Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af42333-b839-3188-bdee-3fe1a7d56755.roa
File: 8af42333-b839-3188-bdee-3fe1a7d56755.roa (raw, json)
Hash identifier: 4B61HhDes9ufsHASMn4VFuROdtFw3z7eRiNXkPPjGQM=
Subject key identifier: A9:42:2D:47:CF:CD:CF:F3:62:7A:CC:71:CB:3A:82:D9:F3:4F:51:0B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BFD0189BBD8000BEA1360
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af42333-b839-3188-bdee-3fe1a7d56755.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.94.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:fd:01:89:bb:d8:00:0b:ea:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=3ecee2d9-aa59-4036-b9f2-49b05233f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:86:31:7b:f5:79:30:5b:4f:b5:d6:75:f7:
07:3a:6b:6a:b9:c0:fb:2e:40:1f:98:be:28:bd:c9:
33:6b:ca:66:51:93:ac:af:e1:9e:0c:73:df:fd:ec:
37:a1:ed:94:86:a5:b0:d0:8e:b3:cb:80:d6:55:29:
e6:30:a0:46:01:6e:7b:56:29:b4:2a:e8:a5:a4:6f:
43:20:ec:5b:51:78:fd:3b:b1:b0:d9:2b:a0:43:63:
22:fe:ef:14:79:54:4e:c8:f6:c3:bd:3a:07:c9:9f:
24:ee:6c:5c:e0:ef:6a:f9:b1:10:a0:bd:1e:be:f8:
2f:81:c4:f8:82:2b:bd:4c:92:59:68:95:d5:8b:40:
ac:99:07:69:bb:3b:81:04:46:e7:42:83:ca:3c:b9:
65:ed:97:4d:dc:97:d9:d3:1c:06:28:73:28:48:6f:
66:07:74:93:b5:17:bc:db:b7:68:9a:d8:60:88:0e:
64:1e:bc:1a:db:73:c8:f9:71:e9:f1:37:b1:00:53:
b5:c5:19:c1:a5:30:ae:bb:7f:89:90:13:a8:dd:85:
9e:20:e3:04:f6:b1:dd:5e:86:bb:35:33:d0:df:3f:
6d:8c:8d:81:19:42:07:ee:01:eb:51:0d:e1:54:f7:
8c:0a:55:bd:c8:5c:46:bb:73:ab:9b:84:7e:47:c4:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:2D:47:CF:CD:CF:F3:62:7A:CC:71:CB:3A:82:D9:F3:4F:51:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af42333-b839-3188-bdee-3fe1a7d56755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.94.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:4c:f0:61:cf:4d:fa:78:72:0c:44:e0:54:d5:10:81:e8:e2:
c7:7f:1d:29:6a:8a:d8:93:5b:8b:26:9e:c2:b1:a9:81:d9:da:
77:97:26:f4:d0:c1:ce:d6:04:cd:7e:04:91:78:86:7b:40:a0:
67:f1:78:a8:0b:0d:2b:a7:ca:9b:c4:49:f2:2c:ed:3c:ae:dc:
dc:c5:7f:34:48:a9:aa:da:fa:88:ef:a5:55:18:bb:61:fc:ac:
06:9b:71:5b:28:f5:51:b2:3c:f5:45:f8:0d:9b:88:70:c4:a6:
8d:25:5d:bf:38:e5:ac:b1:72:54:92:a1:30:e1:f4:e4:53:a7:
33:e2:72:e6:5d:56:94:81:b6:60:02:a7:89:95:58:ba:ba:67:
f3:e2:ad:f2:08:61:69:df:84:ce:87:46:6b:9d:98:fd:cb:1f:
a0:d9:d4:01:07:e1:8a:77:98:bb:5f:53:4e:00:ed:36:09:9d:
04:e2:81:b9:35:4e:4e:69:bd:92:22:d4:73:95:db:c3:05:e5:
7e:f1:f8:f3:39:00:0e:34:ee:71:a0:2b:03:46:8c:67:0a:37:
bc:ee:8c:23:a4:59:8e:ce:41:ea:b1:2e:e4:e9:9f:63:5b:ee:
3e:13:ef:5b:b9:14:d3:72:38:37:34:6e:80:2f:df:eb:ae:a4:
66:0b:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:46 2025 by rpki-client