Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac1dcdbd-fba4-3579-aa0f-1fcb60de00cf.roa
File: ac1dcdbd-fba4-3579-aa0f-1fcb60de00cf.roa (raw, json)
Hash identifier: uEceGuCGqRyoCTcDXJGrMfw6LOAQZaTFpQuGxERoEWQ=
Subject key identifier: 3E:D9:8E:49:CD:66:C6:A6:93:21:31:00:44:8C:A8:4A:46:F0:8B:03
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BAD47F99A600BFD96D880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac1dcdbd-fba4-3579-aa0f-1fcb60de00cf.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.147.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ad:47:f9:9a:60:0b:fd:96:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=27d852ca-17cf-4ae8-9de9-ebb522a189d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:7e:ee:01:11:32:c5:af:0a:9b:75:7f:dc:
d5:b9:62:90:67:1e:cf:12:af:65:76:9d:8b:08:bd:
9c:56:69:b0:c1:81:67:c3:66:3d:7f:de:5e:fd:83:
da:b7:dc:5f:06:1f:f9:8a:2a:25:b7:46:80:17:19:
81:50:1f:c3:64:17:0c:6a:b3:de:cd:e2:80:f6:fa:
fd:99:b3:86:da:b6:e4:c9:36:98:02:48:51:7d:ff:
63:4c:f2:69:07:ee:f7:e4:f4:81:6c:08:16:af:51:
cc:38:fc:96:e4:8a:ee:94:1d:78:4f:c4:bf:4a:61:
c9:06:2b:29:e7:7f:fb:26:b0:b3:93:31:53:f7:67:
2c:14:76:9d:9a:db:07:6d:df:a4:37:87:7b:04:38:
ab:cb:9f:2b:5b:1e:e5:0b:58:43:c8:89:e7:5c:c3:
a6:cf:55:71:76:65:64:98:5c:99:02:4a:c7:42:a6:
5e:38:11:63:ba:69:24:65:b6:56:eb:fe:1a:09:5d:
56:a8:da:43:7a:25:eb:03:b5:34:0f:f2:6d:48:af:
51:1c:f3:e9:a9:4a:df:a0:74:1c:72:e3:a7:6a:73:
56:dc:a1:44:97:fd:02:1c:a2:b9:00:d5:d6:18:8d:
b3:36:e2:17:d2:fd:31:2e:15:44:e8:f3:a3:58:41:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:8E:49:CD:66:C6:A6:93:21:31:00:44:8C:A8:4A:46:F0:8B:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac1dcdbd-fba4-3579-aa0f-1fcb60de00cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:84:92:c8:a7:ff:fb:1b:de:2d:6e:d4:4a:30:7f:eb:82:0f:
36:75:68:a9:0a:7c:d9:8c:78:d8:83:7c:eb:3f:45:72:91:1e:
ef:44:1e:1d:ef:4a:d2:bb:67:0c:37:6c:15:6d:8d:0b:78:93:
dc:4c:9e:9a:e6:c9:b5:be:d5:a1:71:91:63:12:1a:54:88:0a:
ee:1c:76:89:e9:2a:bf:d1:f0:27:9c:8f:30:4b:43:6f:06:e5:
57:bf:b9:75:7d:ac:21:47:80:d3:80:ef:d2:b5:bd:5d:a5:82:
60:48:f1:d8:d4:94:3b:48:59:f2:89:62:1c:ba:f4:a0:8e:c8:
05:5e:da:5f:19:5a:b8:e3:bb:f4:2f:14:fa:5a:ad:16:a0:fa:
86:20:23:08:4a:a5:e9:31:ab:6c:b9:45:b6:3a:21:d3:2d:cf:
2b:31:d5:b5:44:1c:89:b9:dc:ad:4a:5b:b1:1f:d0:b5:e3:c2:
dd:d4:85:9c:6a:81:bc:80:c8:5c:73:2b:ac:86:1c:8f:08:fe:
cb:46:40:f6:df:d9:27:e0:2d:16:23:31:f6:2d:73:32:a7:ab:
b3:1e:9f:1a:9e:9f:d2:f4:23:7b:0e:d9:7f:fb:05:09:29:52:
96:d0:db:32:60:d7:24:eb:b7:14:3c:d6:7c:b9:6b:eb:83:e6:
61:bf:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:09 2025 by rpki-client