Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa
File: dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa (raw, json)
Hash identifier: ggxqRB2aWiwfrO+478s85DFcKo9GwXdO5YBlzMSWnPE=
Subject key identifier: C1:71:51:D7:6F:FE:BC:51:B6:2C:B3:E5:3E:0C:D4:27:03:BC:91:72
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BFE13DDC5033AFA4A2C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.140.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:fe:13:dd:c5:03:3a:fa:4a:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=78186d65-0225-461d-95cd-2dd1d7709023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:4f:d6:c7:26:8a:a2:f9:3b:69:9d:e2:e4:
a2:8c:a2:a4:62:f9:6f:a8:ea:75:fd:07:22:34:9a:
77:2f:3e:54:9a:13:f0:03:a1:90:09:67:d1:60:75:
a5:b4:fa:d2:e2:18:bf:49:77:09:01:e8:e4:79:6d:
b7:83:27:0d:3a:d4:b1:58:f0:29:3a:23:4d:2e:1e:
9c:07:69:77:af:b4:03:48:8a:52:7b:ef:5c:78:bf:
d0:04:1c:3e:b5:91:24:0a:f7:04:1f:33:94:1e:1b:
f9:c2:6b:9a:f1:d6:2a:47:98:22:62:73:c9:6c:84:
96:60:b1:bc:da:9c:21:ac:cd:49:ca:b2:dc:16:cf:
59:53:ca:f4:71:c1:e9:f7:13:61:ac:3c:b3:5b:d6:
f1:33:c1:f6:75:76:b5:3b:0b:b0:3c:0c:13:04:ed:
88:00:84:74:92:0b:3a:7e:71:42:cf:bd:bb:db:f0:
b7:e5:ec:03:18:36:1f:8e:2b:6b:65:61:18:61:6c:
40:ea:3e:ab:75:86:82:dc:9d:c4:96:6e:16:10:05:
bc:5e:bf:e0:5e:c7:b0:c9:6a:03:de:5e:81:0e:21:
e0:53:b5:df:00:a6:a7:be:a4:b5:48:80:1a:98:c5:
55:f3:bb:cb:1a:a6:a3:e2:04:dc:e9:2a:51:1d:dc:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:71:51:D7:6F:FE:BC:51:B6:2C:B3:E5:3E:0C:D4:27:03:BC:91:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc8c33bd-5a51-3b6b-9c9c-ee8b2ca18b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:72:39:57:03:25:40:9c:88:5e:1d:f2:93:ee:8a:c3:be:5e:
ae:a1:54:59:f8:0b:ff:31:32:ad:70:07:51:14:31:b5:b7:ed:
3d:e9:23:c7:1a:12:d2:e4:91:1b:56:77:3b:2d:ff:01:6f:7f:
2f:3d:73:6b:d0:b0:3d:3f:65:f9:2a:25:58:36:50:b9:c3:7b:
2d:fd:55:cf:f0:87:17:d9:3a:1e:93:3a:0c:ca:be:8f:15:77:
0e:c5:a5:5e:17:64:78:21:89:81:d0:5b:c0:c2:1b:10:a5:47:
4c:7b:12:fa:4b:75:f9:62:03:2e:f5:1b:b3:af:50:3e:b5:16:
e3:e0:5c:52:49:5d:2d:42:fb:9d:7c:81:b8:e9:01:58:1d:74:
37:d5:bc:86:e6:16:14:1a:e8:8a:04:59:f9:30:fc:0c:5c:61:
5e:23:bf:ce:5a:97:6f:e6:6a:44:91:4a:84:05:2b:44:3f:e7:
fc:ed:78:55:57:ce:74:ed:d5:13:c7:64:a9:d5:50:90:86:f7:
3c:92:87:53:9c:4a:49:fe:b6:51:c3:ad:82:94:f4:6d:da:e4:
12:fd:05:04:b5:6f:3a:42:c1:a7:3c:be:fc:09:6f:5a:4f:3a:
07:78:3e:74:14:3f:37:72:75:32:06:84:ce:5b:d6:2c:a5:ac:
bb:32:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:27 2025 by rpki-client