Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4852ec3-b239-331d-8c4d-76af81989e53.roa
File: c4852ec3-b239-331d-8c4d-76af81989e53.roa (raw, json)
Hash identifier: X7dM2Z9RG5nXbWgXjOwUc4quufXrjha7Ba7yhDuYCEU=
Subject key identifier: 55:58:B8:75:9E:F7:AA:15:2A:92:0E:33:7F:0E:C1:41:82:38:EE:7E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BE3C187E6FB0EC707C880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4852ec3-b239-331d-8c4d-76af81989e53.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.147.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:e3:c1:87:e6:fb:0e:c7:07:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=fdd650bd-1433-41bf-bfa6-054c5497d071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:d9:0e:15:b6:46:aa:cc:cb:0f:78:3e:f1:
7e:e6:df:17:77:c9:ea:80:05:51:dc:ed:96:c7:ff:
16:78:8d:92:9b:69:3b:78:97:5f:e0:04:1c:37:84:
be:ef:78:e1:4e:9a:df:93:4c:d9:40:ae:55:ee:6d:
f0:b0:9c:be:4e:47:e9:58:8a:94:56:07:df:6b:a9:
8a:6a:25:79:15:2f:a6:ae:f2:05:83:a0:4e:bb:ae:
dc:7b:d3:df:b7:9e:cf:3f:b5:5e:a4:a8:95:6e:8f:
d6:71:17:75:a9:31:e0:44:48:f8:e0:ca:a4:5e:ac:
30:7c:b4:35:b7:56:c1:63:fd:61:6b:58:bd:2f:e0:
e0:5c:a3:7e:99:0a:6b:d8:d7:40:f2:1f:c5:73:0f:
97:ba:c3:76:45:6c:7f:02:36:7f:1b:f5:b0:9a:c8:
e2:6a:56:85:41:8f:0c:51:f6:a9:08:bf:a7:da:ff:
f3:b2:d8:a9:80:be:ef:d3:93:a8:fc:23:38:1a:ab:
7e:d1:f7:8c:2a:eb:68:07:3a:06:70:eb:68:6b:e2:
43:a5:31:a8:8c:2d:63:c0:4b:ec:a5:4d:cd:ed:00:
3e:cf:90:8e:0a:3e:d1:e8:1b:eb:94:a7:44:42:f0:
c8:72:f4:56:a8:86:74:9f:84:45:dc:03:66:48:6e:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:B8:75:9E:F7:AA:15:2A:92:0E:33:7F:0E:C1:41:82:38:EE:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4852ec3-b239-331d-8c4d-76af81989e53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.147.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:86:ac:07:80:6c:e0:1c:d4:bc:83:a5:01:c2:8f:03:aa:08:
7f:f3:4d:e0:64:a1:b6:ff:36:74:9d:ee:27:ca:cd:22:13:c0:
0a:d6:ef:db:a0:5c:83:71:05:3c:ed:aa:a7:82:b2:57:63:11:
a3:67:41:5d:88:cc:42:ef:99:4a:57:53:3c:72:5b:41:57:d5:
29:b4:cc:7a:44:e5:7c:c3:1c:f6:09:29:02:44:61:86:45:d6:
52:6c:86:41:83:47:ea:c8:8a:29:56:cc:87:72:a7:1a:7c:f6:
05:fc:6a:b7:5e:dd:c8:07:09:31:49:bb:2d:dd:0a:0f:3d:53:
04:10:33:57:1f:64:9e:af:e5:78:b4:59:7b:4f:b8:7c:8a:6a:
4b:56:d8:9a:62:48:df:a4:3a:91:21:b1:f7:41:a2:fc:3b:33:
2e:a9:b1:e3:0b:cc:fc:e3:15:e2:34:e6:91:73:4b:68:16:8d:
2c:92:9a:15:2b:25:64:b7:a3:0c:e5:31:07:bc:fd:1b:66:55:
ef:8a:99:b9:0b:70:11:48:0b:46:c9:8f:7c:e4:9c:59:f1:66:
48:a1:e3:b1:0c:e2:30:27:d9:ee:a4:a7:0f:e4:6a:72:d1:66:
c0:06:02:59:c2:0a:cf:95:73:8b:60:22:d3:03:f9:30:23:34:
61:49:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:21:40 2025 by rpki-client