Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa
File: 900a292b-8892-3e6a-8710-e6bd1171ce27.roa (raw, json)
Hash identifier: Z1lc1y4CVEjGuq/nNXJPnhQtfZkrU7UZI4ZiJjFzHjo=
Subject key identifier: BF:85:19:7C:1F:5E:93:27:13:44:F4:9E:FF:CC:2C:57:0A:B8:AC:96
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF9AA1D7B41251D3EA300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.89.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f9:aa:1d:7b:41:25:1d:3e:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=26b5f30d-0d3c-43ca-a182-396c177017a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:31:60:9b:13:fe:42:a7:cf:0a:64:58:d5:
4f:87:e3:e8:77:04:5a:3f:72:61:ce:27:97:dc:8f:
00:28:17:2a:96:cb:9e:5f:a6:b6:ab:07:d3:ef:05:
37:f8:c9:88:a1:87:69:6b:5a:30:ed:97:2c:02:6a:
c3:21:aa:c8:be:e9:3a:ec:6f:f7:67:d6:f1:d3:97:
60:97:a3:67:a5:01:fe:30:ad:d5:93:bc:95:37:2b:
59:94:65:20:4e:c2:39:4e:bd:92:79:75:6a:53:0f:
65:5a:20:4a:29:90:60:d2:9e:07:10:9a:9b:ee:0d:
d1:54:ed:88:6b:5a:f7:c4:fa:cf:70:0d:f1:01:4b:
d7:56:84:2a:44:c6:83:cd:90:0b:96:ef:ed:9f:40:
92:e3:b8:c3:82:5c:a6:3b:e4:05:de:f0:83:96:ff:
65:f0:db:5f:db:9a:1f:82:03:0b:94:8c:eb:dd:6b:
ac:30:8a:81:18:9b:4d:69:9b:17:08:3d:05:bd:14:
90:00:84:b1:f9:99:cd:ba:8e:fe:45:36:91:fb:07:
9e:7a:01:82:3c:b6:5c:48:5d:23:4f:f3:b8:f8:be:
4c:62:a5:ec:91:e9:b7:87:1e:2a:b1:28:cd:08:60:
06:a1:f3:18:95:50:f2:b0:37:5d:3b:db:3d:32:73:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:19:7C:1F:5E:93:27:13:44:F4:9E:FF:CC:2C:57:0A:B8:AC:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:8e:5c:92:c3:e4:d6:6e:9e:43:c6:21:55:c6:c1:3b:5a:93:
7d:97:4b:90:84:a8:c1:a6:ce:f1:cc:88:ad:d4:01:0f:6d:41:
20:a7:b2:1b:1c:be:b7:3c:01:87:df:c5:bb:28:84:22:75:3d:
88:c0:83:bb:4d:19:ed:ad:08:d3:18:e0:ce:d5:5e:2c:7e:d3:
55:a2:c1:1b:cd:8c:9b:e6:68:c1:7d:af:78:e1:9b:8b:28:87:
06:ac:6c:6c:96:ad:9f:52:63:c1:e7:6d:22:f0:ef:87:62:ae:
2b:fd:97:85:30:ec:c0:9e:96:f0:1d:1a:59:e5:8e:8a:0d:4b:
a9:70:db:85:10:30:c0:c7:a8:45:b8:f1:fa:fb:13:bb:13:d7:
c1:03:9e:df:a4:34:4e:71:12:ca:94:b3:d1:d6:8c:2c:a2:18:
0e:49:39:41:7a:f6:cd:b5:df:c7:48:da:d1:c2:f7:e7:10:8b:
04:e2:f7:f7:82:bb:45:2c:9f:ed:c0:19:f9:95:58:08:db:cf:
e9:ba:a3:70:ed:df:cd:84:20:f1:a6:e1:21:7d:60:b7:6c:c7:
11:08:f6:31:4c:8e:f6:03:63:98:52:dc:36:f5:68:2f:c2:d6:
55:c7:97:e1:24:4b:30:b6:cb:0e:2e:b3:e6:c7:0e:6a:21:34:
90:a8:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:21:39 2025 by rpki-client