Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa
File: ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa (raw, json)
Hash identifier: Sc1Nk4Hy9GEoxLXe63soAjJwwptSnT03Nxxt6DDbn1Q=
Subject key identifier: 0F:7A:51:FA:81:F1:F6:7D:6E:D7:2C:35:6C:24:36:B7:2F:D7:AC:C5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF2B660717E0BBBB7E180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 19527
IP address blocks: 34.3.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f2:b6:60:71:7e:0b:bb:b7:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=d61a1331-7bc4-44c1-bee7-9b3596d98cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:fb:14:d3:cf:d8:a3:cf:04:5c:ab:92:5f:
d7:3a:94:a3:c7:02:96:59:fa:5f:31:3d:ee:25:4e:
a7:bb:96:e4:07:63:97:00:85:79:c9:b4:c7:e8:eb:
4f:60:cf:a6:6d:47:c9:bd:ef:4e:6c:64:e2:f3:5f:
52:66:5d:25:b6:aa:9d:bb:5b:57:14:c7:69:71:93:
c6:6a:6b:2f:13:5a:6f:4f:36:7a:ae:59:9d:53:f1:
f7:2e:4a:60:37:2e:13:6b:77:73:bf:3f:b4:c5:f0:
68:b9:6d:46:70:f0:36:02:f1:db:9b:b4:a6:48:0a:
52:05:3c:68:b4:f4:8b:a2:b6:62:08:cb:6b:9c:5a:
85:41:7e:d5:c4:c8:c9:45:19:13:be:da:ca:0a:c1:
18:75:fd:37:53:40:0e:69:a4:6f:22:60:5b:fd:fb:
94:28:b3:39:35:bc:52:78:3f:11:8a:83:7d:65:3e:
2c:b7:cb:80:5d:34:59:5b:5c:72:81:6a:66:55:27:
13:bc:fa:e0:9c:f4:e7:42:e2:df:55:22:e6:c6:8c:
c3:5e:81:32:ad:ba:d4:3c:ae:2a:fc:79:e2:cd:58:
0f:c5:ee:7c:96:ec:80:f9:c9:fb:77:f2:bc:ec:70:
4d:86:fe:24:8f:6b:1b:97:11:97:f0:1a:82:b0:49:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7A:51:FA:81:F1:F6:7D:6E:D7:2C:35:6C:24:36:B7:2F:D7:AC:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba2a1a3e-bb96-348d-a833-d76ffd3d8264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:18:11:81:ad:d7:f7:b4:69:8a:b8:a6:c8:d8:3d:50:15:95:
ce:d7:8b:91:2f:74:eb:2a:cb:10:0d:0e:9b:3e:29:0b:cf:73:
64:74:8b:11:c3:f3:40:cd:ea:d5:30:38:61:14:73:81:05:33:
0c:a6:1a:42:73:86:5e:6b:1c:8f:fa:5a:b3:ae:12:fd:91:c7:
56:ed:9b:69:e1:7f:0e:c0:48:7b:aa:b0:ca:9a:ad:76:62:43:
3c:c4:61:ca:4c:2d:3c:a0:04:00:5c:63:14:28:ed:fb:f5:9d:
56:ff:0c:dc:07:d3:d6:25:a0:de:ee:91:98:ca:6c:86:41:d9:
25:72:f2:59:40:9d:1d:c9:c3:6f:0e:c7:23:c5:99:78:03:ba:
01:2e:ac:88:02:18:ee:6b:ea:43:91:57:be:fa:71:b6:2c:83:
02:a3:92:1f:25:d5:df:a0:bc:d5:8b:32:66:f2:d4:8c:1c:fa:
5e:4e:fb:d1:ec:ce:38:ff:96:87:d4:72:af:c2:e3:b4:d3:2e:
44:7d:7f:ad:3d:41:66:79:c4:12:52:cc:ce:c9:69:55:fb:b7:
4b:ef:b2:29:17:2f:e0:6e:aa:20:08:ec:00:ac:5f:84:26:57:
f3:b2:a4:c0:1a:18:a2:84:cd:88:42:e3:75:d8:93:83:20:46:
dd:6a:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:42 2025 by rpki-client