Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8abc2750-8583-39cc-b374-1c846c0bd9ac.roa
File: 8abc2750-8583-39cc-b374-1c846c0bd9ac.roa (raw, json)
Hash identifier: KcDUckCJ+zbMU3WI0oSm0QeSNOqBPeGzXbfbo7ioONA=
Subject key identifier: 3B:93:3A:0A:9F:10:94:C7:CD:A1:40:AD:EA:0A:B0:27:C0:37:54:64
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BB382D85334EA596AAC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8abc2750-8583-39cc-b374-1c846c0bd9ac.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.148.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:b3:82:d8:53:34:ea:59:6a:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=5a831fd1-f12c-4b55-9165-be0cba2937b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:33:f6:88:b2:17:be:67:64:75:6e:b9:21:
b4:87:55:21:4f:72:9b:60:0f:b2:00:b5:a5:93:f2:
53:64:95:d6:35:f5:3f:44:2d:3e:9d:b7:75:23:33:
d7:e3:4f:6d:ec:ed:5e:f0:c2:f2:f7:60:15:b7:05:
81:37:49:a1:56:c3:e4:e1:ff:70:60:a8:2a:46:69:
45:8e:a8:e0:2b:80:d6:32:3d:7d:fb:ff:10:89:f8:
7a:8c:a7:d9:d7:6a:b2:95:b8:f8:3b:c6:aa:a6:11:
8e:3f:c6:6f:71:4f:1b:33:05:db:82:8b:16:57:92:
4d:d0:19:8a:e5:b9:ee:cd:e6:65:bd:6d:25:a4:3c:
c0:13:8c:79:65:e0:e7:b7:6c:20:ab:b2:6b:63:13:
80:68:d3:16:8d:33:f0:c1:81:01:0a:fc:b3:05:54:
63:ce:02:4a:ed:ec:d0:2e:f9:77:58:87:a2:46:39:
34:7b:54:ca:73:03:83:93:e9:b6:21:e9:d3:a9:7a:
ad:fe:95:9e:e3:62:9f:21:48:65:ab:d0:1f:bc:4c:
87:b9:f4:7e:35:c2:8c:30:29:81:95:9f:3c:f4:65:
b1:eb:45:ba:a0:7e:07:2a:62:83:b6:2d:a2:45:1e:
d1:7b:f6:ff:02:a5:64:56:d3:74:a4:36:4e:ab:ec:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:3A:0A:9F:10:94:C7:CD:A1:40:AD:EA:0A:B0:27:C0:37:54:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8abc2750-8583-39cc-b374-1c846c0bd9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.148.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c7:3e:a3:af:6d:f6:b9:dd:4c:b4:4d:a7:03:15:f4:cc:5a:
e1:11:63:fa:48:70:0e:7d:36:9e:02:80:0a:13:ed:0e:83:2e:
52:0f:f3:de:52:3c:4f:69:2e:31:5f:52:cf:54:78:8f:15:b0:
22:76:e0:25:8e:0c:74:a6:04:18:48:ec:21:41:41:85:57:d7:
f0:60:5f:0b:52:a7:d6:b0:88:98:07:30:6a:8c:57:52:9f:27:
77:a4:e0:aa:2a:5a:a9:d5:be:39:3f:06:4e:89:90:ff:55:4f:
de:b9:8d:74:b4:a6:6d:ea:ed:b1:25:85:25:34:cc:b3:d7:a1:
78:30:54:ca:cc:60:a1:64:b3:5b:14:bf:41:d3:10:44:6f:48:
92:66:a6:83:28:25:fa:50:b9:bc:b6:09:3e:6d:76:39:dd:fa:
64:8e:50:68:92:c7:f1:69:6b:bb:d1:1c:54:98:3a:99:56:7e:
42:be:33:6b:f6:9d:0a:a9:59:81:db:07:95:af:81:37:ab:00:
bc:e5:84:a9:71:38:1a:16:4d:52:d2:7d:54:ff:a4:fc:02:52:
c3:dd:1b:db:bb:b6:df:94:2b:5c:be:ed:e6:54:97:f1:07:d6:
97:e2:fb:7d:63:ff:cc:d9:12:dd:fa:f0:72:05:bc:a6:d3:e8:
79:e1:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:12:32 2025 by rpki-client