Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8b4f22c-1869-335b-a20b-a79a95928b5b.roa
File: d8b4f22c-1869-335b-a20b-a79a95928b5b.roa (raw, json)
Hash identifier: 5757X89IVrwrGKzU9LqPt5LYFzlHuL8WdQXPrVJzNiI=
Subject key identifier: 8A:88:18:48:54:94:C6:43:3C:49:F1:93:ED:50:46:56:FB:46:C4:86
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BD5B39B4E929BFD7E7340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8b4f22c-1869-335b-a20b-a79a95928b5b.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 34.176.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d5:b3:9b:4e:92:9b:fd:7e:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=bc8a5462-3b3a-435c-b357-db33ed423688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:b1:cf:95:9e:7c:b1:6f:5d:01:93:0c:c8:
d6:de:f5:2d:10:b6:27:87:e7:20:fe:1c:a8:10:1f:
b7:a3:b3:22:45:cb:fc:02:f1:ff:f2:0e:26:2c:30:
91:93:b1:90:94:7b:97:a2:23:a4:f9:fc:00:eb:76:
7a:6a:e8:92:10:11:06:cf:89:16:ba:96:37:b0:ce:
24:fa:58:6f:36:67:1c:47:8e:a8:f7:98:22:42:55:
8f:52:fd:21:8b:06:e0:df:6c:00:62:49:d6:55:0c:
9b:c4:c7:fc:0b:b8:86:c8:ea:a4:9b:7a:4e:51:a5:
7e:47:a0:c2:85:89:04:b9:c3:96:53:90:0d:03:83:
12:ed:93:ad:00:c1:ad:4a:3a:04:e4:6f:e5:a5:e1:
ae:0b:7e:3e:c4:4f:2d:7c:a5:5b:bd:ef:ae:ba:53:
39:0b:a3:45:6b:76:36:f5:bd:f4:ca:78:be:fa:29:
93:3c:03:c2:e7:06:84:de:a0:7f:23:22:80:db:ba:
6e:a8:23:3a:92:66:bc:8b:ab:a6:e4:d2:18:59:60:
11:89:72:ac:54:56:03:45:65:bf:d9:2f:57:c4:ca:
77:e8:09:06:5f:44:59:48:18:6d:12:d9:9d:31:db:
cc:42:77:15:00:17:55:8c:0e:0b:be:21:7f:06:89:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:18:48:54:94:C6:43:3C:49:F1:93:ED:50:46:56:FB:46:C4:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8b4f22c-1869-335b-a20b-a79a95928b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.176.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:84:82:46:d1:98:bc:05:eb:89:65:99:9e:79:76:a9:5f:d0:
49:2c:3c:f6:ed:cc:84:46:1f:f8:fc:12:cc:cf:5d:71:87:d8:
b5:07:b2:e3:f8:ee:6a:c0:de:ea:79:a6:d6:5f:f6:4a:e9:cf:
e8:3e:44:54:67:6b:9c:c3:4d:55:15:ad:3d:e8:86:94:f5:97:
46:07:1e:61:5c:7f:41:47:5a:18:1f:80:d1:af:7e:26:ad:52:
67:c1:e1:d1:55:6b:95:11:d9:9c:23:65:76:be:a4:42:3f:c9:
d4:ea:42:11:a8:06:45:4a:43:8b:42:4c:18:fb:49:fb:ee:25:
de:54:fc:44:35:a8:91:f7:33:5a:19:b9:32:28:f9:ea:f5:58:
34:f4:f0:2f:e8:3e:11:81:5d:f9:0c:2e:cb:0a:7f:ba:1a:62:
8d:6a:20:e4:1c:b3:7a:1a:ef:9d:4d:56:de:31:63:7f:81:62:
7a:3f:bd:f9:cc:c3:55:4e:2a:9c:cf:15:c3:65:f0:f0:5d:89:
c3:c0:89:d8:7d:f0:ac:96:d6:28:68:20:ab:91:9e:c5:4f:ae:
f3:ac:a4:5a:d7:f1:48:45:0b:14:68:e1:1d:5a:2a:e3:8e:dc:
85:df:e7:1e:1b:73:2f:3b:30:ee:05:b5:a7:05:d5:06:1b:b2:
5b:5a:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:30:33 2025 by rpki-client