Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa
File: aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa (raw, json)
Hash identifier: SWgEOMaIQSkPDegrJAmzkWyLhkFD9EJjmSnu/wkKIH4=
Subject key identifier: 58:DB:DF:1F:29:3B:6C:22:8E:91:F3:C0:D5:07:71:EF:FE:3E:45:DE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848CDE11026E097AAB88FA96BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 34.154.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:10:26:e0:97:aa:b8:8f:a9:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=2e8a335a-de55-454b-9cf5-07af6684d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:27:3b:8f:37:9a:ea:77:89:4f:47:45:77:
7f:76:2c:95:50:42:a3:61:69:89:b2:f0:01:8b:4f:
05:8b:77:61:2e:08:f7:11:08:f9:02:0a:78:78:c2:
65:97:b7:f1:da:ea:bc:12:7a:4f:82:ec:55:39:ac:
f0:c2:40:f4:b0:cd:76:ab:6c:17:b8:ca:72:d1:01:
66:91:46:01:9d:ad:4f:5a:8c:5a:f6:3d:d3:0c:e0:
3e:3a:67:f8:a3:72:9a:ab:4f:89:9e:26:cd:bb:a3:
8d:7c:b6:8d:0e:e1:38:6e:a7:9c:2f:80:64:4e:a9:
3d:07:8b:4e:36:97:57:0f:17:e8:30:a7:6f:b9:df:
3d:8f:64:6a:f7:fb:1f:b0:cf:95:fd:7f:fc:f1:97:
30:20:c4:35:05:41:3c:b4:f3:38:1e:3d:9b:64:52:
10:02:78:86:37:06:1c:44:58:a5:ef:26:c9:36:24:
18:44:df:ee:29:cc:47:cc:19:b7:98:7f:7b:a5:9c:
d4:59:d1:92:d6:62:a8:c2:a0:e6:1e:8d:c5:e6:c3:
54:b2:6e:3d:2e:7f:ad:04:23:e2:ce:f7:0f:94:24:
17:e6:79:ac:e4:9d:7f:a7:83:19:46:ae:90:3a:05:
75:d7:2c:f3:29:54:1d:48:36:78:59:a5:f2:d0:1f:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:DF:1F:29:3B:6C:22:8E:91:F3:C0:D5:07:71:EF:FE:3E:45:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:48:16:ef:5c:e1:01:e0:4a:be:ff:62:10:86:45:bb:bd:45:
bf:f5:41:92:d7:e6:b4:64:32:04:4b:93:79:c8:99:b6:2b:34:
71:c3:6a:47:1e:b4:8b:73:81:13:c8:e2:7a:0f:4c:9a:16:c0:
dc:c4:a6:6f:4f:52:81:80:df:f4:d5:6b:f9:53:f5:8a:db:52:
16:6e:04:33:aa:20:45:50:00:76:2c:68:e5:aa:2e:42:ca:8c:
09:86:5e:e9:37:e8:36:d7:3b:d6:e4:b8:b6:3d:7a:92:88:64:
1d:96:39:ae:46:df:a7:77:b0:58:5b:05:43:47:f6:a9:ba:79:
9b:d5:e8:a7:0d:76:a5:bf:51:21:a6:98:60:5c:05:63:d3:7f:
c1:d7:46:31:85:0d:2f:9c:ac:25:58:79:09:88:31:3f:8e:16:
76:b5:ff:b2:b6:29:fa:c7:2f:a4:1d:4f:5b:5f:ea:1f:5d:0d:
7b:25:9f:a6:fd:f2:df:89:a3:79:08:34:cb:4e:b9:2a:d5:2e:
67:de:8f:7c:13:40:88:ec:e0:1f:0d:b6:34:5f:9d:ad:13:70:
56:bd:c6:c5:69:86:63:77:67:c5:46:e9:36:83:cb:72:dd:c0:
2c:2c:52:aa:15:4a:ba:40:c4:4f:f5:d3:e4:64:02:6b:f3:ac:
c6:71:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:13 2025 by rpki-client