9e68-bef5380c7ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:30:38:e8:ef:59:47:7e:16:48:05:74:79:
f0:7e:d2:1f:53:24:40:74:45:13:57:b3:96:d7:c0:
6b:71:45:8e:96:cd:de:80:0d:f2:21:9f:bb:1c:2d:
c6:a4:ca:81:a2:81:c3:95:d0:24:90:1a:29:ce:78:
1d:01:70:3c:01:ae:ca:dc:81:12:27:b7:c8:1b:81:
cc:6f:61:3c:28:40:1b:9b:13:26:43:5d:42:9f:bf:
12:78:d0:e9:0f:bc:33:e6:39:70:87:0f:73:5a:f5:
20:0e:d3:7f:ce:2e:33:47:ac:15:c4:c4:d4:93:1d:
6f:ab:25:c3:41:d0:c5:29:fb:87:65:c4:27:59:a0:
26:a1:c6:27:2c:73:fd:f6:63:a3:d1:dc:77:8e:88:
a8:d4:5b:6c:47:e9:8a:3b:7d:7f:00:1a:2f:47:fb:
85:48:47:f8:de:1a:7e:b1:c7:db:49:77:fa:ec:b3:
52:86:e0:b5:53:cc:d3:93:ec:cd:b6:79:34:12:7a:
59:a7:a7:ae:84:c4:a1:2a:98:63:4b:38:a4:78:bb:
63:57:0b:03:fc:38:9f:0e:37:cf:0c:ec:9f:39:a2:
97:d1:b0:69:c7:b8:a4:6d:31:eb:a7:d2:cd:55:50:
bc:e8:dd:b0:cc:8c:8d:c1:90:4e:75:08:f7:13:7a:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:F5:CE:C1:10:78:55:7A:AA:71:15:E0:6E:2C:75:0E:6C:A4:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66cbe500-b941-344f-9e80-0dde25d02810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.74.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ff:94:df:4a:3e:ee:33:42:04:53:67:aa:9e:58:61:82:3c:
da:c3:be:28:bc:e4:15:d2:8b:12:74:74:db:30:80:66:61:f3:
4a:76:35:55:23:57:e3:3b:e7:ea:25:1d:8e:49:b9:2a:ca:74:
a2:5d:50:35:99:c4:1d:dd:f1:ea:2a:ec:b4:85:67:54:e1:ac:
68:87:6a:47:a4:82:96:15:61:58:15:5a:df:ff:28:96:d2:7d:
03:f8:86:9e:40:a2:8d:63:7a:0a:65:14:94:ed:a5:7f:fd:47:
e8:82:86:b4:24:bb:e9:cd:cb:59:5a:67:6c:6b:e5:af:51:f0:
25:ed:36:58:cb:62:13:ae:4f:ef:8a:e2:4b:65:cf:32:5d:4e:
62:16:0e:26:54:91:85:4e:28:24:43:ea:d1:37:8f:14:ce:df:
96:dc:da:e1:71:87:33:f6:75:dd:e7:b3:fe:7f:4a:45:67:c5:
36:e9:a8:2b:30:95:3f:c4:1a:6f:6b:52:ae:b7:d7:bc:e3:84:
98:cd:d8:84:99:4f:cb:56:3b:a4:c2:90:76:3d:2e:93:9c:52:
aa:78:b6:31:ee:c5:3b:f1:30:08:d5:44:a6:b0:fc:a0:e3:bc:
7f:7f:f9:77:f5:65:29:82:29:ed:81:74:a9:3b:91:6b:85:06:
10:9d:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:11:22 2025 by rpki-client