Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa
File: dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa (raw, json)
Hash identifier: 6Efdc55h6Jj1uQ2hztcTwcRTpW/FJzu2GtCoxYP3HnI=
Subject key identifier: FC:A7:DD:20:9D:1C:15:4A:20:86:47:8B:6F:3E:D2:24:E9:3F:BF:23
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C1A1A94A418ECD5017C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.21.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1a:1a:94:a4:18:ec:d5:01:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=4409bc9a-d769-42fd-9cb7-89874f2fb7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:b0:b3:2a:bc:7c:9d:09:54:d5:29:2f:8e:
8a:96:5f:b5:c1:60:6e:1c:8d:11:dc:d7:fc:ce:f5:
f8:93:a5:3b:21:cf:b1:db:09:4d:cc:fe:77:3e:e5:
b6:20:b1:2b:38:b4:df:ee:dc:43:52:f8:bb:3d:7a:
32:a3:9e:6c:e3:2f:9c:53:ad:f8:7e:fe:9e:72:ae:
7e:15:eb:1c:10:98:ae:8e:9e:8a:24:18:80:e3:a5:
1d:58:6b:12:34:80:33:39:ee:06:18:cd:ec:44:ba:
a4:ff:ed:33:65:3b:b7:5d:e1:39:fa:2a:e7:a0:2d:
5c:02:cd:0d:0b:ad:0d:a3:12:2f:73:c8:5a:49:6e:
8d:fe:ce:0b:d3:5a:94:23:dd:57:75:56:8a:0b:0b:
0a:a5:2f:6c:57:45:c9:c3:61:1f:57:5b:59:5b:98:
b3:f2:50:af:23:26:ad:1b:7c:1c:4d:77:02:81:a6:
d7:d7:1f:9b:18:2f:40:13:c4:27:a2:26:db:49:16:
70:be:9b:2d:ce:ab:4e:c1:95:80:57:4f:b2:b4:45:
0f:8c:08:6a:77:fc:04:d3:4d:42:7b:d7:72:2c:0f:
1d:13:52:7f:7a:05:2f:d0:3d:c5:9e:43:5c:b5:25:
1c:3f:b9:c2:62:0b:4d:9c:30:90:5e:c0:16:54:32:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:DD:20:9D:1C:15:4A:20:86:47:8B:6F:3E:D2:24:E9:3F:BF:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.21.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:2a:6a:29:68:f9:6a:39:eb:85:24:bc:90:c2:b2:5f:b3:a3:
10:76:9e:03:3d:9b:49:52:fc:c8:1e:2f:35:ec:35:97:0b:19:
c5:47:77:91:43:76:ad:c6:2d:5f:4b:c7:23:ae:1a:b5:ab:c7:
46:d2:ac:b5:a9:da:0d:14:a9:3a:1c:10:fc:e9:d9:7e:46:a0:
1a:bc:55:1a:4d:95:4b:0a:65:8f:86:f3:10:38:84:f6:ca:7b:
b3:e1:e2:80:1e:4a:3b:cb:5b:36:98:78:3a:29:4c:7c:37:bf:
ab:f9:8c:ec:3f:a8:57:2a:c9:ce:b5:a1:f0:dc:ab:4e:22:b6:
e0:6d:5a:38:ab:0c:4b:2a:a6:be:3d:8a:be:0d:72:b7:2d:71:
74:6c:bb:27:f5:62:3e:c5:2a:ee:35:02:75:58:f3:9f:70:8e:
d5:90:81:9e:d8:0c:09:ae:8a:29:b5:2e:df:29:5c:88:b3:b3:
15:66:d7:fd:e9:53:c7:58:ce:77:97:13:ce:2a:f3:85:03:c9:
87:01:76:be:10:83:fc:55:b6:87:7c:a1:bc:f0:43:c0:e5:f1:
36:90:ec:ea:91:63:97:79:9d:ed:35:b5:36:38:ad:4d:ca:23:
a3:f3:0a:38:9d:d8:b9:4a:50:1b:e0:04:47:28:68:9c:2c:88:
82:37:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:05:56 2025 by rpki-client