Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcd0e874-38aa-37ee-8936-d00901daa064.roa
File: dcd0e874-38aa-37ee-8936-d00901daa064.roa (raw, json)
Hash identifier: TTfEpMo1SxWMkEmIF+aX+RD7gAe6MyQ/ABek95B3D8Y=
Subject key identifier: FC:EB:22:B5:03:FA:C7:8C:62:E3:7A:85:FE:81:36:4A:5E:3F:44:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C581FE1E71BCC26575707480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcd0e874-38aa-37ee-8936-d00901daa064.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.106.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fe:1e:71:bc:c2:65:75:70:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ce9cf044-9183-46af-87d0-c256161bb97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:2f:32:60:58:7c:1d:9b:d1:77:87:25:55:
6a:bd:27:07:53:6d:0f:77:ea:5c:10:9e:a2:09:08:
23:94:74:66:cd:e9:43:86:c4:d7:83:26:5c:f2:fc:
cf:a8:ec:6e:46:6e:0e:f6:d3:a7:5a:2c:5f:57:ba:
e5:2a:65:8d:fe:84:83:a4:93:50:42:6e:11:72:10:
1b:17:0b:78:09:5b:7c:f7:14:e4:b6:bb:e0:04:c7:
ed:4e:45:c2:05:9f:47:12:76:c8:5c:32:00:f0:e2:
13:f5:3e:38:52:a1:fc:48:f3:af:b0:13:d0:ba:fe:
d1:bd:41:cb:98:cb:d4:28:92:a9:49:eb:f7:8d:fc:
13:6e:12:f9:46:43:06:e9:06:81:e3:35:69:39:f9:
64:24:e0:29:6a:f2:16:e9:cf:95:9c:99:2a:59:0e:
0c:03:ed:d7:b0:2b:05:7d:5e:00:b7:22:00:81:c8:
8a:6c:af:93:04:2c:8d:5e:6b:88:26:5d:d8:30:2d:
ba:57:ff:7b:71:24:3e:67:02:44:00:2a:c1:75:49:
a2:55:56:e6:92:5c:63:99:87:2d:45:ed:25:7d:47:
77:a5:18:f3:5d:25:ca:e6:96:92:b9:b5:99:21:58:
e8:52:06:ad:bc:e2:db:2c:30:e0:59:2b:e6:e1:49:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:22:B5:03:FA:C7:8C:62:E3:7A:85:FE:81:36:4A:5E:3F:44:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcd0e874-38aa-37ee-8936-d00901daa064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.106.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e1:00:87:fe:94:63:92:92:76:ff:8e:75:28:ee:36:a3:b2:
ea:0f:44:46:e1:6b:29:73:9b:71:91:50:23:3c:1a:9d:da:43:
e9:13:87:12:83:90:7b:3c:34:f5:5a:23:4a:a3:bf:7d:de:e0:
51:37:12:a8:7c:60:91:ac:34:f4:27:0f:b5:49:5e:79:88:0c:
ba:2c:9f:6e:6d:6f:aa:8d:11:f0:d1:2b:f8:f7:1c:c6:b7:dd:
1f:e3:1f:72:7a:9b:fd:ba:c6:b6:70:fd:fb:13:03:3d:3c:c1:
61:f6:c2:80:2c:bf:66:87:a6:eb:a2:86:93:ae:26:51:05:82:
0e:7e:6d:16:08:2c:34:70:38:d9:71:a1:e3:83:06:86:26:2d:
d5:1b:a9:b6:78:1c:16:ea:6b:6f:b3:52:92:f8:ed:dc:c4:0d:
f1:ec:ec:38:b2:38:e2:71:1c:7d:0f:8d:97:be:a3:67:5b:fc:
bf:1f:2a:b4:aa:a4:51:91:16:2b:8a:05:1e:f5:05:8d:ef:1c:
35:dc:6a:af:a1:68:e4:0d:08:41:6c:56:af:0a:22:b2:83:5d:
6f:9d:3b:d2:a1:29:19:d5:db:3d:64:dc:e9:ad:8c:5a:ee:3c:
ca:a4:49:67:cb:9b:ea:13:a6:1f:5e:40:d1:93:ca:6b:1c:75:
2e:dc:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:11:20 2025 by rpki-client