Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa
File: cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa (raw, json)
Hash identifier: w/z9zP/XJSahdDJ51KAuHObAlpCM8PIS9g7d87+UrdY=
Subject key identifier: 4D:E1:2F:AB:C7:04:13:AB:3C:06:A9:D4:9B:54:8B:D8:8E:E9:BF:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF26623D2D0C9746AF20A
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.66.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f2:66:23:d2:d0:c9:74:6a:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=c9d576c0-f4c9-426a-bfe4-3d515ba0daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:50:63:d7:2e:be:d1:8c:f5:3e:3b:f1:0c:
4d:08:c6:d4:76:4b:63:ae:b1:a4:5a:01:c9:ad:48:
3b:b3:39:14:6e:24:0c:4e:07:e7:cc:5c:14:fe:9f:
24:b7:09:d8:c4:46:1b:89:d6:91:b8:45:c4:73:ae:
19:61:9b:30:47:b8:9c:5c:aa:da:29:a0:46:9a:2c:
7d:a9:31:38:6f:03:07:ee:82:e2:9e:fd:11:76:a0:
71:06:18:39:4e:a6:69:a3:35:7d:2d:32:fc:56:30:
0d:17:a8:82:18:b1:6c:f4:9a:89:df:10:db:55:02:
e9:14:c9:45:c5:b2:75:c3:55:5c:37:d1:47:ab:67:
00:99:44:0e:54:34:fb:69:95:d9:ce:70:bb:a0:80:
39:5e:60:88:84:3e:69:fb:bd:c4:d5:b4:da:64:09:
78:81:55:1e:50:51:bd:83:11:41:c7:8b:73:85:07:
41:08:b9:db:e5:ff:ec:48:1f:9f:00:5d:cc:d9:13:
34:74:84:83:e9:1b:7b:fc:ef:05:fd:30:8d:7f:51:
32:63:ae:18:be:82:83:fb:c8:74:e6:39:81:17:04:
de:e5:c8:a5:56:1a:27:eb:ec:e9:11:bf:14:91:82:
be:0c:15:6d:87:40:cc:e4:9d:06:71:26:89:39:88:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:2F:AB:C7:04:13:AB:3C:06:A9:D4:9B:54:8B:D8:8E:E9:BF:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.66.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:18:52:65:01:d5:24:c6:0d:22:54:c5:d6:e5:07:54:54:d6:
59:a7:b2:cf:21:0e:88:d7:0d:63:21:28:82:00:c0:c5:35:44:
d9:92:78:55:fc:96:9f:72:e8:aa:0e:b3:2f:83:46:60:cd:4e:
47:30:86:35:54:39:7c:b8:0d:ec:52:10:c6:45:5b:87:a7:e4:
f1:56:0c:80:11:7f:99:80:ed:a4:d4:0f:f8:02:93:f2:30:1c:
1c:20:68:9c:89:c9:12:b1:2b:57:dc:d8:ae:7e:c8:2b:06:43:
dd:d9:17:4b:99:4c:d7:34:cc:bf:5f:61:5d:46:aa:fd:2c:b6:
24:23:e6:9b:9f:bd:0b:b3:14:55:1c:56:6a:71:8d:80:eb:3f:
75:64:84:67:b0:4b:8f:38:9e:34:fd:ae:64:3d:6e:2c:b4:0c:
0e:d6:bc:53:a7:dc:48:6e:1d:d1:13:71:2a:6a:9b:d6:69:e1:
b5:bb:16:d9:88:be:6d:37:81:a4:df:97:10:ae:3c:f1:0a:30:
6f:4f:5d:64:0a:ea:38:d8:e8:16:24:ac:bb:4c:1e:68:f6:1e:
66:99:12:00:92:f2:4d:30:80:57:11:7b:25:4c:0b:45:47:ca:
90:c0:68:91:ad:cf:c5:9b:c4:b2:43:eb:80:94:58:60:f4:a3:
b9:60:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:24 2025 by rpki-client