Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab26f46-62d3-3e13-a413-c0e0e0173683.roa
File: 8ab26f46-62d3-3e13-a413-c0e0e0173683.roa (raw, json)
Hash identifier: o6bgdSl3NL7EC2rjIwLeIXxMqOjfAWIlz91BePJME1I=
Subject key identifier: 94:EF:2D:78:53:8A:46:95:29:75:F1:6B:56:A4:89:19:FE:00:89:36
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584891EE0F93A099BC4F7A478D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab26f46-62d3-3e13-a413-c0e0e0173683.roa
Signing time: Fri 17 Jan 2025 02:38:46 +0000
ROA not before: Fri 17 Jan 2025 02:38:46 +0000
ROA not after: Thu 17 Apr 2025 01:38:46 +0000
asID: 396982
IP address blocks: 34.13.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:ee:0f:93:a0:99:bc:4f:7a:47:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 17 02:38:46 2025 GMT
Not After : Apr 17 01:38:46 2025 GMT
Subject: CN=d788a949-3f12-4f5f-be61-0357fe5c5bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:df:ae:56:57:d2:15:0d:53:6b:4a:2f:47:
69:9c:4f:37:6b:b5:6f:04:3e:ff:29:dd:27:0b:7b:
c5:eb:2e:e6:1a:fe:cf:9c:3b:f5:b1:b4:4b:fa:85:
25:32:93:5d:49:8c:55:29:7b:34:35:b8:3a:97:cd:
52:22:64:6c:f0:64:f4:3e:e5:99:8b:92:a9:21:61:
d4:ad:4c:93:0a:23:82:f0:79:9b:d6:bc:2c:c5:1a:
b3:d3:7d:d5:19:f8:34:c9:9c:8b:d3:df:72:ad:ec:
fb:a0:e9:e1:4f:c3:98:8b:00:2a:3e:68:1a:d5:c2:
6d:48:0b:e7:4b:4a:a3:fa:83:3d:48:28:c8:a9:85:
80:41:f5:c8:ff:e9:86:d9:08:0c:b9:bf:2f:26:53:
52:82:de:bc:13:7a:de:ac:6f:d3:12:58:66:b2:b9:
a4:07:5f:6a:4a:cc:30:29:b0:2b:80:30:e9:0a:4e:
66:c5:a5:23:16:24:74:ca:11:34:55:e7:d9:cc:8d:
f4:ee:52:50:f4:74:f0:3e:41:17:80:1e:0e:ad:4e:
41:cf:fe:fe:eb:e4:ba:fe:0b:8a:e6:a8:3e:19:35:
4a:2a:65:32:4f:85:06:80:c0:ea:47:52:60:97:92:
29:6a:36:f0:4a:8c:ec:a8:bb:e6:58:fa:ae:49:20:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:2D:78:53:8A:46:95:29:75:F1:6B:56:A4:89:19:FE:00:89:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab26f46-62d3-3e13-a413-c0e0e0173683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.13.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:2a:90:13:06:08:6e:ab:68:52:1a:d3:c3:52:67:ff:1d:05:
88:ad:36:68:2d:a4:21:d2:ce:d0:11:80:52:fb:ad:fa:12:e5:
ad:ab:b8:3b:68:72:25:38:11:8e:3d:1c:4e:fa:65:e6:c3:6a:
91:df:15:fa:f7:26:0f:03:86:6c:af:ed:43:c1:83:9f:16:d5:
44:36:6b:0a:46:26:2d:0d:d4:d4:d6:58:fa:71:28:32:e2:40:
c6:e4:0a:bb:7f:9a:91:d2:a8:d6:c2:ca:08:81:19:1b:20:e3:
dc:50:2b:01:3e:3e:a9:cc:7c:65:ef:4d:9f:2f:a6:cf:de:88:
ba:c2:14:5f:25:f4:b1:0d:dd:58:2d:8c:63:db:b2:d9:d3:a0:
4d:93:29:dc:40:62:ae:c4:c2:2a:25:0a:0e:ae:d6:e5:2f:c9:
f0:72:8e:20:50:84:63:0f:8c:35:64:47:6d:8e:8b:9a:4c:4e:
fb:c6:35:65:99:89:38:98:de:a1:4b:36:b3:e1:7c:6a:5f:63:
c6:52:1a:0d:d4:d9:13:09:cb:e2:39:16:57:c3:a9:d1:3d:f7:
02:e6:c0:39:1a:7c:a5:1b:90:ae:d5:68:e2:8b:1a:e8:d4:80:
5a:30:0a:6e:50:a8:25:86:a8:82:6f:9c:3d:f1:88:3d:e5:68:
df:2f:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:01 2025 by rpki-client