Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa
File: fff97a92-f728-3096-aace-80e53e101e6a.roa (raw, json)
Hash identifier: IntzvTCkQXSiU3VwN7O+OFmPZ7pcqjxsNUmDn3gqTak=
Subject key identifier: 36:D3:EA:E1:F3:D9:6E:D7:7A:CF:82:4C:6C:2E:53:54:22:AD:CF:21
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5822E395345AD9EAD0CD240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 139070
IP address blocks: 34.116.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2e:39:53:45:ad:9e:ad:0c:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=05c1a05f-979b-4b30-9199-2c9fccc7f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:2d:39:6e:71:9a:9e:ad:43:85:81:71:3d:
e0:94:73:b3:77:0d:2b:91:8e:48:07:db:51:2c:59:
04:58:f4:e8:8b:2d:f8:5c:12:5c:4c:90:a3:f3:6d:
4b:71:d9:95:ca:03:1f:33:26:07:4f:08:fa:b4:69:
7c:4a:ca:7c:d1:24:f3:fe:01:18:4d:79:3a:53:c5:
56:97:83:8a:86:f2:3f:2d:5d:03:55:0b:35:db:04:
05:a2:0a:95:df:f1:c3:1a:61:70:be:9b:43:f3:f3:
51:a9:52:4b:c7:f6:3e:d9:cd:cf:af:50:d0:2f:91:
d3:b7:37:66:6a:45:64:54:71:10:ca:d2:dd:0a:ac:
15:b1:ed:dd:82:5e:28:a7:32:03:77:7e:b3:80:09:
4a:af:5c:c0:5d:df:7d:16:6f:3e:b7:39:74:c2:76:
01:23:46:3d:4f:00:80:d6:a6:d1:b9:cb:22:6d:b0:
75:24:cd:32:f2:9a:48:76:f1:c0:e3:c8:63:94:ed:
83:da:6c:74:c0:ee:07:cc:e0:03:c0:bd:34:0f:7c:
01:04:56:45:d8:0b:fa:f2:b8:5e:ea:5d:ee:e5:df:
99:26:c7:9d:c1:99:29:8f:9c:ff:ec:b4:c3:27:a6:
a0:f2:0e:d7:c8:24:f6:9a:09:47:e9:ce:47:a3:3d:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:EA:E1:F3:D9:6E:D7:7A:CF:82:4C:6C:2E:53:54:22:AD:CF:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.116.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:57:96:6f:e6:27:91:22:bf:9c:72:1e:69:ac:f6:44:c4:e4:
1b:56:12:05:76:00:0b:68:6d:11:20:14:1d:8e:cf:0d:9e:c9:
30:17:87:c3:36:e1:ee:98:93:b0:70:1f:91:2e:89:3b:fc:10:
0c:38:dd:37:49:02:67:6e:ea:e0:ed:f7:9c:f5:f3:a5:62:e1:
15:4d:9a:b6:73:a4:dc:25:b7:cb:44:13:36:e5:76:8b:b0:26:
ea:4e:c9:31:3d:da:1c:d5:6c:ef:9d:a2:97:54:68:51:c7:14:
53:8e:1f:b7:32:db:42:8d:f9:a6:9b:fe:7d:00:a6:39:2d:63:
3f:ba:db:f4:a6:60:df:f1:f8:8e:10:64:b4:d0:e4:0a:62:31:
34:c8:ed:7a:7f:ef:97:2e:be:e8:dc:ea:2e:a7:fe:d1:72:51:
25:1b:cf:24:f8:96:3e:6d:45:0d:23:17:69:24:51:c0:8e:aa:
da:45:6a:5f:c1:e9:00:d1:ae:49:d8:e9:57:79:30:01:2d:45:
af:0a:77:8c:a3:fa:2e:c1:b0:24:10:ed:fa:2a:00:9d:f4:4d:
44:dc:2a:d3:f8:10:eb:46:d1:fa:72:a8:1a:3a:95:e4:08:db:
83:10:c1:83:e6:a5:a0:27:8c:4a:79:41:cb:8a:57:88:07:23:
20:45:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:30 2025 by rpki-client