Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9c45b92-ab3d-3491-95e6-4aad710fc961.roa
File: c9c45b92-ab3d-3491-95e6-4aad710fc961.roa (raw, json)
Hash identifier: BWUXZVuoACEouesz9gXPHNhChP8qJszsYuxde5kH0l4=
Subject key identifier: 5C:33:7B:FF:C2:BA:54:A5:A8:30:8D:9A:E1:FD:D5:3E:E2:E7:18:A0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848FE1CC059C1CEBB2FF7D47BB0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9c45b92-ab3d-3491-95e6-4aad710fc961.roa
Signing time: Mon 24 Feb 2025 20:40:08 +0000
ROA not before: Mon 24 Feb 2025 20:40:08 +0000
ROA not after: Sun 25 May 2025 19:40:08 +0000
asID: 396982
IP address blocks: 34.3.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fe:1c:c0:59:c1:ce:bb:2f:f7:d4:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 24 20:40:08 2025 GMT
Not After : May 25 19:40:08 2025 GMT
Subject: CN=27a72c99-4c8e-4efb-bb72-85b9c072458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:0c:b3:f4:02:74:f4:8c:61:07:f5:59:08:
62:a6:78:c5:d6:c6:b8:2e:16:6c:a2:bf:10:83:e6:
ea:29:b9:9c:73:8e:ca:45:f4:cb:92:aa:0d:4f:db:
47:a4:7c:ea:a2:cb:b2:3a:6e:09:da:f4:e8:eb:18:
73:79:fd:ff:f1:77:9f:24:9d:0b:7f:ce:7f:55:63:
68:e1:a3:d0:48:11:05:d0:45:14:07:e6:2e:c9:d8:
e1:91:d3:a4:b0:2f:f9:06:2d:63:8c:c0:26:73:cc:
97:ea:47:63:9b:17:ab:54:54:07:1a:2a:15:27:5c:
5a:66:0a:0e:24:23:04:ef:73:20:6c:02:e5:dd:4f:
14:79:aa:19:bf:ca:a2:70:ea:ad:d4:a5:ae:63:a5:
50:91:a8:94:a7:2f:ae:27:eb:1c:d4:94:26:5a:d2:
10:89:91:be:72:20:81:05:2b:5f:4a:c2:cd:10:97:
46:d5:f0:62:8c:91:f0:e6:37:ae:04:b1:c5:77:2e:
41:2d:f3:d0:3c:f7:94:f9:5c:77:32:4c:bd:b4:41:
f5:b1:6c:8f:49:08:3b:2e:27:77:40:7c:f1:a4:f7:
18:f5:67:a9:16:ca:c1:78:b4:51:23:04:b9:dd:73:
0c:d3:a6:9d:b5:7b:d7:22:9e:34:64:6b:2c:f6:1d:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:7B:FF:C2:BA:54:A5:A8:30:8D:9A:E1:FD:D5:3E:E2:E7:18:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9c45b92-ab3d-3491-95e6-4aad710fc961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.3.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:33:44:66:72:66:81:9e:9f:5f:27:ef:03:df:cb:a5:ff:6c:
db:d1:85:24:94:b0:fc:2e:06:f3:d5:37:6f:4f:85:62:2a:27:
c2:a3:75:32:38:c9:8d:9b:5e:11:07:91:5c:e9:36:82:58:4c:
a5:7c:d2:12:e3:51:d3:dc:cc:c2:84:b6:9a:bd:f4:4b:27:55:
a4:a4:53:2b:17:2d:f3:cf:e2:78:ac:8b:6b:73:54:77:8c:d7:
55:7a:48:54:f9:5b:0b:7d:e2:c0:ed:d3:1a:ae:b1:47:fc:d3:
60:90:73:ad:f1:c5:ca:7a:04:2e:27:41:22:46:66:01:90:0b:
46:2a:eb:5e:dd:5b:ee:e0:fa:1a:1b:02:fb:74:bb:d7:d5:8b:
0b:12:fc:36:e4:91:1c:48:6e:f6:6d:7e:c1:87:a8:c4:55:37:
cb:95:3d:a3:b3:7a:03:7a:ae:1e:8f:53:27:d3:63:dd:91:1b:
07:b5:89:0d:d2:ba:78:97:b2:31:bf:8d:88:90:c6:13:ee:ce:
76:db:cc:93:b1:9a:13:f1:cc:78:e9:c7:59:05:ac:6e:54:aa:
ad:9f:78:b3:ae:a5:bb:83:6d:2a:0f:3b:eb:1e:33:c1:0a:3f:
36:d9:5b:03:97:ad:71:6a:b1:3c:bd:16:d0:1e:35:ad:1e:65:
66:57:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:05 2025 by rpki-client