Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aba94171-90e3-35e4-8d03-2313d9e330da.roa
File: aba94171-90e3-35e4-8d03-2313d9e330da.roa (raw, json)
Hash identifier: TMzXHL/ZC6j+GBAtk78EcQL6M7yz22x4jPmAMVSoPIE=
Subject key identifier: 8B:EA:FA:FF:AA:35:6A:8F:3B:12:5B:C1:BB:A5:70:24:F1:96:08:82
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF20D461928DD58116D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aba94171-90e3-35e4-8d03-2313d9e330da.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.175.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f2:0d:46:19:28:dd:58:11:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=38b6df6a-f6ef-4957-ae20-d84abcfee265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:84:3d:bf:e2:15:b7:c1:96:c6:7f:35:d3:
b0:41:eb:83:09:55:a4:d3:7b:26:18:bf:16:0f:76:
9c:0a:4d:0f:ff:30:bd:cf:a5:5a:f3:0b:30:1c:2e:
c4:d0:81:17:0a:65:61:6c:b2:c2:73:64:6d:8c:1b:
58:f6:c4:99:fb:10:fa:14:20:62:d2:c8:f9:77:05:
37:34:d4:a0:59:28:ff:f8:86:1b:47:18:f7:75:9a:
e0:0c:8d:2b:cd:98:51:24:d8:8c:e1:24:c6:23:68:
b6:66:2c:d2:ec:90:94:55:61:fa:ed:f0:68:fb:f0:
10:8a:29:6a:91:29:7c:ab:3f:03:63:46:cc:f2:a7:
cc:62:7a:ff:0f:30:24:cd:83:16:d8:6a:44:ca:34:
fb:f1:0b:58:ad:1c:09:eb:5d:01:9e:db:0a:25:22:
2b:14:a2:26:2c:9d:1b:da:6b:bc:37:07:0e:95:1b:
2e:32:b8:c5:2d:d2:2f:17:80:99:ec:ff:1d:cd:ad:
6e:1d:36:a1:2a:1c:14:7a:f4:51:01:e8:a8:5a:d6:
d7:c0:7b:95:58:33:05:88:9a:e8:c3:7d:41:41:76:
37:d1:84:cb:68:3a:d2:af:28:8d:99:0c:ad:26:99:
68:45:09:2e:ce:ea:30:e8:1e:6f:7a:aa:24:00:6f:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EA:FA:FF:AA:35:6A:8F:3B:12:5B:C1:BB:A5:70:24:F1:96:08:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aba94171-90e3-35e4-8d03-2313d9e330da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.175.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:98:52:ab:7f:83:9c:39:bd:c5:f5:15:17:a6:56:c3:22:da:
9f:2b:5d:b9:78:0b:59:d8:03:66:fd:d7:c4:3a:0a:61:6c:f5:
27:39:99:fc:b8:f6:33:5d:71:23:70:79:3a:57:14:fd:59:54:
2b:47:cb:3d:9d:f4:0b:5e:ad:79:ef:c6:5e:ec:31:5b:cd:a0:
49:d1:37:bb:38:bf:08:93:06:94:38:2c:76:e0:f4:a7:82:6c:
2e:7e:00:7c:ca:6e:17:b6:70:a7:07:bc:01:85:0f:d8:8b:cc:
3b:7f:90:11:4d:23:08:43:3f:ea:10:f4:4e:95:a8:d6:61:35:
be:2d:17:ab:73:e3:5f:94:e2:24:23:3e:4a:cb:18:e1:72:13:
c7:e1:2f:ed:c3:12:d9:71:ab:cb:17:53:c3:c5:f8:53:07:c2:
be:64:3d:f3:b0:5e:65:f7:de:46:61:71:96:97:f4:0b:a0:af:
23:48:49:f8:99:c8:d2:fc:08:0f:8e:46:7f:f1:f8:4b:52:77:
6f:ee:ba:63:52:4c:3e:3f:33:2f:14:51:5c:76:66:31:c8:95:
a6:d6:7e:08:9a:06:f0:7e:bf:44:f1:f6:18:9a:fc:4e:92:30:
d4:be:e3:f9:e7:45:c7:16:38:90:f9:7a:43:83:89:31:d3:15:
1d:5c:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:08 2025 by rpki-client