Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa
File: 8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa (raw, json)
Hash identifier: 5VsvFl9SOyYKgm5zSigX39SYs2uOJq+GE2cLqgCO0us=
Subject key identifier: CB:53:EE:E1:E8:76:B4:2B:63:8C:BE:D6:BC:C8:4A:4C:77:CE:8C:52
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848D37656449F723D4FD8592100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 19527
IP address blocks: 34.0.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:56:44:9f:72:3d:4f:d8:59:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=1cce838e-ff48-4002-a47d-ecd27540de9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:34:fa:6e:e9:8d:aa:03:da:5b:e2:b2:74:
82:b5:16:9a:63:fb:02:fb:36:8a:08:0d:73:e9:08:
5b:61:24:21:b7:b9:ff:6b:a6:b4:e0:63:25:fd:78:
09:63:15:1a:84:94:29:2d:29:b4:ba:8e:1e:a1:eb:
b2:b8:e8:8a:03:3d:de:2a:80:90:04:27:d0:c2:38:
df:93:ef:e6:c2:da:41:6f:76:7f:01:40:35:e8:77:
08:b7:5a:1e:af:e2:38:40:a6:56:85:b3:82:69:cc:
89:64:2f:d7:92:78:cf:b8:d5:e5:09:39:15:d4:99:
2d:50:25:ac:50:f4:86:9e:e1:c7:5e:93:bf:fa:b4:
e5:fd:61:9c:d3:af:35:43:b4:c3:4d:65:1f:29:b4:
16:d5:35:1e:38:0b:ba:0d:69:5a:c2:f7:ee:ed:5c:
56:23:40:3a:82:e4:53:da:ba:ce:05:2e:2e:a5:76:
dc:c7:09:d3:6a:d6:a0:6d:4a:e5:90:2f:27:68:39:
f9:a3:09:19:c6:1d:88:73:b5:f7:3d:e6:17:93:73:
93:f5:bc:f1:47:45:ac:61:64:e0:21:99:ae:04:0a:
ad:d1:c2:bc:3f:73:60:cb:5f:c3:54:11:c5:9c:7c:
a0:23:f3:a8:7a:89:3f:ab:2b:ff:f3:38:7d:a0:ea:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:EE:E1:E8:76:B4:2B:63:8C:BE:D6:BC:C8:4A:4C:77:CE:8C:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b677d2f-7d2f-3f40-b806-7bf41ff1d2af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fb:f1:92:c0:a9:12:8d:89:1f:50:2e:41:80:0f:25:47:aa:
8a:63:3b:62:8a:96:6f:10:61:43:fb:6e:fb:63:38:1b:00:f3:
d3:65:73:a7:97:b7:fb:fe:86:dc:5e:db:63:90:a5:ed:47:1b:
2d:da:f7:d8:7c:76:6d:72:fe:44:73:49:86:9f:f1:24:20:8b:
fa:c0:6d:10:ef:4d:39:4b:f1:f8:f2:af:58:7e:76:1a:be:e9:
84:e9:a4:e3:14:72:68:0e:eb:8c:b1:a5:cb:72:4a:a1:32:6b:
af:51:ee:f9:4b:e0:3c:2e:6f:12:27:94:18:04:1c:81:6f:60:
e4:09:50:dd:41:a7:5f:71:78:d9:27:b6:b0:49:af:21:0d:4c:
f6:c8:3c:f7:94:e2:ed:5b:9c:9a:93:6c:d8:de:cc:f3:59:52:
a5:64:fa:49:e7:ea:09:db:14:59:49:e8:9b:1d:ac:bb:13:a7:
46:11:41:81:59:87:22:68:f2:91:c6:96:8d:d4:14:3f:50:8b:
3f:7a:da:c5:d9:ad:e7:44:ba:cb:5d:47:3c:28:9a:c0:5a:0a:
6f:f9:eb:37:cf:8c:37:b4:4b:fb:ed:20:8a:25:cd:d5:eb:a3:
27:3c:73:00:3b:c4:eb:55:f4:ab:9e:05:cb:7c:55:8b:9a:87:
eb:4d:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:51:34 2025 by rpki-client