Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5617d6e-37ed-33a3-9272-bfff204859ab.roa
File: e5617d6e-37ed-33a3-9272-bfff204859ab.roa (raw, json)
Hash identifier: wg/cjChpbWlJ6MPn3Wx0wiozKcTr+8GKpuwNuq6ANds=
Subject key identifier: 2A:AF:CB:86:AC:1B:42:BA:18:8E:0E:26:5F:46:4C:7A:82:75:18:F5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848F9268ECDC06AD79460494080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5617d6e-37ed-33a3-9272-bfff204859ab.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 19527
IP address blocks: 34.2.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:8e:cd:c0:6a:d7:94:60:49:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=67b9abba-34b3-4096-a776-ddf2ee812cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:3a:4b:d2:37:02:2d:9b:13:a8:92:9d:3f:
98:37:fa:7f:30:2f:71:c3:d8:ec:9e:1a:b6:90:0c:
37:b6:9b:a4:37:3f:7b:ee:37:85:1c:61:05:7d:28:
57:74:69:ab:09:1a:eb:fb:08:89:55:c2:2e:1f:f4:
32:58:6e:39:b2:fd:de:36:76:b3:c9:53:0e:e1:22:
e7:8b:b3:9d:81:5b:70:4a:09:67:c0:e7:12:72:97:
3b:be:23:f7:46:0a:de:a9:a3:89:4e:a3:04:28:74:
c4:96:52:98:46:a9:4f:7f:10:d1:70:86:ba:c0:49:
d4:c8:eb:d7:08:d4:39:cd:ed:cd:f6:dc:a6:0d:a8:
b6:a3:01:5e:7d:0d:1a:12:ba:bb:df:05:4e:93:fb:
37:3a:64:83:cc:03:57:45:07:90:ba:78:85:9a:4c:
0a:d0:ba:76:83:90:a1:cd:f9:52:ff:90:b8:9b:89:
ef:6e:b7:9e:81:54:c9:4f:91:ca:40:1a:0e:9e:dc:
57:40:56:ad:f0:7a:aa:3a:a7:7e:a9:90:6d:6a:d3:
d2:ab:54:7b:6d:0a:31:db:04:d8:ca:3e:bd:75:ae:
cd:39:65:06:b8:4a:e7:db:7d:f2:8c:2a:37:b7:7c:
6b:db:4f:c8:9f:4e:f5:54:e8:ff:2b:33:94:ee:fa:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:CB:86:AC:1B:42:BA:18:8E:0E:26:5F:46:4C:7A:82:75:18:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5617d6e-37ed-33a3-9272-bfff204859ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:b3:b9:5b:82:42:67:0b:b0:aa:fd:b5:ea:f2:39:03:b0:16:
b0:d4:5d:80:c6:5d:aa:b7:0f:ef:20:26:9b:b9:df:a4:04:d5:
94:55:1e:5a:a6:f8:f0:31:e5:cc:bb:d3:39:16:5f:56:5c:05:
f7:ec:28:fd:e0:29:6a:ad:d1:79:6c:86:f2:5a:1f:5c:22:1c:
0e:e1:eb:29:ee:e1:b2:36:5a:3a:b5:2d:bc:ac:d2:ec:36:9d:
31:5e:bf:05:15:2e:0b:85:f4:ab:67:1a:8d:95:47:a6:3b:78:
c4:70:79:e3:bc:ee:3d:bd:0d:7f:38:d4:e7:63:14:6e:50:a6:
98:56:14:2e:8a:48:51:43:29:6c:56:18:63:36:3f:31:e4:be:
80:b4:f7:f9:f4:0d:fc:c8:ff:d1:2e:89:31:29:75:c2:33:f3:
2b:3e:87:10:45:20:f2:ae:1e:ef:ec:e9:4d:30:db:2b:eb:b6:
6b:a1:5d:36:dd:e3:cb:4c:63:35:93:f0:06:88:ef:92:cd:28:
47:64:ab:8f:f5:e8:fa:a7:23:60:d2:96:45:ac:00:01:73:63:
bf:4b:b0:06:db:cc:fe:c7:1d:4a:1c:6e:f7:22:50:c2:11:7b:
a7:bf:db:02:e1:57:38:b6:1a:62:12:22:e2:19:85:c8:2c:2c:
d6:1a:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:47 2025 by rpki-client