Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa
File: 8b23c060-e118-3105-b169-4562d614483f.roa (raw, json)
Hash identifier: qsM15PLtDsmJ64BEp6e0YwIat2VVqnxsGOcJPRzQEYg=
Subject key identifier: D5:1A:F3:C2:DB:FE:57:6B:09:5D:D5:2C:42:6C:9A:9C:2F:DA:94:E5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BECD4FE18A1CCEA879C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.68.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ec:d4:fe:18:a1:cc:ea:87:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=920135e3-d56f-49de-ba90-738a766a646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:04:42:7f:6e:ea:e4:f2:04:d7:21:4e:51:
c5:51:a5:34:c6:7b:19:56:ec:e6:14:ff:13:5b:30:
12:b8:1d:f6:de:40:13:e7:08:43:f0:2b:b2:0e:bc:
95:70:3e:fa:e6:7c:96:7d:d8:ae:68:3f:1f:08:9a:
2c:c1:be:72:8f:2c:b2:6b:ca:36:e6:15:9a:93:5f:
1b:36:70:65:24:df:6d:57:2f:df:41:d6:1d:d6:03:
96:a0:8e:57:04:ed:83:8b:6c:7a:73:ec:b8:2e:e1:
c4:7a:f7:2c:7a:44:5e:48:2e:d6:62:14:a5:b7:5d:
8c:1c:c7:2c:6a:8f:78:fc:2e:13:fe:c9:fd:6d:cb:
33:6f:d7:b2:61:78:e1:ce:97:50:9f:60:ec:da:a9:
88:37:6c:3f:c9:8b:d0:19:0f:08:79:f1:1b:ad:20:
cf:d9:46:97:88:75:ed:98:f1:8d:54:fd:7e:a8:56:
4b:f8:da:31:74:5c:50:52:06:c2:f3:38:88:5c:52:
57:56:cf:cc:d9:f8:bf:49:54:f5:8f:0d:1d:c5:5c:
1f:09:fa:3b:c6:87:a7:50:51:36:6f:bb:46:8c:97:
03:4a:fc:0b:de:67:f2:a8:ea:93:e5:57:ff:39:5f:
4a:95:5b:7e:f6:0e:0f:6c:04:9a:e9:88:94:7e:38:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:F3:C2:DB:FE:57:6B:09:5D:D5:2C:42:6C:9A:9C:2F:DA:94:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.68.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:16:e8:43:f7:c7:07:e9:43:2a:2e:a5:eb:8f:ad:01:ab:70:
61:6a:fd:3d:12:24:cf:27:33:6a:fe:f5:6e:13:3d:b2:59:69:
d8:f4:68:a2:f9:4d:58:3d:c6:6a:c8:dd:1b:86:7f:c4:cf:f5:
71:48:94:3f:90:92:fa:65:00:c7:1f:8a:a1:40:8e:38:29:17:
4b:cb:62:14:60:05:64:7d:db:55:9c:e3:97:50:b9:25:a5:e9:
89:64:08:ea:4b:40:79:19:63:55:a4:e1:8d:1f:07:f1:fd:b2:
13:25:6f:89:d1:bc:b3:f5:0d:32:a1:3d:59:bd:67:43:dd:b2:
2f:44:43:35:27:6c:fe:3d:12:fe:f4:59:23:25:e4:5a:bb:67:
d7:7c:52:79:2d:9d:ea:96:8c:f4:e5:4b:2d:71:20:84:7e:22:
9f:1f:f2:16:69:e8:d3:85:98:c5:27:3c:35:14:73:e2:93:e5:
44:a9:13:86:9e:f0:af:8b:f0:b6:72:4c:4f:27:df:78:00:c8:
3b:37:41:5f:6a:ad:cc:b9:1c:72:59:05:5a:54:7e:be:91:2a:
ef:19:98:e2:fe:36:6b:b9:69:99:e1:d5:98:8d:3d:01:7a:5e:
de:f6:14:50:48:97:94:c4:90:9e:4f:31:8e:ad:b2:77:2a:f4:
8a:90:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:21:38 2025 by rpki-client