Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa
File: ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa (raw, json)
Hash identifier: g2EJIRtMv5vWW5FaTCwXv4XHKp58DiDAX/WSGqdtYt4=
Subject key identifier: 70:B8:87:78:B2:9B:D8:BC:43:12:F7:9D:AA:DC:D9:D5:0C:0D:6A:AC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584913AC3FC63B499B65747DCEC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.12.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3f:c6:3b:49:9b:65:74:7d:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=ead44cc9-5421-490d-8bb7-074ec524d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:f4:c2:5d:cf:4b:8d:2e:d6:c9:d8:5f:b4:
fa:ea:9f:48:76:46:ad:c9:a7:68:26:09:7d:45:0d:
00:94:c4:66:c9:f1:cb:a1:48:33:f4:08:0d:c7:70:
42:d9:34:be:f4:f9:f6:95:7a:32:43:4f:28:17:2d:
1f:8e:25:1e:ae:c0:ca:26:3e:81:04:65:93:2a:21:
a5:6e:c4:8c:2a:c5:ee:6f:6e:ea:d9:14:cd:4d:58:
fe:bd:3b:ef:9e:cb:b5:cf:b6:64:e8:d7:0d:65:9d:
69:48:4f:1c:73:57:31:5f:06:08:51:d2:e7:d5:27:
1e:75:79:bc:fd:7c:3c:83:a4:d2:19:d2:5b:ad:7a:
c6:da:5c:1e:aa:a8:a5:85:12:1f:d5:02:e4:11:73:
79:35:3d:c9:ee:22:52:cb:7a:52:ad:c4:5d:7f:70:
53:96:9a:08:fa:4d:41:51:b3:6a:e6:63:67:ed:4c:
01:fe:6c:36:6e:3c:bf:cf:c8:06:5b:37:79:b7:1b:
b1:61:35:38:7b:34:21:5b:85:83:c1:f1:d2:b1:d0:
60:e4:a7:a3:26:33:7e:51:0b:de:2f:63:8f:8b:3d:
85:c5:43:91:92:1a:31:4c:85:b6:af:e7:40:41:c1:
eb:5a:40:13:e5:61:e0:f7:14:a4:60:2c:29:f2:d8:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:87:78:B2:9B:D8:BC:43:12:F7:9D:AA:DC:D9:D5:0C:0D:6A:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.12.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b8:f0:ec:d2:50:e6:51:40:cb:57:9b:74:92:b7:49:60:fe:
0a:9c:1c:09:fa:b4:83:10:33:1f:55:30:28:2d:fc:0f:30:bd:
7a:57:9a:7a:b3:0c:c2:e5:d7:1e:9f:25:e7:7c:9b:cb:f6:ee:
da:7b:b8:f5:ee:d1:b2:f3:38:94:ce:f7:1c:98:53:26:b1:79:
76:b6:a7:e3:dd:13:1c:d0:da:4a:b1:83:b2:18:d2:63:e0:26:
f2:84:5c:75:c7:a1:5e:ba:98:d8:f7:9c:03:45:4e:ff:c3:9b:
7c:bc:b3:c2:71:cf:ee:d8:0a:88:1c:62:00:00:44:a6:16:bb:
72:67:ad:f3:2f:04:18:51:b1:d7:42:61:f5:9b:77:5d:98:b8:
2a:89:11:ea:da:8b:9e:3f:88:f5:9d:f2:39:37:d0:4a:f9:4c:
84:3d:7f:28:f8:41:68:56:67:87:61:d7:45:78:0c:c7:f8:14:
2e:06:e6:b1:32:b0:a8:46:bb:d8:15:78:67:35:88:55:03:fe:
d1:43:6b:4b:e4:a0:a2:f0:6e:d7:a5:4f:1c:56:80:b7:e9:27:
e0:60:a9:8b:bc:62:ef:88:8f:95:42:d0:ae:45:66:13:cc:08:
f8:63:51:b9:93:f4:df:a2:36:b4:be:d8:2f:81:0c:2c:ac:3c:
fd:b5:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:39 2025 by rpki-client