Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9258dfe9-e66b-3fc3-afcb-6fe2242ceac0.roa
File: 9258dfe9-e66b-3fc3-afcb-6fe2242ceac0.roa (raw, json)
Hash identifier: 2j6JJ8sPcd58AKUP/wG/i8FzClbaIfyRGLJVKWEtQz0=
Subject key identifier: 06:B0:80:D1:F1:49:91:AC:F0:78:15:67:D2:97:83:01:BC:34:4A:DF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BD20E228A178B6F08CD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9258dfe9-e66b-3fc3-afcb-6fe2242ceac0.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.123.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d2:0e:22:8a:17:8b:6f:08:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ac60cd33-84a1-4642-9c91-dece5a127ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:d7:0e:ea:23:a2:0c:21:51:aa:ed:17:22:
46:77:c6:25:11:91:a8:6b:bd:88:02:83:ea:5b:f7:
59:ea:f2:35:05:a5:0e:7c:69:43:66:e2:c0:4f:1b:
55:48:f5:84:9b:98:31:9b:b7:d7:da:07:d1:55:bd:
b7:92:04:e5:bd:f1:50:17:e9:a7:e6:25:15:0c:39:
cd:7d:90:22:25:8a:d2:64:ee:82:8f:58:1e:b8:7d:
f2:8d:54:50:b6:cf:f6:2c:47:44:4a:13:81:11:3a:
40:be:de:a8:9f:7d:95:7a:29:39:77:b5:98:3c:34:
e7:8c:90:13:5a:94:84:36:f8:d2:1a:7a:f4:52:12:
65:95:1e:8f:7b:27:5a:d1:8f:76:6b:f3:60:16:99:
a3:de:9a:8b:ab:84:6f:58:53:d1:b0:da:93:9f:c8:
97:cb:fc:92:4d:1e:ec:24:5c:a2:9d:0a:17:5d:4c:
57:f1:b1:92:a7:94:ac:b7:27:18:5d:6c:6d:bf:c5:
38:a9:a9:7b:c1:dc:44:45:5a:2c:b4:0c:15:af:44:
0a:09:79:68:fc:64:b9:69:19:0f:19:f4:9d:df:c5:
88:0a:80:ee:03:3f:4b:6a:15:44:2f:0f:92:26:12:
a8:a8:37:f3:9e:f2:b0:93:d1:3d:57:6e:66:cd:7f:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B0:80:D1:F1:49:91:AC:F0:78:15:67:D2:97:83:01:BC:34:4A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9258dfe9-e66b-3fc3-afcb-6fe2242ceac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:3c:0e:99:88:2b:31:4e:cc:04:0b:d5:57:6c:77:10:f1:07:
77:2a:84:49:0b:c9:29:25:03:7b:68:30:a5:d5:10:4d:f4:7b:
6c:2e:e7:b0:e7:a9:09:31:98:d6:d0:8b:20:99:42:69:da:57:
af:ad:96:d6:e1:2f:91:ef:ad:d1:23:66:64:a3:fd:ff:12:3e:
61:6f:db:c9:94:ae:8e:d7:5f:35:41:4d:3b:4f:16:30:61:ee:
8f:e8:07:13:df:21:ad:15:15:ab:f3:3a:8c:09:41:75:eb:92:
41:00:72:70:6a:7f:59:b6:18:5e:96:c6:f3:95:14:3a:0c:5a:
88:ce:8f:e4:38:c7:de:c3:a5:9e:56:7f:04:6d:74:35:14:f2:
f6:71:84:85:f4:a2:fc:61:6f:61:6b:0b:55:3d:45:74:7f:a8:
1a:9e:70:43:ff:83:34:15:2e:54:91:eb:9f:e1:9e:55:ed:ac:
29:4a:d6:89:73:70:7b:04:e9:63:b5:6b:78:ae:18:17:05:e4:
d5:79:c4:eb:0a:25:c2:a7:d5:78:e5:8e:45:f2:21:e9:6a:c3:
e2:37:94:39:ed:39:8f:62:a7:b7:02:4a:9d:8c:eb:2f:fe:6e:
f9:1f:18:ee:3a:69:b9:16:7c:20:50:5b:b7:96:b6:de:0a:23:
a7:3f:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:03 2025 by rpki-client