Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/080cb70a-3a5f-3c31-8837-b290c2bd5959.roa
File: 080cb70a-3a5f-3c31-8837-b290c2bd5959.roa (raw, json)
Hash identifier: 3YhOCnJwPTW/0If0xaIjB8WTcSddHo5dzWfC+E4gcKw=
Subject key identifier: E7:14:48:C3:77:58:27:93:11:4D:7D:5D:74:10:7B:84:75:D4:C0:C3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F540298B26C46F5ADE1640
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/080cb70a-3a5f-3c31-8837-b290c2bd5959.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.130.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:40:29:8b:26:c4:6f:5a:de:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=fa38f374-0f21-498d-bf6b-051fcb54b089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:c7:dd:c0:9a:a3:d8:26:07:ad:39:ff:29:
c0:5d:74:ed:3d:f5:56:ff:62:ec:91:fb:50:64:79:
06:7a:d9:41:6e:a6:8d:0c:28:b2:b0:c2:db:b9:3c:
78:79:f6:e5:e9:92:0d:2f:04:28:71:07:85:ac:59:
81:b7:1d:dd:f6:37:61:c4:94:9f:6f:ab:e9:3d:79:
6d:c3:64:c1:86:e0:63:f7:0c:7d:9a:78:c0:2f:48:
40:49:b3:12:70:38:cd:11:20:cc:0f:d4:17:bf:de:
25:8f:2b:bf:8b:82:00:1c:ab:a2:2e:9c:a7:67:94:
10:23:7f:bb:38:41:e0:3c:c4:c6:ca:46:30:84:13:
a8:50:19:cd:14:2d:df:9b:88:58:36:16:28:b7:7a:
13:be:65:a9:c8:0c:d5:f0:c3:6a:d1:32:85:45:0d:
fd:bf:14:c4:06:7e:c0:29:b1:58:1f:c0:b7:ec:8d:
a3:91:c0:a9:af:45:57:a7:a3:7e:96:c5:d6:bf:41:
11:bb:73:fb:10:78:ab:18:12:da:41:ab:c0:5a:81:
60:de:ab:16:41:2c:bc:e4:dc:7b:bb:d1:45:9c:8d:
38:91:ff:3b:89:a4:bf:fb:e6:8d:08:33:0e:9f:e7:
0c:92:0f:bd:bb:78:8c:18:33:db:f9:a8:12:2c:ef:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:48:C3:77:58:27:93:11:4D:7D:5D:74:10:7B:84:75:D4:C0:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/080cb70a-3a5f-3c31-8837-b290c2bd5959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.130.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:2c:a9:2d:e4:85:88:6d:0f:81:7f:49:a6:ec:97:e6:66:6e:
da:70:a5:a2:b2:21:36:b1:02:06:73:d5:d3:43:34:a8:8b:64:
82:8a:94:04:8a:97:4c:46:b3:a6:ad:3a:f8:4d:5c:19:14:a8:
73:39:2b:52:9a:ba:16:8a:16:2a:ac:9d:74:61:9e:eb:8b:ea:
68:eb:36:f4:aa:5a:a2:3b:34:ee:e2:28:d0:e0:51:c1:3d:cb:
39:0c:12:95:76:a7:c3:d1:20:76:e9:03:0c:64:02:14:b2:fe:
26:ef:2c:6a:45:f0:ed:42:13:80:ca:43:80:3d:82:89:eb:64:
75:bd:69:6a:16:f9:37:e6:87:df:22:a1:2b:f5:49:49:52:bb:
85:2d:7e:0d:56:a9:52:62:16:cc:72:46:c0:91:48:15:2a:f3:
9b:11:e3:b1:9e:74:b2:30:0c:3e:6d:33:75:71:d9:ed:82:73:
e9:0e:da:4f:64:b1:84:a1:21:0d:ab:54:05:46:83:27:51:37:
60:07:35:c3:fe:3d:be:2c:49:29:5a:6c:86:80:05:a0:18:61:
0e:2b:89:0a:b2:75:89:6d:8d:8d:8b:e7:7e:80:08:74:9b:df:
f7:df:13:28:2c:c8:5f:36:de:90:8d:61:97:4c:8a:e2:24:44:
d5:ec:17:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9UApiybEb1reFkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZmEzOGYzNzQtMGYyMS00OThkLWJmNmItMDUxZmNiNTRiMDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG/H3cCao9gmB605/ynAXXTtPfVW/2LskftQ
ZHkGetlBbqaNDCiysMLbuTx4efbl6ZINLwQocQeFrFmBtx3d9jdhxJSfb6vpPXlt
w2TBhuBj9wx9mnjAL0hASbMScDjNESDMD9QXv94ljyu/i4IAHKuiLpynZ5QQI3+7
OEHgPMTGykYwhBOoUBnNFC3fm4hYNhYot3oTvmWpyAzV8MNq0TKFRQ39vxTEBn7A
KbFYH8C37I2jkcCpr0VXp6N+lsXWv0ERu3P7EHirGBLaQavAWoFg3qsWQSy85Nx7
u9FFnI04kf87iaS/++aNCDMOn+cMkg+9u3iMGDPb+agSLO8vEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcUSMN3WCeTEU19XXQQe4R11MDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDgwY2I3MGEtM2E1Zi0z
YzMxLTg4MzctYjI5MGMyYmQ1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIsqS3khYhtD4F/Sabsl+ZmbtpwpaKyITaxAgZz1dNDNKiLZIKKlASK
l0xGs6atOvhNXBkUqHM5K1KauhaKFiqsnXRhnuuL6mjrNvSqWqI7NO7iKNDgUcE9
yzkMEpV2p8PRIHbpAwxkAhSy/ibvLGpF8O1CE4DKQ4A9gonrZHW9aWoW+Tfmh98i
oSv1SUlSu4Utfg1WqVJiFsxyRsCRSBUq85sR47GedLIwDD5tM3Vx2e2Cc+kO2k9k
sYShIQ2rVAVGgydRN2AHNcP+Pb4sSSlabIaABaAYYQ4riQqydYltjY2L536ACHSb
3/ffEygsyF823pCNYZdMiuIkRNXsF3c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:10 2025 by rpki-client