Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbfcf571-e68d-3907-857c-639837445380.roa
File: bbfcf571-e68d-3907-857c-639837445380.roa (raw, json)
Hash identifier: h9/XP9xW68EIOQra10l0x3h7+GSvewmCriqPCth1+gU=
Subject key identifier: 17:41:6E:02:43:09:C0:F7:95:37:0C:E7:6C:43:40:74:5F:27:E9:1B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BEFA8AF040175259F3D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbfcf571-e68d-3907-857c-639837445380.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.73.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ef:a8:af:04:01:75:25:9f:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=acf3b616-6534-45a5-a51c-d281b8c8d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:d1:a5:a1:c3:51:88:56:3d:3d:72:56:e9:
14:67:96:d1:45:c8:a2:5f:dc:89:58:05:b9:38:4b:
41:cc:80:46:e8:c4:9f:7b:ef:fe:32:ef:93:63:24:
64:b3:64:f9:b1:67:c0:cd:36:88:b2:7d:fc:b3:ef:
ed:56:d6:e4:92:53:a1:a1:c0:0c:cb:3f:f5:35:81:
31:46:e6:80:d9:36:29:20:ef:44:c3:33:8a:61:02:
66:36:34:07:35:5e:0b:7f:8b:06:bc:ca:33:b4:ec:
e6:49:e4:1b:78:2c:77:1c:e9:d2:b0:4e:13:5e:30:
49:41:87:16:6b:79:b6:6e:31:08:49:4f:a9:5d:df:
e8:07:6a:d5:2e:52:83:96:08:30:bc:eb:5a:ce:3b:
08:5d:f3:ed:06:65:83:ab:cb:b6:4f:11:9f:de:3d:
af:fd:de:42:3f:59:0b:5c:c7:9e:2f:fa:8c:a1:58:
01:aa:85:d0:a7:18:89:2e:23:f6:5e:d2:e0:d4:41:
35:41:d4:a7:b3:fd:26:1b:9d:0d:c9:79:de:13:18:
cd:02:b7:6f:9e:93:53:93:7c:e7:25:5c:aa:16:da:
87:eb:a6:f3:c1:d3:87:d7:81:5c:56:c9:ec:53:d1:
95:7c:f6:a6:77:9d:fb:7d:ea:3f:9d:9a:ed:d4:ca:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:6E:02:43:09:C0:F7:95:37:0C:E7:6C:43:40:74:5F:27:E9:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbfcf571-e68d-3907-857c-639837445380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.73.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:28:8b:00:87:a1:18:81:f3:f6:d8:34:d9:24:c5:7b:ef:37:
db:35:31:d1:2c:d2:50:46:39:42:d9:ef:2a:9d:d9:00:1e:02:
8e:a4:4d:5b:97:bf:be:73:be:ee:95:05:2e:88:02:c9:73:18:
27:e4:18:9a:bb:1b:44:47:2f:05:5a:0d:14:7f:df:90:e3:29:
ac:df:11:a0:2f:bf:c2:f6:b4:5f:a7:ea:2a:16:7a:34:1d:a1:
69:d9:ec:f1:9b:6b:ad:58:f9:d7:ca:61:71:9f:6a:73:01:be:
04:d7:f8:12:b9:10:bd:bd:0c:e8:af:1b:33:1e:34:88:09:97:
df:21:92:d6:ec:de:c4:5f:9a:42:f3:fe:c6:14:88:56:ce:61:
06:b8:24:6d:e8:55:f0:e1:b8:48:64:ff:d5:ff:21:dc:74:1a:
0d:f8:78:55:62:40:02:f3:9e:4a:f4:9d:83:25:5f:97:fa:4a:
ac:50:ff:14:73:ba:66:30:2b:e6:57:68:7c:24:e9:e6:d2:9c:
e4:fe:f7:51:6e:35:84:28:f9:12:21:76:62:f9:c0:8b:cd:62:
a6:e0:eb:1b:0d:30:18:16:5e:fd:54:dd:24:58:ea:cb:db:aa:
72:ee:64:48:42:ca:6e:f6:5a:33:01:c2:a0:e7:9e:15:ad:7f:
b7:a2:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:11:22 2025 by rpki-client