Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e241a3aa-0887-38fa-b7f2-e5795ef094ab.roa
File: e241a3aa-0887-38fa-b7f2-e5795ef094ab.roa (raw, json)
Hash identifier: 9xdZo0KWudOHz/R7tuhWKsO8GQ/SdsOw96/5brbKUls=
Subject key identifier: 3D:CD:A9:B5:04:BF:75:BB:43:9C:E8:79:09:7D:6B:5E:98:0D:86:3E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858491D716EC9334DC1B305E4B180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e241a3aa-0887-38fa-b7f2-e5795ef094ab.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 15169
IP address blocks: 34.1.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:6e:c9:33:4d:c1:b3:05:e4:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=9f890686-e673-48f7-ac6b-6dc60538bb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:6e:5b:61:57:82:f4:4c:7b:08:b5:07:b1:
4e:47:c3:99:80:6d:84:68:66:43:a5:f9:c8:83:26:
a1:62:11:c2:cb:95:62:d1:8f:a3:d9:a4:22:70:2d:
e9:53:c4:df:c9:17:2e:ca:88:fe:e9:2e:6b:3f:c7:
10:0a:33:2e:da:ae:8f:8e:a4:51:18:db:82:15:9f:
16:c8:6e:66:fe:36:8e:e2:a4:20:4f:4f:5f:56:46:
ae:39:a7:7e:26:db:59:f7:be:52:64:8a:ec:a5:80:
cd:ff:cc:1d:1c:0e:c5:e1:7c:5f:93:c3:c2:7d:69:
96:47:7e:27:42:f8:08:6b:43:23:35:8e:5f:55:ee:
51:16:2f:e2:46:c9:eb:c3:05:e7:14:74:95:3f:8e:
a1:96:b2:f1:b0:cc:bc:d2:ac:b8:f0:2d:2a:d2:f0:
2e:f4:f8:d9:7a:a9:ba:01:9c:62:d6:81:59:c4:08:
08:bb:f3:84:c8:03:05:e0:69:b8:52:75:c5:77:9e:
d0:b6:b8:69:ee:70:ed:bd:5a:5b:1d:6a:07:d6:12:
3a:18:32:e2:bf:4b:b1:ce:ff:4e:bc:eb:a3:aa:f5:
02:f8:6b:f1:34:a5:85:08:a2:ae:89:3b:d2:08:2b:
7a:de:81:83:cd:fa:c3:9e:ee:eb:28:ae:bd:33:9b:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:A9:B5:04:BF:75:BB:43:9C:E8:79:09:7D:6B:5E:98:0D:86:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e241a3aa-0887-38fa-b7f2-e5795ef094ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:98:c9:05:b8:95:98:3d:50:22:a9:9b:03:92:84:86:77:d2:
33:c5:d0:d6:6a:18:65:15:4f:3b:8f:e6:12:85:06:76:e4:50:
cc:66:9c:9d:23:8f:40:99:f6:06:78:16:50:dd:cb:d0:7b:25:
15:52:9f:c8:9f:f7:6c:25:d8:d4:78:94:d9:9f:55:b2:49:ec:
fb:a3:55:ed:b9:df:a6:ef:9a:77:8b:88:bf:8c:97:94:18:a9:
fe:eb:15:b9:06:b5:fd:db:4a:16:81:65:48:cf:44:29:6d:f8:
cc:c9:0b:49:a3:fc:db:8b:85:4b:ca:ff:c3:2a:cc:c8:82:3e:
e6:f4:60:bd:60:c8:23:7c:55:19:57:46:5b:33:95:b6:e9:70:
9d:ed:1b:96:46:eb:21:2f:36:9d:89:f7:5c:cd:2f:c6:a8:89:
c4:5b:8e:07:a4:40:7c:fb:9a:56:c1:0b:12:c9:78:66:20:41:
12:d2:18:b4:43:80:55:02:6d:9a:00:dc:e0:23:2a:cb:0e:0d:
0d:76:b8:fb:8f:83:ff:17:9c:e3:e5:2a:bc:43:f2:4c:6d:32:
8a:ff:e1:9e:39:2b:0d:7f:5f:65:d5:63:34:d3:c0:ab:5c:c3:
d4:8b:64:e3:55:86:ba:7c:13:0a:06:2c:ef:2a:7c:d4:a9:3c:
90:62:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:49 2025 by rpki-client