Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa
File: d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa (raw, json)
Hash identifier: i+yepQHtx/voJ012CMDbRhbBgPisH1I4XkXbmLooSGI=
Subject key identifier: EF:8C:5C:F4:BA:AB:70:35:EC:BD:09:2F:10:A5:F8:83:30:6E:60:C1
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C1914BE08730822B0FF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.177.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:19:14:be:08:73:08:22:b0:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=7d875a2a-32a5-48e2-8e63-da72347f9ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:cb:95:e2:57:82:64:92:52:14:74:2f:43:
9c:e4:b1:d6:3e:d6:b1:5f:fe:05:e7:b7:36:15:f0:
c9:c3:a5:ac:cd:b9:30:4a:58:fb:3b:45:65:9d:af:
69:f6:ee:7a:bc:7a:3b:2f:cb:26:07:4e:d9:94:78:
05:87:f6:28:fa:e2:a3:06:a0:cc:e8:d9:c9:44:07:
fb:e9:c2:79:a8:a4:0d:32:c9:3c:7c:f0:33:a6:0b:
99:6d:fb:eb:7d:2d:df:8e:60:84:a3:bd:3d:b3:9a:
cc:74:a5:03:3c:56:68:6d:65:a2:05:f2:82:44:a1:
9b:f2:aa:d3:20:e6:ed:41:35:31:de:18:cb:54:85:
a8:d0:f4:da:c8:ad:4f:05:bc:76:9b:91:5c:80:57:
4f:d8:5d:dd:f4:c5:b6:e5:29:ef:17:48:58:2e:da:
b8:c9:d8:92:15:4e:ae:de:0c:d8:06:95:ba:90:06:
c2:28:a3:f8:1d:9e:e6:79:fe:94:cb:66:d2:af:e0:
aa:4a:02:0d:ba:b8:c3:c9:92:46:22:ea:86:3b:21:
fd:89:5d:85:40:18:70:05:79:58:99:3d:ff:f6:cd:
1d:ab:e1:36:b0:ad:28:41:84:a0:2e:27:4f:3e:d0:
e7:6f:8f:c4:d0:8b:c6:18:9f:4a:ab:08:99:73:48:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8C:5C:F4:BA:AB:70:35:EC:BD:09:2F:10:A5:F8:83:30:6E:60:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.177.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:95:85:fa:57:ba:85:8c:b3:61:42:48:b4:49:43:3f:d5:b2:
18:37:9d:a5:8f:f2:5a:56:0d:f9:34:ea:d9:fa:09:b3:da:6d:
63:1b:27:01:ad:e5:11:21:8b:43:8d:c3:a2:e5:88:a1:8c:10:
80:72:9d:47:ef:54:3e:8c:39:64:d9:f4:6b:71:36:af:f8:25:
31:7e:22:24:83:26:db:88:1e:d4:a6:ba:35:54:a8:6d:f3:1d:
8e:7f:0d:fb:c6:e2:ca:2b:39:bc:e5:77:26:a7:8e:32:2a:65:
8c:38:92:73:58:48:3a:64:b2:3d:d1:68:ff:5e:f0:6d:1c:a7:
2b:a1:af:48:20:e2:9a:b7:6b:0b:7e:85:28:69:23:7d:42:74:
06:50:3d:63:b3:91:2d:6a:c2:27:ed:76:2a:93:be:2a:ef:1f:
8a:97:78:89:f5:5f:01:f2:77:79:ba:32:b4:e4:75:ab:38:d3:
b8:86:53:a6:89:64:e8:fd:9e:2c:8d:29:72:ec:e6:30:a6:5c:
40:30:56:d8:f5:68:97:c4:43:e5:95:4d:3d:f0:23:8f:bc:87:
a3:d8:06:88:d2:a2:6e:25:4d:d6:d0:5a:ef:f8:94:4a:29:79:
cf:20:00:fe:46:df:13:e0:fa:ed:fc:9f:0c:52:d4:ad:b2:d9:
d7:4a:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:21 2025 by rpki-client