Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b562751f-91e5-34e5-88cf-25f0c54229a4.roa
File: b562751f-91e5-34e5-88cf-25f0c54229a4.roa (raw, json)
Hash identifier: SUOWh7w+ON/piepU5nBb+DIDkuwnxYnzRzlH4uzqtLo=
Subject key identifier: 92:0F:23:14:30:4B:CE:CD:82:10:E8:67:63:D3:68:8B:19:B9:CB:9A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C58173A4CC9C1754B1B40BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b562751f-91e5-34e5-88cf-25f0c54229a4.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 34.0.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:73:a4:cc:9c:17:54:b1:b4:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=31a67ac3-5c06-4664-a0e6-4be76aafb347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:3f:38:dc:06:67:60:33:33:f3:e0:41:79:
8a:e0:85:8e:40:37:e2:49:bf:50:9b:61:60:3b:f6:
77:b0:7f:f7:98:ec:51:77:7e:23:13:86:b1:05:4b:
1d:3d:58:f2:6f:da:29:c9:1b:2c:e1:04:32:8c:6f:
56:49:a4:5c:4e:c2:65:3e:3e:51:12:55:40:ef:f6:
79:ba:a4:88:1c:47:ce:4b:0c:b8:8d:41:f4:67:d8:
7b:37:45:9f:a4:1e:71:e1:15:69:70:28:00:e1:39:
8e:41:e9:40:d6:60:f4:70:84:3b:b3:9b:04:ff:c6:
6b:4e:4a:ec:6c:47:78:3a:54:37:23:0f:45:b7:52:
7d:04:71:f0:f9:74:2a:ef:ed:3c:30:51:80:bd:72:
ff:09:89:f9:76:c1:60:68:f9:7d:7d:3a:e8:54:59:
09:03:64:3a:22:a8:6f:b0:36:79:4f:02:5b:73:44:
4e:69:7e:9d:c4:c2:84:f9:f0:bf:c1:51:6a:ee:cc:
74:72:77:ba:73:9f:d9:34:4a:63:b5:1b:74:1b:b3:
cd:2a:62:72:06:f0:00:81:73:b0:45:c7:29:fa:26:
02:6c:47:7c:ec:2f:60:73:00:2a:41:b5:25:8e:32:
ec:b6:98:f2:9e:48:fe:f3:8f:ed:fc:e2:1f:80:af:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:23:14:30:4B:CE:CD:82:10:E8:67:63:D3:68:8B:19:B9:CB:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b562751f-91e5-34e5-88cf-25f0c54229a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:a6:94:61:ad:50:e1:5e:b0:99:59:2d:76:04:bd:86:1f:af:
d2:2e:82:47:0a:00:a3:d4:46:22:40:c1:cc:53:3f:a0:23:90:
cb:87:c9:2c:23:9c:33:5f:47:47:2d:87:de:1d:29:3e:f3:f6:
7d:0b:9f:9c:50:0c:cf:1b:6f:58:56:6f:73:81:e0:a6:d6:70:
28:05:7b:61:16:43:50:4c:63:34:b8:d5:6a:10:a8:42:9a:c7:
24:41:f4:28:ec:f8:79:bb:0f:1d:a7:b3:48:2a:08:bb:de:8f:
2d:84:cc:c6:4a:a3:0c:d8:37:b3:39:58:e7:2f:bf:11:92:e8:
1f:c6:4f:06:7d:50:58:f3:db:52:0d:d7:b2:6c:66:1b:2b:f0:
2f:cc:08:bf:f1:f8:1a:f7:ec:80:61:8d:73:da:3d:58:35:86:
65:fe:31:e3:b6:a0:91:2c:ab:33:3a:bb:f3:ce:86:08:c5:8b:
e9:8f:59:4a:cc:84:e3:82:e8:3e:fd:dc:64:f9:26:e7:c7:d9:
1b:c9:bd:69:aa:93:6a:c2:e8:17:1e:fd:3e:b8:81:c5:01:b4:
62:84:52:91:99:a5:c6:46:76:0d:cf:fb:2a:23:80:3d:e0:99:
72:bc:b2:d8:40:b5:66:39:51:dd:5d:72:8e:98:7f:9a:ae:45:
f4:61:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:53 2025 by rpki-client