Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa
File: d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa (raw, json)
Hash identifier: krQKt679Y8QhBVfIaGIsNjfaZDb9Kbzt4lor2b/kheA=
Subject key identifier: A5:CA:CB:F6:E2:21:5C:39:EC:C2:0B:4C:AA:88:85:F6:C4:BD:3A:05
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5820AE2C4DA4D6C0E472280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 139070
IP address blocks: 34.0.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0a:e2:c4:da:4d:6c:0e:47:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=b1354429-7122-458b-b95d-8c59bdb4898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:34:c8:6c:f1:0f:34:d3:05:a8:d3:86:13:
b7:1b:b3:6f:e5:a3:80:81:e1:19:45:aa:bd:1c:1e:
09:35:ea:f9:ac:de:3c:42:fd:4a:4b:4a:2d:ac:ee:
c6:32:e4:ba:a0:08:f7:cc:35:25:04:53:68:92:0b:
e9:53:e9:b4:e8:19:77:cd:ce:8b:35:65:0b:b3:3d:
72:7c:3a:83:27:85:1f:2a:53:cd:32:c7:18:90:59:
44:24:c6:65:8b:fc:fe:98:cd:89:66:46:63:93:15:
70:76:e2:0e:11:b3:6c:4a:3c:57:f4:e0:68:8e:f4:
3c:f6:7e:3b:46:e3:04:7d:27:00:ec:83:c4:c0:f6:
9e:82:ab:2f:69:29:51:a7:0a:99:19:ab:04:4f:61:
4f:d9:60:40:1f:41:5f:88:fd:79:3e:7c:d2:59:86:
51:5e:8e:2f:c3:43:57:ef:26:2f:a4:61:2f:9b:ca:
28:2e:8f:73:49:ee:d6:ef:9b:91:ef:45:3a:17:b0:
10:c7:79:d8:75:38:8a:46:7b:fa:a5:35:c8:44:54:
ee:ff:14:45:fd:4b:ea:ab:a0:23:a8:26:09:33:ce:
59:d1:7b:48:88:dd:ca:9a:47:94:a5:33:ac:99:d3:
77:41:66:00:d1:a7:0a:e2:0d:e6:cf:bd:4c:a9:04:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:CB:F6:E2:21:5C:39:EC:C2:0B:4C:AA:88:85:F6:C4:BD:3A:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4e57a01-f77d-38b5-9620-df8f3d8e0dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:63:97:28:01:76:36:b1:54:61:16:99:a9:a6:11:60:8d:f2:
dd:73:3e:d3:6f:f3:a7:f2:77:3f:90:24:2f:1d:c1:7c:97:08:
8f:e8:e6:bc:5a:0e:a0:0f:6c:a1:f6:46:f2:73:3a:3b:ae:f2:
d7:47:f7:ce:ec:89:3f:5b:72:df:d4:e8:39:2a:b5:fe:84:ad:
10:07:48:c3:b2:bf:bd:4c:bd:a0:66:32:ce:a8:a8:35:77:7d:
5c:0d:eb:58:be:26:1c:c5:99:0a:7b:a1:93:1a:ea:a1:10:5f:
e5:f7:18:67:98:d7:09:93:eb:6e:10:bb:76:da:d3:4d:d9:17:
90:ab:d5:64:0a:78:9b:45:c5:a3:a6:9a:1f:42:d5:7c:00:60:
f5:45:47:d0:1a:de:17:9b:8a:05:1e:fc:c1:21:e4:31:d5:d0:
af:91:3d:dc:cf:b0:fa:17:0f:ab:e1:95:53:da:e7:4a:7e:9b:
bf:f8:ae:ab:3b:a1:63:35:ef:da:a2:3b:f1:d3:d4:fb:39:bd:
3d:5d:cf:0b:e2:36:33:79:de:6d:49:2e:78:8d:b8:b2:39:54:
dd:7c:3b:52:91:fe:67:d2:cc:c0:6f:92:fc:34:d4:59:13:e7:
dd:e8:99:97:87:88:f5:00:eb:68:29:0e:a1:7f:dc:cb:fe:8f:
bf:ee:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:43:21 2025 by rpki-client