Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa
File: 1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa (raw, json)
Hash identifier: JxH6OBLswrwyz4Y+rEQgwyB0pdBCQvI8Zk7ykXeXbMM=
Subject key identifier: E7:71:90:EA:CF:7C:18:A4:91:63:0E:68:0A:37:D0:0F:84:65:71:48
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AB47BC6BC7948ACD75D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.122.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b4:7b:c6:bc:79:48:ac:d7:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e0f1f54f-b1ee-4599-88d5-3d80b8909e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:74:73:5d:9f:aa:b0:a5:19:92:3a:17:d3:
c3:73:4e:f4:3e:de:dc:e6:bf:2c:80:32:00:a4:e6:
14:7e:66:68:c8:c3:e5:13:1a:1d:3d:6a:ce:f4:18:
e2:5e:1a:aa:46:b3:5d:77:26:0d:08:0c:09:17:d9:
ab:28:73:7e:13:c2:9c:15:2b:b4:87:b0:e8:c4:66:
6e:21:e6:29:86:3a:b6:4d:39:4f:8e:c3:de:0a:9a:
95:56:fc:ae:c1:c3:3d:8c:cb:8f:5a:d8:9d:7e:f5:
01:a2:ef:aa:b0:d5:7c:30:f6:4a:61:75:00:c8:94:
b4:8e:4f:80:24:71:a5:4d:f1:91:7d:ae:93:e9:94:
f6:09:b3:57:30:30:25:78:97:9c:a7:56:37:68:f2:
bd:96:3b:72:1b:51:b1:c9:b3:26:32:d4:1a:44:89:
c6:5a:a9:c3:34:9d:41:7f:22:62:a7:ea:de:4e:b3:
79:18:ca:45:02:21:d8:d3:8b:1f:40:2d:89:24:fa:
00:3d:6f:94:9a:fd:c8:a2:84:93:6d:6d:5d:db:6b:
2e:46:f4:08:3e:f1:f2:28:67:e8:e5:cd:7a:87:c7:
c0:17:08:b1:54:90:b6:66:39:10:a8:ed:64:f6:fe:
75:b5:5c:4e:9d:41:58:34:c1:33:c7:1c:8b:58:b3:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:90:EA:CF:7C:18:A4:91:63:0E:68:0A:37:D0:0F:84:65:71:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d8cd703-c00e-3fe5-8a01-cabe76c4850a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.122.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:8c:33:db:b9:79:89:f3:a2:d7:b7:e2:32:a7:81:f6:7a:2c:
5a:15:c1:18:80:70:56:ff:8f:e6:b4:b3:ef:f9:cd:c5:2f:65:
4c:bd:9c:15:c6:c1:66:fe:e1:11:a5:75:cd:dc:6e:cc:84:ea:
48:ac:8d:47:50:45:1b:82:47:02:7b:a5:b9:f7:ce:d5:35:49:
33:90:17:56:fa:66:59:8b:ea:b8:b9:43:7f:a5:4c:2f:c7:42:
03:2c:a4:c9:0d:24:e3:db:7f:d4:81:40:a0:4b:ff:72:c9:7e:
b4:7c:11:ab:87:f6:7d:cd:93:de:67:79:23:75:0f:21:ed:46:
aa:2b:ad:d5:c5:0a:da:b8:da:1c:ee:e0:07:a4:40:2c:0e:d2:
7c:19:d5:3c:c4:61:e4:92:15:d6:2d:a9:3e:63:a1:e2:f2:3b:
05:9a:0b:a9:41:94:27:98:27:84:bb:3c:59:21:65:3a:db:75:
07:e0:a3:6c:ef:70:bb:84:86:30:9f:bf:8a:5d:3e:b5:ec:0f:
e1:a6:df:6c:13:b7:1f:de:c0:85:cc:8c:fb:f5:57:74:58:20:
8a:cb:5a:02:ad:1d:0c:f5:f1:a5:e4:04:96:28:30:30:11:15:
c1:a2:74:b9:06:c4:5f:b1:00:d6:41:70:9a:15:27:ea:c1:58:
43:db:ad:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKrR7xrx5SKzXXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTBmMWY1NGYtYjFlZS00NTk5LTg4ZDUtM2Q4MGI4OTA5ZTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxht0c12fqrClGZI6F9PDc070Pt7c5r8sgDIA
pOYUfmZoyMPlExodPWrO9BjiXhqqRrNddyYNCAwJF9mrKHN+E8KcFSu0h7DoxGZu
IeYphjq2TTlPjsPeCpqVVvyuwcM9jMuPWtidfvUBou+qsNV8MPZKYXUAyJS0jk+A
JHGlTfGRfa6T6ZT2CbNXMDAleJecp1Y3aPK9ljtyG1GxybMmMtQaRInGWqnDNJ1B
fyJip+reTrN5GMpFAiHY04sfQC2JJPoAPW+Umv3IooSTbW1d22suRvQIPvHyKGfo
5c16h8fAFwixVJC2ZjkQqO1k9v51tVxOnUFYNMEzxxyLWLOQWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdxkOrPfBikkWMOaAo30A+EZXFIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ4Y2Q3MDMtYzAwZS0z
ZmU1LThhMDEtY2FiZTc2YzQ4NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2MM9u5eYnzote34jKngfZ6LFoVwRiAcFb/j+a0s+/5zcUvZUy9nBXG
wWb+4RGldc3cbsyE6kisjUdQRRuCRwJ7pbn3ztU1STOQF1b6ZlmL6ri5Q3+lTC/H
QgMspMkNJOPbf9SBQKBL/3LJfrR8EauH9n3Nk95neSN1DyHtRqorrdXFCtq42hzu
4AekQCwO0nwZ1TzEYeSSFdYtqT5joeLyOwWaC6lBlCeYJ4S7PFkhZTrbdQfgo2zv
cLuEhjCfv4pdPrXsD+Gm32wTtx/ewIXMjPv1V3RYIIrLWgKtHQz18aXkBJYoMDAR
FcGidLkGxF+xANZBcJoVJ+rBWEPbrTM=
-----END CERTIFICATE-----
Generated at Thu May 8 12:41:33 2025 by rpki-client