Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa
File: c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa (raw, json)
Hash identifier: FJBLx8vI7EekI60Bh01knBgo7wE2tN6xQV6H0qmx5oQ=
Subject key identifier: 67:A8:00:0B:51:B7:83:93:92:2C:67:06:D7:4B:11:4A:FE:3D:D6:08
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285849194191FF2A5BBC7B8F187080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 19527
IP address blocks: 34.1.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:91:ff:2a:5b:bc:7b:8f:18:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=325d832d-7899-439e-991e-50ce3525dff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:5f:02:40:fc:e8:a8:b3:e6:86:7c:f9:85:
93:7b:1c:5c:d8:2f:47:72:de:06:53:86:bd:76:d5:
da:fb:4e:b6:83:ee:ab:e4:44:8a:89:89:09:f0:80:
af:44:be:76:14:fe:0f:85:96:bf:da:69:e5:99:8b:
8a:34:d2:ca:d9:f2:d4:c5:45:ae:bb:06:9a:e1:d7:
52:db:91:32:e8:d2:32:4f:30:ee:28:80:a0:95:63:
98:20:89:d3:08:69:cc:99:60:79:de:7e:95:1c:89:
7b:e2:cd:f3:ce:76:e0:a8:88:cb:25:7f:9a:92:e2:
1b:09:b6:8c:22:44:4b:12:75:3e:df:34:1a:cd:8c:
02:21:bd:40:78:58:76:3f:b6:17:95:b7:29:77:fa:
a7:ec:8f:c5:ba:ec:d3:71:e6:8d:6c:9f:08:ab:88:
c6:3b:14:a6:81:c1:0e:92:4c:4c:a9:a5:ef:fb:71:
a7:11:de:9d:b3:59:93:22:e3:da:f3:be:04:60:cb:
95:de:b8:cb:0c:92:04:25:c4:c8:6b:b1:ed:da:05:
49:50:69:b6:6b:55:4b:56:13:f7:f6:3d:40:41:f4:
5c:94:d4:1a:ec:3d:ed:f4:a7:c4:e9:10:2a:86:95:
0d:15:91:da:87:97:59:06:ca:3a:92:fe:ad:e6:a0:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:00:0B:51:B7:83:93:92:2C:67:06:D7:4B:11:4A:FE:3D:D6:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:6c:20:e5:12:f7:d4:01:a0:ae:e5:2e:62:cb:f7:9b:07:b0:
f4:e0:7f:37:10:7a:a5:23:04:4a:ea:15:75:21:b6:da:e3:01:
d7:ce:f5:4a:62:fd:eb:91:ea:15:0d:18:ef:6d:48:5a:cd:62:
7d:87:b5:78:b1:30:7f:7d:5d:a1:3d:1e:60:f4:2f:3a:c8:df:
bf:22:51:ff:cf:28:f7:4e:49:2b:d4:0a:f7:d0:9e:56:c7:f0:
18:3e:3b:fe:49:3d:1a:4b:aa:df:f1:96:ac:1f:69:bf:a3:51:
97:af:76:a5:c5:12:03:b4:5f:c6:68:61:77:78:48:68:6e:66:
63:ab:5f:53:d2:41:9b:b1:e3:2d:fd:63:10:7a:12:27:78:5c:
a9:8d:e9:b8:fd:19:51:a8:de:8f:5f:46:15:74:18:48:8b:05:
5e:d8:1c:12:46:d9:73:6f:12:c1:18:3e:0b:00:cd:ad:df:0d:
b8:90:bb:ed:87:d0:44:35:ea:60:8d:59:65:d4:47:e4:e4:f3:
c5:f5:49:24:0d:05:c0:4e:bd:24:c9:a4:dd:a4:cc:f9:2c:7d:
e8:b5:78:dd:ae:6d:79:90:32:6c:3a:7c:eb:2d:a7:83:c8:13:
7b:83:52:9e:93:45:4c:b3:71:0d:41:68:af:64:3c:b8:fc:62:
52:b0:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:57:46 2025 by rpki-client