Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc71b850-a89b-388f-806a-f5e9351b7c6e.roa
File: cc71b850-a89b-388f-806a-f5e9351b7c6e.roa (raw, json)
Hash identifier: 7dmiJrtW8SH+eR9WyBI9exMshDGH/U3bkUTyx7bMMAQ=
Subject key identifier: 54:49:7E:E7:EB:31:88:60:09:5B:C9:D7:55:93:B7:5E:36:7D:F7:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848828099307BE3FFB211941300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc71b850-a89b-388f-806a-f5e9351b7c6e.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.124.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:99:30:7b:e3:ff:b2:11:94:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=36358f9c-2b91-4ca3-a990-2e170718bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:d4:5e:a9:4b:b0:f3:12:68:2e:37:ed:2c:
54:a3:1c:66:9e:65:30:20:40:49:71:75:b1:f4:c8:
7d:ee:d7:40:d6:6d:0c:86:23:cd:f9:62:6d:47:64:
8b:b4:2d:0f:74:bf:85:18:fb:bc:27:5f:ff:58:a5:
22:f7:7e:06:a5:53:58:40:be:a2:16:98:84:25:b4:
dd:38:bd:91:bf:5b:d3:35:50:73:ca:3e:22:7d:fd:
ba:ec:4f:70:03:ca:eb:60:8c:d5:f5:a2:a1:18:3c:
aa:7f:35:cf:67:52:c9:2f:a3:28:54:84:75:2b:6c:
aa:d9:64:26:3b:c6:83:c0:e7:77:20:e9:99:30:c8:
4a:17:65:58:82:d8:ff:ab:53:ac:7c:66:82:84:c2:
f4:07:ae:77:3d:2c:e6:0b:bd:3d:40:e9:44:4d:dd:
8e:78:ba:3b:70:ea:83:d9:d4:ef:0b:66:69:a9:78:
01:43:35:be:ea:57:95:ac:1c:d6:9f:9a:88:3a:10:
3e:1a:6a:a2:18:e1:e9:14:ce:21:e9:3d:d1:8a:3a:
dd:83:e2:b1:d4:84:02:66:ff:b7:93:85:0b:2d:d5:
f1:1f:df:87:77:15:a0:29:0b:c1:ec:9a:10:68:01:
11:cc:e1:38:86:f5:f2:47:61:b8:9b:e0:4a:6a:b3:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:7E:E7:EB:31:88:60:09:5B:C9:D7:55:93:B7:5E:36:7D:F7:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc71b850-a89b-388f-806a-f5e9351b7c6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.124.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:6f:77:33:0f:e9:5f:3d:6b:81:45:27:6e:ae:6f:a0:ad:2b:
ad:34:69:13:03:da:27:94:2a:76:02:97:b0:21:1f:58:a4:35:
6b:ea:7c:6b:de:78:d6:50:53:43:d2:b3:be:37:2d:44:e4:64:
59:b7:01:bb:d1:52:fb:00:9e:b6:a6:05:7c:7d:b6:d1:7d:b4:
0a:e0:0e:83:81:3b:4b:d6:79:82:b2:78:3f:e1:74:7d:59:97:
5b:8a:c6:67:c3:db:ac:6e:67:00:2e:1c:6f:c2:93:49:6f:38:
5d:f7:15:2a:54:4f:e3:ed:48:f2:01:b7:79:5b:23:a1:6e:72:
a1:cc:cf:e4:fb:9a:9f:af:2e:67:3a:c6:47:73:09:b0:41:1a:
8b:88:8d:57:5c:31:ec:7a:b6:c4:df:de:c5:9f:d3:c6:b4:a8:
68:72:d1:cf:d1:85:95:88:26:a6:33:ec:ac:0d:75:99:4d:2a:
b0:ee:c9:71:ef:65:b3:6b:0a:9d:75:4a:0e:d0:7d:68:a3:3f:
20:63:06:33:44:9b:df:47:96:fe:fc:29:fc:67:d2:e8:01:de:
70:f9:b2:f6:e6:88:85:41:a1:08:c9:c4:5e:12:c2:e7:d6:1d:
8c:77:b3:72:61:c2:d8:3b:3a:41:d1:a4:02:9d:17:19:78:64:
ea:2b:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:41 2025 by rpki-client