Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23c1a535-e604-35c1-a24f-840497684ca7.roa
File: 23c1a535-e604-35c1-a24f-840497684ca7.roa (raw, json)
Hash identifier: 1YSoKmVjCkmKdx8ih/fUzevC0BAor6o+fWpTm18mvWc=
Subject key identifier: 28:FC:D3:56:C4:A1:9C:E9:B1:4D:2A:B1:FE:92:68:C2:84:6A:AA:3F
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F535858424CF15C5613E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23c1a535-e604-35c1-a24f-840497684ca7.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.245.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:35:85:84:24:cf:15:c5:61:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=a2b1403e-cc5b-4bdd-a1f9-b214f9b26981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:84:17:69:94:60:3d:f2:24:6b:5a:9c:6e:
d5:a2:55:70:71:7d:f3:80:b1:b5:8b:b3:90:34:33:
7e:22:3a:30:f7:03:b2:12:9c:bb:b8:96:70:b4:e9:
39:45:87:89:5b:ac:bd:9a:e5:66:bd:1c:70:c7:2e:
60:47:f3:58:b5:93:05:29:55:e5:81:ea:07:de:22:
b8:90:40:03:55:71:07:a8:0c:cb:08:da:f4:b8:11:
8d:80:48:e9:b8:69:99:04:9c:fe:52:68:3d:2b:b0:
60:96:7c:13:2a:44:96:70:0f:c1:6a:53:68:77:77:
f1:ab:a9:4d:84:bb:89:7c:60:fd:55:bc:dd:59:52:
50:42:bf:e3:8d:81:c1:c4:44:46:59:53:16:ff:79:
ec:3c:2b:3b:4f:50:03:77:b4:b8:4d:a3:ad:f4:f1:
fd:83:da:d6:92:e5:28:2b:bf:5a:f4:76:14:5d:4c:
9a:d7:06:81:8c:c8:7f:ad:30:ff:39:3c:91:2e:84:
ed:33:e0:0c:a0:8d:7d:8f:79:38:37:95:1b:76:b4:
8a:ad:2c:df:fd:d5:b0:35:39:c8:21:21:6d:70:93:
12:79:09:75:42:08:45:3c:20:b4:0f:9f:8c:ef:48:
b2:c2:68:bc:69:73:5d:22:40:9f:8b:3b:36:7f:69:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FC:D3:56:C4:A1:9C:E9:B1:4D:2A:B1:FE:92:68:C2:84:6A:AA:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23c1a535-e604-35c1-a24f-840497684ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2f:bd:d9:32:80:1c:3a:00:29:25:c9:81:2d:17:3f:31:f5:
6f:04:ee:0a:e2:3e:57:5e:fc:0b:17:2a:f8:cc:7d:28:c8:0c:
37:41:d8:2f:9a:6d:60:f6:fd:43:5d:4e:a8:7b:2d:9b:4a:1e:
20:f2:17:88:72:3a:44:3e:6d:8e:4a:7e:88:cb:33:06:69:a3:
f4:a5:c0:a9:26:ec:34:1b:eb:a6:b8:36:05:39:6a:52:c9:06:
e6:d8:dc:1a:94:a9:7b:56:7b:56:1c:e6:ef:8c:8c:ee:9c:66:
3a:ca:a3:b3:d7:75:73:9f:cd:f7:2b:f0:58:76:2d:6d:33:a5:
09:b6:36:9e:25:7f:d6:cd:78:ab:b4:61:eb:be:14:17:94:d9:
e8:b5:bc:bf:87:2e:66:13:2d:80:18:ce:74:e7:dc:c4:1e:3b:
a8:d5:af:8e:bc:66:52:9f:c6:c9:cc:79:bb:41:de:77:1f:10:
5c:81:19:6b:ed:2b:79:15:9b:09:ba:de:a6:e2:be:1e:5d:af:
a2:da:64:80:27:ed:57:f6:f6:63:12:fd:a1:91:0b:6a:50:26:
81:e4:f5:18:80:7d:55:fb:88:7e:4c:ed:f3:2c:79:d0:98:a5:
97:d8:15:c9:92:98:4b:74:59:f6:46:9b:65:cd:eb:9c:e8:23:
9c:a0:d9:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TWFhCTPFcVhPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YTJiMTQwM2UtY2M1Yi00YmRkLWExZjktYjIxNGY5YjI2OTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5iEF2mUYD3yJGtanG7VolVwcX3zgLG1i7OQ
NDN+Ijow9wOyEpy7uJZwtOk5RYeJW6y9muVmvRxwxy5gR/NYtZMFKVXlgeoH3iK4
kEADVXEHqAzLCNr0uBGNgEjpuGmZBJz+Umg9K7BglnwTKkSWcA/BalNod3fxq6lN
hLuJfGD9VbzdWVJQQr/jjYHBxERGWVMW/3nsPCs7T1ADd7S4TaOt9PH9g9rWkuUo
K79a9HYUXUya1waBjMh/rTD/OTyRLoTtM+AMoI19j3k4N5UbdrSKrSzf/dWwNTnI
ISFtcJMSeQl1QghFPCC0D5+M70iywmi8aXNdIkCfizs2f2nRXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCj801bEoZzpsU0qsf6SaMKEaqo/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNjMWE1MzUtZTYwNC0z
NWMxLWEyNGYtODQwNDk3Njg0Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/WgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYvvdkygBw6ACklyYEtFz8x9W8E7griPlde/AsXKvjMfSjIDDdB2C+a
bWD2/UNdTqh7LZtKHiDyF4hyOkQ+bY5KfojLMwZpo/SlwKkm7DQb66a4NgU5alLJ
BubY3BqUqXtWe1Yc5u+MjO6cZjrKo7PXdXOfzfcr8Fh2LW0zpQm2Np4lf9bNeKu0
Yeu+FBeU2ei1vL+HLmYTLYAYznTn3MQeO6jVr468ZlKfxsnMebtB3ncfEFyBGWvt
K3kVmwm63qbivh5dr6LaZIAn7Vf29mMS/aGRC2pQJoHk9RiAfVX7iH5M7fMsedCY
pZfYFcmSmEt0WfZGm2XN65zoI5yg2UE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:07 2025 by rpki-client