Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34dc10c-30cd-3723-b376-3aa82750cb57.roa
File: d34dc10c-30cd-3723-b376-3aa82750cb57.roa (raw, json)
Hash identifier: f/TkvOSfh1yHBW+aovdao69ZL0lTic2MvGQyN0Eu7to=
Subject key identifier: D7:B9:64:53:41:56:38:18:C9:89:A7:A4:EB:57:6B:14:DF:CF:97:35
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C581830614C5A083F0DD8BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34dc10c-30cd-3723-b376-3aa82750cb57.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 11344
IP address blocks: 34.104.39.192/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:83:06:14:c5:a0:83:f0:dd:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d31cbed5-7798-4025-8551-497957f11d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:ec:53:aa:7a:97:22:b7:af:79:c9:2d:1b:
41:ff:39:12:11:7a:b0:84:46:b6:bb:1d:80:01:0f:
7d:93:5d:a0:53:5e:50:04:ca:02:60:27:7c:c5:09:
ad:2b:3a:91:41:09:d3:f7:3f:01:c6:fd:35:9a:e8:
74:08:2a:d1:12:3f:05:ed:87:ac:ee:42:26:d0:7d:
41:b7:51:4a:3d:18:2e:84:36:a6:fd:55:d3:73:df:
09:fb:5d:db:bd:6e:fe:fc:5e:f0:e2:23:d5:12:be:
20:8f:ad:d4:cb:cc:ad:db:06:80:0d:02:84:af:6f:
61:f1:32:dd:df:96:3e:98:3e:4c:f2:fb:c9:b4:53:
07:b1:6e:43:35:a9:34:97:81:58:0f:f6:31:8b:fe:
e6:cd:4e:13:4a:6b:40:c1:80:d1:f4:bd:3f:cd:9d:
71:58:d2:fd:2c:db:71:25:45:bd:f0:e7:c4:a5:dd:
10:85:f7:ea:5d:bf:ae:48:63:54:04:0e:57:6e:f1:
da:5e:eb:41:09:bf:e7:2f:ef:b1:50:b6:9f:56:27:
23:64:89:36:44:6e:1c:5b:79:b0:25:f4:20:21:1e:
01:f0:03:3f:c1:8b:e5:50:c5:89:25:1d:e0:35:49:
29:a5:11:d4:d4:96:19:9e:61:b2:af:5a:26:78:c6:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:64:53:41:56:38:18:C9:89:A7:A4:EB:57:6B:14:DF:CF:97:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34dc10c-30cd-3723-b376-3aa82750cb57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.39.192/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:e9:39:9d:0d:7c:26:54:a6:5d:6a:be:ec:39:36:2f:06:81:
2f:fd:54:88:8a:c1:0f:be:e3:74:b4:e9:25:1e:b3:c4:3c:76:
58:07:72:2f:36:be:8b:b9:7e:ad:f6:95:aa:7b:bf:1b:46:dd:
e3:36:94:2b:de:86:e1:f0:c6:8b:ae:57:64:1f:66:2a:9b:93:
a7:97:e2:eb:83:8f:66:51:39:3f:0b:72:7b:ca:85:ca:85:7a:
33:b5:54:2b:3e:71:c0:f5:c9:76:57:92:88:f9:41:5f:c8:3c:
03:bb:41:31:10:d2:ea:75:5a:59:ed:16:d5:18:55:c5:cd:00:
b5:1c:1b:e4:54:82:fe:7a:7a:ca:0a:94:85:23:9a:78:2c:1a:
2f:2c:87:3d:10:23:51:2d:a9:a2:cf:7c:69:6a:5a:61:c1:9b:
53:0d:fb:cd:3a:30:3e:e8:59:0a:77:55:11:4a:8b:99:77:46:
a6:2b:52:d0:75:40:6f:ed:65:03:58:43:ce:63:e3:46:a6:02:
a8:78:b0:bb:f8:e8:8c:57:98:fa:ac:7c:64:fc:62:12:3d:3e:
56:ba:9c:e4:72:65:ad:bb:86:a4:43:86:9b:20:57:e3:68:12:
42:dc:83:c3:5a:c9:63:94:76:9e:75:cb:19:af:ca:41:55:3e:
d0:8c:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:01:07 2025 by rpki-client