Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a79b2835-233d-3039-a5e0-f9e0554bc0e8.roa
File: a79b2835-233d-3039-a5e0-f9e0554bc0e8.roa (raw, json)
Hash identifier: f6QtdOEU6yUEaffQPIqm4jczUAt/pUoXJ5DIufrKceM=
Subject key identifier: EE:F6:2D:8B:A2:3F:5A:DE:2B:3B:1F:1E:00:08:30:93:C0:D2:32:D8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285849071BF1FADC6ACDEA2CB66AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a79b2835-233d-3039-a5e0-f9e0554bc0e8.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 396982
IP address blocks: 34.62.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f1:fa:dc:6a:cd:ea:2c:b6:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=b4614037-e338-41b7-9f65-2450f134ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:e9:35:e2:02:a0:54:83:20:e7:ef:fd:fd:
26:cf:f9:33:ed:86:94:be:1b:25:23:33:ac:d5:a9:
04:9a:9a:ce:2c:07:be:f3:e7:04:1b:f0:bb:e7:b0:
1c:86:82:d6:ca:85:b5:69:6e:7f:1f:81:53:1e:3a:
3b:0f:7d:23:7c:c6:cc:8e:1e:34:54:2c:50:cc:c0:
5f:9f:5e:94:13:b2:3e:e2:7c:92:d7:a8:fd:20:b6:
2d:9d:48:20:cc:ac:6e:8d:03:2d:6f:21:3a:60:82:
a7:37:d5:05:70:4e:89:67:28:44:8c:23:01:89:7e:
7a:6d:78:3e:a7:92:cc:d0:61:5e:7d:6f:31:1a:e4:
ef:07:5e:29:ad:08:0f:4a:ac:ff:ad:fa:e9:59:67:
5d:00:a9:38:6d:ef:5e:f6:12:06:71:b8:0f:77:5a:
3a:c2:f0:ee:1a:f5:b8:62:04:3d:fc:cf:5a:72:7b:
3e:30:44:63:2e:87:85:dd:8e:23:9b:11:19:bf:14:
c4:63:03:34:aa:a2:23:17:93:7a:8f:c9:57:82:0a:
84:1b:fe:0f:16:6b:05:a2:bf:73:b0:61:9a:55:d9:
30:bb:0a:8c:cf:53:7a:0a:a8:80:62:ee:5d:14:60:
fc:b7:a4:d9:cc:eb:96:c9:b8:c4:da:1a:e0:f5:ae:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:2D:8B:A2:3F:5A:DE:2B:3B:1F:1E:00:08:30:93:C0:D2:32:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a79b2835-233d-3039-a5e0-f9e0554bc0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.62.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:73:8a:9c:39:8d:a4:0d:b1:e4:c6:ba:5b:43:c6:4d:89:b4:
be:e5:47:da:9f:ac:91:89:e2:4e:cd:2a:dd:00:74:1e:93:0e:
4e:07:ca:5a:cf:9f:7a:e5:98:8d:74:8c:9a:34:a2:9c:04:20:
f0:96:56:9c:7f:20:2b:fb:77:58:cb:59:3c:f9:2f:39:a2:41:
a1:dc:cb:aa:65:fa:f2:0b:83:e0:0c:bb:bd:aa:3a:af:03:b1:
c5:a7:14:bc:65:8c:7c:06:19:83:e9:11:66:ae:24:e7:b8:56:
9d:06:dc:01:4f:da:35:dd:0d:fd:69:7f:b9:a6:b5:b4:c5:21:
ac:b5:c3:dd:f8:6f:47:83:a9:ef:e3:69:f5:47:2a:ae:02:97:
49:40:9e:5e:cb:0f:b4:5d:47:a8:1a:a5:dc:5c:6f:d8:05:e5:
f0:ce:8d:e0:54:77:04:47:8f:d9:c6:42:60:b2:53:8a:ef:6d:
0b:1b:42:88:ae:15:92:5c:b4:6f:c3:22:94:a4:ab:f4:5a:44:
30:14:fa:63:07:70:96:2f:8c:fc:d2:19:07:09:75:10:6d:4a:
76:67:81:ee:3c:df:20:7a:69:57:2c:05:62:5a:c3:84:ae:ac:
b5:7d:d9:83:8a:2c:c8:c3:6d:46:82:ec:2a:fa:eb:b9:66:95:
31:37:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:37 2025 by rpki-client