Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac9fef15-491c-30d9-a1ef-997f5d47a0a7.roa
File: ac9fef15-491c-30d9-a1ef-997f5d47a0a7.roa (raw, json)
Hash identifier: A5xKXbTirT/MvhF7CijCOnK/RQajstBI1pCUwzTk8BE=
Subject key identifier: A5:F6:7E:71:B8:56:9A:71:D1:D6:2A:02:3D:ED:B1:1F:43:A7:A3:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848940516A7AB7C3789DB0F05B0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac9fef15-491c-30d9-a1ef-997f5d47a0a7.roa
Signing time: Fri 17 Jan 2025 20:36:47 +0000
ROA not before: Fri 17 Jan 2025 20:36:47 +0000
ROA not after: Thu 17 Apr 2025 19:36:47 +0000
asID: 15169
IP address blocks: 34.2.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:05:16:a7:ab:7c:37:89:db:0f:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 17 20:36:47 2025 GMT
Not After : Apr 17 19:36:47 2025 GMT
Subject: CN=6ab3d389-12e5-4329-9d71-9dab706ad349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:c7:58:c6:0a:5a:e5:33:0e:b0:6f:93:60:
2d:40:1a:cd:e8:74:b4:42:e0:f2:ef:ac:3d:6b:15:
04:75:f3:69:e5:85:78:00:bd:83:5f:ea:60:94:23:
66:52:19:6b:85:03:84:67:a1:4b:a0:8b:ec:d0:85:
09:f3:1c:43:2c:4a:80:09:76:f1:f3:5a:12:c7:0f:
e5:b6:ad:fb:9d:1b:e0:12:87:88:34:cc:c5:d0:03:
07:ab:d0:32:f4:cd:a1:74:81:4b:4c:a3:66:27:0a:
87:ab:b3:92:69:3c:9d:de:0b:14:25:0c:be:91:73:
6d:dd:b5:b3:03:bf:f1:11:f7:5d:84:4e:14:3d:5d:
f9:ca:d0:b3:0d:41:3b:cd:5d:e5:b2:18:83:d5:28:
ff:c1:dd:fe:b5:6c:af:91:01:1d:e8:10:53:04:1f:
8a:d1:86:76:35:a0:02:ae:07:d1:eb:3c:02:93:e3:
c4:68:93:84:5e:c6:4a:a5:0f:a6:df:39:1d:14:1b:
5c:37:78:17:d8:f3:bf:27:f5:92:c6:1d:f0:ea:25:
93:6d:9e:a0:6f:5c:0c:fd:25:a4:81:6d:76:ea:bf:
79:de:6b:7c:f9:3b:c8:b7:93:b7:46:a1:ac:04:1e:
ab:a0:da:30:f1:04:3e:59:00:94:38:2c:9e:7a:af:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:7E:71:B8:56:9A:71:D1:D6:2A:02:3D:ED:B1:1F:43:A7:A3:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac9fef15-491c-30d9-a1ef-997f5d47a0a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:51:c2:0c:f3:2a:88:18:3c:09:e9:fc:a1:f8:13:5d:bd:cf:
d8:89:ce:38:5e:d3:cd:a2:cb:58:1b:41:a8:17:91:83:da:08:
7b:cd:56:15:8e:bd:b0:8d:fd:f2:90:c4:84:10:db:81:da:50:
1f:4c:f2:c7:70:86:e1:b7:63:59:8b:7d:0d:90:a3:3b:aa:0d:
69:ee:b3:36:51:82:a6:a1:ea:fb:e4:32:48:be:9b:4b:86:95:
db:3e:9e:ab:25:7f:23:e6:6d:1f:af:d8:5f:7f:24:54:ac:48:
80:ac:09:55:db:6f:4a:9a:32:48:31:67:d0:07:3c:86:eb:b7:
bb:85:8b:a2:77:ef:7b:45:69:81:65:35:f1:fe:54:32:b6:5f:
7d:b1:10:17:6a:4b:77:b5:86:e9:a8:24:c4:6d:65:6a:e0:2f:
97:f9:57:d9:06:48:2e:b3:d1:bc:f8:e9:ed:05:95:3c:b0:90:
09:be:a7:a3:b1:d4:80:19:56:4f:32:a2:1c:2a:e2:73:be:58:
a1:90:de:b3:81:fd:f5:7f:57:30:24:65:19:f0:02:62:f7:c1:
0f:e0:ba:7b:54:67:9e:74:f2:b9:42:ff:0e:8c:1f:67:2f:5c:
90:45:ec:17:63:ab:91:bc:eb:0d:21:36:04:df:49:2d:65:65:
ff:60:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:40:39 2025 by rpki-client