Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa
File: bf60108d-6422-313a-9cd9-777c85bff898.roa (raw, json)
Hash identifier: TsAQGBqdkJfXDAKiVAAtfSRSdkiC2phFt7pzDqfDCfQ=
Subject key identifier: F0:EC:6A:DB:2C:AA:B3:5A:CE:DC:75:85:54:0E:D8:8F:34:25:29:FE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BED3F3B7A591418E1DF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.71.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ed:3f:3b:7a:59:14:18:e1:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=823eb8f4-ca55-4104-9b99-dd71c8c0aed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:28:1a:c3:60:6d:92:5c:fa:f8:83:93:e2:
45:42:b1:32:1b:01:e0:8c:b6:41:c6:47:09:9c:8e:
12:cc:41:7b:f2:40:fe:1c:a0:01:53:0d:88:ad:21:
e2:f8:69:43:3b:fe:3e:d0:7e:f0:2e:07:66:7b:fa:
93:01:bd:d7:84:bd:de:4f:0c:80:e8:9c:fe:c8:4f:
93:3c:19:d8:d0:ac:53:68:44:2d:f7:28:15:a2:04:
22:48:85:70:a3:06:b9:75:a0:dc:a9:36:46:bb:d6:
8a:aa:9f:d8:ac:4d:42:ef:6d:c5:3c:47:12:b3:5d:
7a:9e:f1:6d:82:df:63:0f:34:0a:d7:64:d6:e6:f9:
32:10:e4:31:d1:1f:50:e4:47:c1:57:5b:81:87:3d:
b9:01:7b:c0:6e:7c:58:5c:42:12:36:65:a4:3b:8d:
08:f3:5c:a8:2f:fa:ad:23:da:56:4c:f6:b7:56:ff:
86:98:16:e4:a4:95:50:15:b4:8a:5f:8c:34:ea:a7:
42:76:7a:6d:f0:87:bd:98:be:8a:b5:c9:a9:ff:d8:
63:c0:91:78:ab:9c:ae:ca:bb:a6:3a:6a:1a:f5:46:
10:c0:a8:f2:ad:1c:b4:3d:e7:da:83:a3:9b:b0:dc:
fa:94:9c:cb:49:19:eb:6c:71:47:2e:f7:70:89:f5:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:6A:DB:2C:AA:B3:5A:CE:DC:75:85:54:0E:D8:8F:34:25:29:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf60108d-6422-313a-9cd9-777c85bff898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.71.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:0d:cd:ba:64:de:17:44:34:2e:de:e4:a0:a7:8b:30:bf:f1:
09:20:fe:fb:50:1b:d3:38:2e:d0:6c:2a:f2:c6:24:88:49:58:
b4:87:76:cc:31:22:b1:84:60:83:30:82:b1:6f:a9:05:bb:60:
2c:77:c1:85:1c:41:22:93:03:fe:88:65:55:80:e0:26:6a:9e:
2e:7a:b5:89:88:4f:86:1b:94:c2:53:e2:7d:6b:d2:9b:15:85:
09:3d:b8:da:68:1b:b4:85:af:a2:0e:8e:32:60:96:6b:d4:9e:
11:d2:5a:7b:7c:b5:6f:00:d9:15:1d:57:36:8a:c6:53:b5:59:
45:18:7e:53:0f:fc:63:bb:31:da:12:39:82:f3:8e:b9:a4:e4:
53:fa:44:bb:c2:89:96:18:cd:a0:24:03:07:c0:a2:00:6c:bd:
26:03:ca:47:9e:6d:ee:23:68:3f:51:17:b5:89:df:2f:e2:09:
53:5d:b6:49:cd:5b:1f:9f:59:ef:76:3d:5c:14:8f:96:08:0f:
08:e1:d7:f0:b1:0d:46:02:d9:7f:f7:bd:36:56:c2:57:fd:d3:
2d:48:fe:1a:cc:5e:13:6d:90:95:67:08:87:73:fe:bc:91:78:
84:b3:cb:ef:1e:4c:16:dc:3c:a0:27:9d:5a:a0:ba:0b:61:80:
d4:a1:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:35 2025 by rpki-client