Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa
File: ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa (raw, json)
Hash identifier: oK/1hTMYTK8MG0bHDgcnq2V8bex+i+SWu3jpPHSs+kI=
Subject key identifier: F5:EC:C8:5C:5E:A7:08:A6:2B:95:E7:A6:54:6B:6B:15:0B:36:D0:33
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C067A5F1713ECDFBEDFC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.169.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:06:7a:5f:17:13:ec:df:be:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=49084f9d-7577-4b8e-b82f-bd349e51aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:47:65:bf:b2:32:be:32:22:e7:f0:84:e4:
6b:df:cc:32:97:16:25:f3:45:21:5b:4e:70:f3:df:
45:c3:b4:74:90:5a:21:44:42:37:ef:8a:04:18:b0:
47:88:e3:ef:11:52:ae:3f:04:e1:71:48:f4:b3:0b:
bb:28:b5:65:e7:33:ce:6a:2f:e2:fb:0d:dd:71:aa:
d1:f9:e8:58:8b:73:d9:e7:50:e5:0b:df:12:a6:57:
4a:8c:fb:2a:f8:b9:95:cd:42:1b:40:cd:88:f6:1f:
ee:99:09:a8:37:da:ea:60:23:cc:9f:a9:5b:5c:1d:
c4:98:f8:1e:22:00:89:fd:b5:a1:e9:66:86:96:65:
d6:07:52:68:3a:82:7a:a5:c0:a0:83:80:ea:af:4b:
db:32:74:bd:a9:73:b6:8b:49:fb:01:0d:ed:9b:ea:
a2:8d:2d:c0:08:d1:de:e1:a3:09:a6:02:8b:69:61:
01:f4:c5:45:e3:61:bb:55:9a:ae:9f:32:fc:fc:a7:
88:91:46:e2:a1:df:12:2d:fb:a3:2c:17:30:0c:da:
a9:cc:b2:ec:cb:b0:ab:c9:f4:db:5e:e6:8b:a6:aa:
67:90:8a:af:a6:ba:c6:e0:e9:af:1b:12:d3:80:da:
86:23:4e:98:f3:2f:5f:05:48:9b:4e:a2:a8:b3:03:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:C8:5C:5E:A7:08:A6:2B:95:E7:A6:54:6B:6B:15:0B:36:D0:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad47fd29-30e3-3c9b-bcaa-2a4e6b52e6f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.169.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:15:5b:b5:f0:7a:7b:48:86:dd:fe:6d:c1:f8:01:db:54:2a:
4e:7d:f0:3e:16:50:25:0c:af:8c:32:4d:89:a8:62:1a:16:3c:
72:ef:a8:5f:f1:2e:14:ef:d0:a1:bf:71:2d:2f:d2:2f:dc:44:
79:7e:f3:99:f4:62:35:e7:46:5d:8a:72:50:c6:c5:25:a2:5d:
64:49:0b:f0:7c:fb:06:39:ff:b9:9e:85:6e:26:41:59:b2:0f:
ac:e1:67:d0:04:bf:70:e1:75:db:db:58:a1:93:0a:66:e4:30:
30:c8:f3:e0:78:d5:5e:c7:12:64:82:01:28:0d:d5:f8:50:d0:
47:da:b9:cd:13:64:5e:1e:3f:6a:1f:2d:90:10:67:2f:3f:82:
fb:1f:df:11:3b:41:4f:2d:9a:8d:88:b5:b2:3e:c6:13:43:e9:
94:fb:93:66:d0:22:52:16:77:cc:8a:ca:97:f8:4c:34:c4:db:
77:3a:98:62:d4:f7:36:8a:01:06:ec:f4:86:c0:7e:b6:b5:7f:
f9:81:f3:5d:d9:85:d4:82:4b:d1:7e:c7:21:62:bd:c3:57:9c:
d2:cc:3a:63:bf:2e:94:8e:b6:13:2f:81:36:03:77:89:ea:9b:
7a:c2:47:a0:59:7c:0e:56:ba:07:e2:28:d9:7a:54:50:65:3d:
a0:83:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:07 2025 by rpki-client