Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16390bf0-86cd-3461-ab37-7d9c65668cce.roa
File: 16390bf0-86cd-3461-ab37-7d9c65668cce.roa (raw, json)
Hash identifier: MvaObll4gKdeakJELkPuyHRvpfbOYkHt9KF6odjMlnk=
Subject key identifier: C6:4A:FA:CE:45:2A:14:0C:AE:BD:87:27:49:FE:97:A5:C9:59:33:9E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5064031641D516D9FC800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16390bf0-86cd-3461-ab37-7d9c65668cce.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.222.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:06:40:31:64:1d:51:6d:9f:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=49da3093-8060-4833-b641-1207792b242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:4b:13:6a:70:10:79:dc:b8:3a:7f:bb:d7:
34:9e:2e:4c:f7:1f:6a:c4:3e:89:be:14:ab:0b:b3:
8d:37:23:f8:c3:bc:08:5b:0f:04:0e:5b:8d:71:1e:
35:4f:f5:61:19:b7:38:6d:56:bf:05:6a:54:25:bc:
d4:c6:fa:95:d8:ae:c7:2c:c5:03:be:32:b7:94:9a:
13:d7:52:3c:6a:fd:ef:95:94:ad:d2:3e:c8:8c:1d:
b2:a8:71:53:ca:ec:19:52:2c:c5:f3:f9:bb:ba:76:
5a:41:c2:5c:54:bf:d3:2e:1e:60:f1:f8:b9:25:f5:
18:e0:95:1c:33:81:be:37:71:e3:e1:b8:82:13:ec:
90:06:4e:d6:6d:5f:b3:ee:f9:6c:c6:fc:6f:74:8d:
94:87:5b:4c:f5:05:f7:64:ab:f6:2b:f3:8e:a9:3f:
41:71:47:dc:ba:fc:a9:a0:fe:fb:1e:23:24:b9:ba:
eb:62:34:e3:61:e0:b3:2a:4d:c7:fe:fb:17:ca:fc:
d9:fc:f5:78:5e:19:6c:bc:21:b2:20:32:52:59:cd:
42:1b:b8:25:9f:16:fe:3d:68:81:b4:89:fb:9b:c6:
5d:2b:17:a8:79:7d:9f:61:ba:31:48:33:07:f5:de:
1a:30:95:83:53:f2:b6:2a:bb:6d:93:58:a9:8d:54:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:FA:CE:45:2A:14:0C:AE:BD:87:27:49:FE:97:A5:C9:59:33:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16390bf0-86cd-3461-ab37-7d9c65668cce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:62:39:12:62:ff:90:4c:36:eb:46:79:5f:a9:28:e5:6d:a7:
8a:3d:f2:51:0d:51:8d:1e:17:df:9f:55:b1:65:0b:75:b3:1f:
34:16:fe:c4:ce:b7:6c:6e:b7:b2:1b:c9:0a:a1:99:1a:6b:a0:
b5:79:64:55:de:0e:d8:ac:66:12:94:86:0b:c2:06:d5:9a:28:
80:2f:26:99:f1:a9:63:4a:81:09:99:f4:23:62:20:d5:59:88:
81:b4:0c:22:3d:73:cb:f9:0a:e5:45:cd:a0:7d:e1:76:cb:9b:
29:93:e5:3e:a2:1d:09:32:3d:97:9d:ad:26:55:24:37:62:c2:
07:4a:dc:00:f0:03:5b:65:e4:ba:56:c3:ba:d1:25:6b:72:45:
d1:5b:b3:04:3d:22:bb:69:42:1f:40:6f:7c:12:37:d1:2e:80:
54:0c:9f:08:4f:41:d5:b6:ec:13:62:16:44:bc:9d:a1:58:cb:
59:cc:fc:b3:18:45:ea:a8:ad:62:bb:99:6d:db:0f:99:b4:0e:
4f:b6:aa:d7:96:17:91:2a:b2:90:c7:63:ae:46:41:f6:61:fa:
42:11:59:d8:b2:24:4d:49:d7:b8:f7:aa:6e:0e:79:a4:75:74:
83:9c:12:78:6a:d4:24:f3:9f:da:a7:a5:6b:a8:03:d3:30:aa:
63:03:d5:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QZAMWQdUW2fyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NDlkYTMwOTMtODA2MC00ODMzLWI2NDEtMTIwNzc5MmIyNDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvJLE2pwEHncuDp/u9c0ni5M9x9qxD6JvhSr
C7ONNyP4w7wIWw8EDluNcR41T/VhGbc4bVa/BWpUJbzUxvqV2K7HLMUDvjK3lJoT
11I8av3vlZSt0j7IjB2yqHFTyuwZUizF8/m7unZaQcJcVL/TLh5g8fi5JfUY4JUc
M4G+N3Hj4biCE+yQBk7WbV+z7vlsxvxvdI2Uh1tM9QX3ZKv2K/OOqT9BcUfcuvyp
oP77HiMkubrrYjTjYeCzKk3H/vsXyvzZ/PV4XhlsvCGyIDJSWc1CG7glnxb+PWiB
tIn7m8ZdKxeoeX2fYboxSDMH9d4aMJWDU/K2Krttk1ipjVRPgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZK+s5FKhQMrr2HJ0n+l6XJWTOeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTYzOTBiZjAtODZjZC0z
NDYxLWFiMzctN2Q5YzY1NjY4Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI954MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1iORJi/5BMNutGeV+pKOVtp4o98lENUY0eF9+fVbFlC3WzHzQW/sTO
t2xut7IbyQqhmRproLV5ZFXeDtisZhKUhgvCBtWaKIAvJpnxqWNKgQmZ9CNiINVZ
iIG0DCI9c8v5CuVFzaB94XbLmymT5T6iHQkyPZedrSZVJDdiwgdK3ADwA1tl5LpW
w7rRJWtyRdFbswQ9IrtpQh9Ab3wSN9EugFQMnwhPQdW27BNiFkS8naFYy1nM/LMY
ReqorWK7mW3bD5m0Dk+2qteWF5EqspDHY65GQfZh+kIRWdiyJE1J17j3qm4OeaR1
dIOcEnhq1CTzn9qnpWuoA9MwqmMD1Yw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:23 2025 by rpki-client