Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
File: 00848c69-e0a2-30a1-87c4-14728f62595e.roa (raw, json)
Hash identifier: l0qidHv69+rgt5U4BOPSksoqCU/MUFjqAgbWYdEvkwI=
Subject key identifier: D4:4C:20:28:DE:54:F2:01:2E:D0:B0:2C:5C:03:DB:74:6D:C2:FB:4A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51C4B747E9BDE705B7700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.192.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1c:4b:74:7e:9b:de:70:5b:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=eafe8bc5-a111-4dba-bb18-58b820ed0c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:74:0c:c9:9a:b4:e7:dc:14:fa:98:83:88:
83:07:96:fb:39:6c:e6:9c:1b:02:d7:7c:69:63:18:
96:66:23:92:e9:8b:e1:27:a7:f7:eb:34:2a:88:5b:
5c:20:e9:a1:17:64:b0:42:30:0d:97:4c:01:65:e0:
57:cb:c8:8f:54:34:2e:c8:2e:99:d8:62:82:a2:b2:
03:dd:70:20:aa:c2:36:de:42:d3:a0:e2:2d:e9:72:
a4:d9:66:13:10:88:6c:fe:ab:f0:7f:38:42:b0:d6:
ad:e5:ef:ac:c3:d8:32:04:97:bb:fa:28:86:3f:97:
d7:30:cf:95:ea:22:61:d9:8d:d1:a7:a2:f7:40:d9:
38:6f:3f:e8:85:74:22:56:1e:42:65:5e:f9:71:57:
30:8e:7f:5d:bc:1b:80:ea:9f:7b:a8:9b:4a:fb:44:
72:1c:23:ed:cc:7c:7b:1b:59:25:c6:73:53:91:58:
f9:a3:d2:13:3f:b1:89:8d:64:af:69:50:8a:1f:f7:
f3:30:ff:09:99:26:7d:94:0c:7d:f0:a7:a4:e8:57:
5e:9e:34:ef:ba:a1:2a:63:98:80:92:4a:5c:b3:77:
23:a2:91:fe:a0:7f:01:43:89:3e:48:86:8e:28:df:
fd:42:d4:2a:8f:e9:83:16:05:58:7e:ac:57:ff:fc:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:20:28:DE:54:F2:01:2E:D0:B0:2C:5C:03:DB:74:6D:C2:FB:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:6d:a3:b9:19:69:b0:b4:62:6d:56:1e:30:92:5a:5e:6d:07:
9b:ec:a1:d2:fa:ab:d1:d2:67:64:30:78:13:4c:e4:dd:db:00:
86:77:fb:53:14:52:31:07:4f:27:6f:d2:b2:9c:ea:24:d9:b6:
7d:ec:ff:54:89:a1:47:91:30:22:c4:b8:32:c6:c0:6f:ee:3a:
72:8e:20:63:d8:81:0a:e8:63:f1:eb:fb:9a:fb:75:72:34:c1:
fc:4a:55:71:2f:85:d5:37:42:24:6e:06:65:c8:76:f8:90:57:
f3:bd:4c:cd:3e:0a:9c:96:88:03:01:4a:de:9d:1c:2e:a2:a0:
7d:12:7d:30:39:2b:4d:1b:f1:68:b7:71:86:fe:90:fd:40:9e:
86:26:dc:70:6b:92:1c:c4:8d:6b:50:a9:d3:08:fb:7a:ae:87:
c5:b6:f8:0e:df:bd:a4:78:3b:da:6c:3f:8b:3d:01:73:7c:7a:
62:f6:08:c1:e1:ed:06:90:b0:7f:d3:a1:07:0f:41:2c:88:02:
ba:a1:df:4c:d4:56:55:3a:14:2b:17:0c:fa:8f:8f:e4:63:2a:
64:1c:eb:7a:51:3b:39:31:6d:02:a1:da:dc:aa:a5:fa:12:78:
3d:da:f1:6c:d4:27:61:50:2d:eb:06:78:30:03:30:bd:73:77:
43:d5:86:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RxLdH6b3nBbdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZWFmZThiYzUtYTExMS00ZGJhLWJiMTgtNThiODIwZWQwYzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNh0DMmatOfcFPqYg4iDB5b7OWzmnBsC13xp
YxiWZiOS6YvhJ6f36zQqiFtcIOmhF2SwQjANl0wBZeBXy8iPVDQuyC6Z2GKCorID
3XAgqsI23kLToOIt6XKk2WYTEIhs/qvwfzhCsNat5e+sw9gyBJe7+iiGP5fXMM+V
6iJh2Y3Rp6L3QNk4bz/ohXQiVh5CZV75cVcwjn9dvBuA6p97qJtK+0RyHCPtzHx7
G1klxnNTkVj5o9ITP7GJjWSvaVCKH/fzMP8JmSZ9lAx98Kek6FdenjTvuqEqY5iA
kkpcs3cjopH+oH8BQ4k+SIaOKN/9QtQqj+mDFgVYfqxX//ylfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRMICjeVPIBLtCwLFwD23RtwvtKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDA4NDhjNjktZTBhMi0z
MGExLTg3YzQtMTQ3MjhmNjI1OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8DwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBto7kZabC0Ym1WHjCSWl5tB5vsodL6q9HSZ2QweBNM5N3bAIZ3+1MU
UjEHTydv0rKc6iTZtn3s/1SJoUeRMCLEuDLGwG/uOnKOIGPYgQroY/Hr+5r7dXI0
wfxKVXEvhdU3QiRuBmXIdviQV/O9TM0+CpyWiAMBSt6dHC6ioH0SfTA5K00b8Wi3
cYb+kP1AnoYm3HBrkhzEjWtQqdMI+3quh8W2+A7fvaR4O9psP4s9AXN8emL2CMHh
7QaQsH/ToQcPQSyIArqh30zUVlU6FCsXDPqPj+RjKmQc63pROzkxbQKh2tyqpfoS
eD3a8WzUJ2FQLesGeDADML1zd0PVhuQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:04 2025 by rpki-client