Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa
File: 90bedec6-b981-3a61-bcac-10457f374814.roa (raw, json)
Hash identifier: IQq/bIa03EA4SlAm6rZRYIssbYPjTm7N72YNaomj1hU=
Subject key identifier: 20:C9:2B:79:CE:84:20:C3:DB:D4:09:AB:0B:ED:A6:9A:90:CB:10:B1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BFB01D487DFC7B6FC3B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.125.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:fb:01:d4:87:df:c7:b6:fc:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=898146bf-e183-46ce-ba41-ea0ce07d60dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:64:72:88:77:bf:a0:84:cb:8f:1f:c2:97:
00:0c:5d:ac:d6:3b:d6:81:d8:ff:07:64:3c:78:74:
df:86:10:19:5d:bd:a6:16:91:ad:1c:b5:52:f4:86:
7c:dd:b9:10:f1:18:84:f5:3e:8f:92:04:18:64:46:
7e:8d:fd:5d:5a:d6:76:36:67:44:45:e3:ae:88:ec:
81:eb:e6:d6:b5:73:fe:52:72:7b:47:2b:6a:b6:97:
0d:9f:bc:b4:9c:31:28:c1:b6:4a:5a:22:05:7e:ca:
41:4f:34:6f:8f:7b:7a:27:42:79:0c:fb:37:4f:96:
81:35:5a:a6:0e:5b:4d:18:c1:b9:22:79:d5:a8:64:
e9:40:91:82:7d:e6:af:4c:12:3c:ed:33:cb:a6:84:
a6:bc:db:4a:26:e0:95:6f:1a:3f:8e:3e:4c:cf:a3:
57:8e:5d:e3:eb:d5:d9:8d:19:b2:a7:33:e2:d3:4d:
55:cf:59:b2:85:ff:5d:13:dc:3a:ff:72:b6:c7:36:
77:9c:d0:e8:ba:93:fb:39:1b:aa:34:f7:37:25:19:
c9:98:07:bf:a3:70:51:5f:41:b2:42:25:fd:a2:2d:
68:13:b0:aa:b9:a2:18:ff:d2:44:57:95:02:e2:0d:
d8:04:16:13:be:62:4d:7c:ca:7a:3a:b1:a4:16:a1:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:2B:79:CE:84:20:C3:DB:D4:09:AB:0B:ED:A6:9A:90:CB:10:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90bedec6-b981-3a61-bcac-10457f374814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.125.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ba:bd:49:5a:53:dd:6c:70:2e:50:50:d8:56:3c:62:c9:1e:
94:c8:f5:d5:da:d4:36:38:c3:d9:30:ff:b2:c2:3b:54:8e:d0:
2c:52:11:ba:9b:27:1b:b1:b1:08:91:a8:44:0c:4c:df:29:73:
98:86:ad:b2:25:25:46:28:f3:50:a2:6d:83:df:e8:0d:99:10:
4f:b8:2c:35:6b:d7:b5:b0:27:5d:c8:fe:d1:54:ca:82:0c:85:
67:e2:ff:66:7d:7c:f3:7a:ce:de:78:06:c1:17:cf:4a:1a:f8:
98:43:f9:23:d8:20:7b:f5:9e:33:b3:20:69:70:33:c8:27:74:
22:1d:20:48:ee:5c:ba:25:59:b9:31:2e:6a:09:7f:59:73:38:
49:ff:e1:fa:5a:da:14:74:2d:0c:87:1c:4d:de:02:b2:05:e2:
63:f0:42:9c:77:b6:e7:4b:d9:7e:a4:1b:a8:2f:bc:38:54:66:
67:9c:79:8e:54:2f:e1:24:c4:74:70:b7:f4:ab:cd:2b:18:2a:
f9:fc:b7:77:b9:57:52:46:73:d7:17:c6:43:2b:b3:bd:e0:17:
a7:ed:91:d5:f4:d2:2e:27:b0:7a:a8:df:cb:9d:4a:e3:da:99:
30:91:bc:e9:3d:d1:b1:e5:22:db:f4:7a:72:cb:2a:70:2b:92:
a2:87:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:44 2025 by rpki-client