Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd246aab-3a9e-3f48-aacb-ea404d03848b.roa
File: fd246aab-3a9e-3f48-aacb-ea404d03848b.roa (raw, json)
Hash identifier: 4Gz8G9Zi8a5il42bxnLVk30OyY1PEioGfuWtke8lTic=
Subject key identifier: FA:0F:A9:CF:A4:5F:90:B2:1F:C2:2B:AE:B0:20:98:91:B4:8E:79:D3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF8A5ED9431A09B994400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd246aab-3a9e-3f48-aacb-ea404d03848b.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.83.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f8:a5:ed:94:31:a0:9b:99:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=85afdfb4-16f6-4113-a933-1e58f055650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:8c:e5:ee:51:95:0e:7f:a2:ea:7d:46:9b:
83:2b:75:6d:ca:ee:72:f8:a4:06:5a:5e:c6:2f:09:
df:b9:77:b7:39:a1:a4:9a:8b:45:71:19:86:c9:d0:
6b:5c:66:22:d4:ae:12:cd:f2:52:08:ea:96:fa:9c:
e0:41:dd:a6:76:ba:4d:cb:8c:b5:ad:8b:9b:c2:ab:
0b:9e:46:24:7f:c2:ef:6e:84:09:fd:d2:6c:7b:68:
d2:91:a3:d2:67:86:e5:54:de:0f:ce:0f:c8:03:8d:
57:ed:5c:45:9b:65:aa:85:f6:40:3d:9a:98:1a:5d:
48:ac:d9:43:f3:84:af:cc:63:13:63:b1:9a:6c:f3:
fb:9a:82:0a:c1:00:9f:e1:b0:21:f8:01:c8:42:ba:
11:64:f3:39:7b:3c:5a:17:e9:e8:ca:1b:b2:ce:eb:
ad:d0:5d:05:50:2d:06:8c:7c:d4:6a:06:79:cd:fd:
ce:bb:32:5e:dc:e8:c5:b6:41:1e:de:5a:d1:63:cb:
2c:3e:93:ae:4d:5c:6f:96:9c:da:42:9d:f8:50:0d:
7c:f3:a5:ec:4f:a6:0c:64:7a:3d:80:6b:a8:1d:92:
f9:e5:15:e7:7e:d0:c1:ca:bf:ca:cb:6d:c9:6e:73:
73:72:83:4d:fc:84:ff:34:ea:50:1d:97:51:b7:b5:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:A9:CF:A4:5F:90:B2:1F:C2:2B:AE:B0:20:98:91:B4:8E:79:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd246aab-3a9e-3f48-aacb-ea404d03848b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.83.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f3:5c:e8:2c:78:d8:02:d4:d4:42:7f:c0:21:59:7b:73:f0:
6d:5c:5c:98:2f:e8:76:41:59:56:35:cb:89:37:1d:bd:c9:51:
0a:3f:a8:b4:0e:58:0f:45:a2:58:96:f9:93:0a:46:d9:93:86:
eb:dd:ff:87:39:43:ce:5f:71:dc:6a:3a:d6:c5:f8:f0:4a:fc:
5e:b6:fd:36:ea:67:9f:ff:9d:05:6a:3f:90:b9:6b:36:99:f4:
29:8c:3f:03:8f:c2:52:a2:90:34:aa:42:5d:a5:0f:ca:1e:a5:
8e:94:a3:cb:c0:3e:b9:f5:c0:63:5d:9f:07:a9:29:25:bf:74:
91:84:a3:dc:c9:53:68:71:e2:49:8d:28:7f:89:4a:71:8b:cc:
25:7e:e6:93:55:5d:09:33:be:1e:62:42:21:d2:92:9a:2a:0b:
ea:65:ca:fb:24:aa:6b:fd:e6:57:a5:d6:a5:e7:28:8b:2e:48:
5f:64:2e:ab:1f:3f:e5:08:b0:3f:3e:ef:88:83:cf:24:60:13:
de:0a:c8:93:e8:31:81:70:09:6c:01:03:7d:fd:85:72:24:f3:
be:1b:f6:f0:c8:06:de:93:52:3e:ff:aa:1e:60:41:2f:75:e7:
81:83:df:ae:6f:15:c3:13:11:e3:c1:51:fe:6d:a7:9c:12:ed:
25:14:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:17 2025 by rpki-client