Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa
File: cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa (raw, json)
Hash identifier: OszicgsDA6ZhrJ0zU13lVLTXpWlbrjI+UrrjiuUFofg=
Subject key identifier: 02:C4:2C:27:B0:4D:B8:14:BE:56:F8:19:A7:56:24:56:FF:AD:59:40
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C1D97F08DEEF5C6C144C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.123.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1d:97:f0:8d:ee:f5:c6:c1:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=69e98f36-ef25-4940-8b20-053c4c34d9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:aa:46:ba:5a:97:30:c0:e2:47:c6:6a:71:
f0:b4:26:2a:79:b8:e5:fe:5e:dd:54:85:6a:96:5d:
4e:87:5e:54:ae:eb:92:0e:1b:eb:41:4e:45:89:e0:
d5:ae:2b:eb:9c:ad:8a:84:37:6b:d5:52:71:6a:7c:
2b:1f:5d:69:5b:fb:ab:71:77:ad:01:6a:7a:2d:af:
3e:a8:85:37:02:de:fa:cd:43:cb:c6:04:23:2c:8d:
a7:40:68:2c:40:ed:05:3c:df:68:0e:4d:22:b4:21:
23:a8:36:ff:f8:2d:06:aa:bc:92:0b:83:60:21:e7:
da:1c:27:93:36:79:3f:c8:56:98:14:fb:02:b0:7a:
fa:32:4e:1d:1b:a3:13:90:c6:41:7d:b1:d5:7a:b1:
af:8c:f6:55:2d:af:ae:fc:49:07:d4:5f:e3:74:a3:
4f:40:4c:92:cc:ae:c0:36:89:82:4d:00:24:7b:a1:
b3:0c:eb:ae:89:43:79:a7:1a:c5:40:06:e2:90:22:
4d:3d:3c:87:6d:e9:e4:e2:50:06:31:4f:0e:60:54:
0a:51:5a:42:34:6c:d7:2a:11:1b:d5:7f:b2:9f:41:
b9:cb:b8:7f:b2:fa:e5:02:28:60:7a:14:9c:89:13:
89:21:2c:8d:ec:d7:2d:e2:e2:71:19:b8:2e:7f:62:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:2C:27:B0:4D:B8:14:BE:56:F8:19:A7:56:24:56:FF:AD:59:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2c:c2:ee:59:07:dc:a3:94:dc:94:18:4f:b5:4a:b8:dc:09:
a3:ac:bb:66:3c:82:a4:7c:7c:d3:d0:63:67:2d:03:02:48:f3:
ae:b4:e2:e3:05:a2:37:a2:b5:f0:bb:d2:e6:6a:fb:e1:93:db:
83:38:bd:05:b0:6c:87:1a:f4:75:38:11:30:52:f6:3d:a7:65:
cf:0f:40:a6:f7:f3:a7:0a:8c:a8:4b:0f:71:32:ed:88:2b:cf:
6f:6c:09:dc:ee:a2:37:1f:59:46:a8:45:0f:62:9e:64:27:73:
4c:ac:cb:17:39:e0:3f:65:13:52:7b:4e:77:6e:d2:1e:4a:97:
fb:36:f6:9a:2a:95:bb:84:5d:d7:c2:26:73:c8:2f:3b:78:2d:
ba:74:7e:4a:84:45:13:2b:a5:de:b5:bb:00:62:7d:6b:8c:f5:
af:4e:f8:58:e6:24:d0:1b:ae:ec:ca:88:20:85:19:2f:3a:40:
17:39:30:70:83:a5:89:6a:45:a9:98:1d:cb:5b:f2:b4:73:bd:
63:22:87:f2:2c:ce:49:ab:b2:c7:9a:88:90:22:89:28:22:02:
33:75:2f:f7:72:5e:c6:ae:0c:40:1f:7c:fa:93:44:99:a6:4f:
b4:ed:fa:eb:40:13:c8:b0:de:6d:1d:29:2f:b1:e8:dd:72:28:
3b:83:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:14 2025 by rpki-client