Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255e07ea-e57d-3bf8-9871-e894ba43b380.roa
File: 255e07ea-e57d-3bf8-9871-e894ba43b380.roa (raw, json)
Hash identifier: 7CAfBdfNzDKe3UgzKVBqVrWRKMcVOSbNDovq30qfEps=
Subject key identifier: EA:17:80:D7:2A:9B:E5:25:2B:54:8C:23:16:0E:A0:AE:15:83:15:B2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5216D7BACACEF38362BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255e07ea-e57d-3bf8-9871-e894ba43b380.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.222.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:21:6d:7b:ac:ac:ef:38:36:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=77e8c2cf-48fe-4e77-8285-3ba2be76468b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:04:9f:d0:00:80:99:d7:35:8b:01:2f:fc:
d4:f7:e2:19:af:28:d9:48:05:b1:eb:05:92:17:bd:
7e:8a:90:ab:8a:94:96:4a:0a:9a:1e:08:10:33:29:
62:71:af:d4:3e:20:2b:12:b7:ef:a3:a3:c0:6b:69:
ef:19:86:ac:fd:8e:f5:d6:48:f3:7d:d8:67:e3:10:
75:22:06:4e:d1:48:4e:22:d5:26:8f:18:e3:fb:3a:
0b:0c:d5:b9:3e:11:80:99:9e:ef:c1:a1:7a:d4:9a:
46:9e:7e:4a:e8:54:83:d6:94:89:74:84:17:b6:b7:
5a:3d:d5:c1:d7:c7:28:31:0d:93:1a:ff:6e:1e:e8:
c0:3e:4e:45:71:96:1b:69:c1:dd:9f:81:07:2b:b9:
63:9a:e8:bb:25:38:b2:6c:c9:77:23:53:44:d4:ca:
df:4b:b9:2e:a2:39:3b:c0:7b:fa:47:d2:0c:4b:25:
2a:9b:d7:13:44:67:ab:63:a2:be:1a:dc:00:9b:d9:
9d:97:0b:e0:6a:a6:f0:b3:46:b3:85:d6:d3:06:07:
e0:1d:c3:65:59:ae:69:ae:40:7c:ca:5f:e4:ca:ec:
d1:b7:fa:80:d1:ca:ca:3f:6d:3e:9d:e8:da:9b:61:
bc:3f:68:d6:01:46:9c:a8:a5:86:a9:60:6e:bb:46:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:80:D7:2A:9B:E5:25:2B:54:8C:23:16:0E:A0:AE:15:83:15:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/255e07ea-e57d-3bf8-9871-e894ba43b380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:50:58:d3:9e:eb:dc:fe:13:42:69:8c:c7:d2:26:a9:71:7a:
6b:18:35:3e:05:80:dd:22:87:38:b4:32:d6:93:97:41:88:a9:
2e:27:9e:98:f4:24:ff:b8:a5:dc:5f:ea:fc:1b:e6:21:bb:bb:
af:02:3a:27:dd:c6:48:ad:64:a0:46:80:7c:4b:05:5f:1f:a1:
58:24:26:3f:a0:39:f1:2a:e7:72:b1:09:01:17:ea:00:f9:42:
f5:a8:78:a6:17:c9:8a:71:74:09:f8:66:ab:00:27:74:30:71:
4c:1e:09:ef:3c:3b:f7:d9:9a:6a:fd:ae:f2:f7:6e:3a:fb:ad:
39:7b:66:bd:62:0e:ae:f2:f9:2f:14:9c:db:dd:3a:ed:4c:91:
92:91:bf:15:7d:09:0a:0e:1f:fd:88:92:8d:26:7d:33:f8:29:
e9:0c:ef:9f:fa:25:da:73:b0:7f:58:7d:d7:db:0b:01:cc:80:
9e:77:f1:22:7d:a8:b2:96:8a:78:da:d6:5c:22:a2:2a:3e:76:
48:35:96:b9:ad:bc:8d:2e:4c:7f:f5:f7:d6:57:45:13:16:02:
5c:89:de:9a:9d:08:99:ac:9a:03:14:90:c4:b3:15:7c:d7:1c:
f3:f1:0d:2b:c3:bb:27:66:fc:20:03:bf:96:45:67:22:3e:96:
10:ad:59:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9SFte6ys7zg2K8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NzdlOGMyY2YtNDhmZS00ZTc3LTgyODUtM2JhMmJlNzY0NjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonEEn9AAgJnXNYsBL/zU9+IZryjZSAWx6wWS
F71+ipCripSWSgqaHggQMylica/UPiArErfvo6PAa2nvGYas/Y711kjzfdhn4xB1
IgZO0UhOItUmjxjj+zoLDNW5PhGAmZ7vwaF61JpGnn5K6FSD1pSJdIQXtrdaPdXB
18coMQ2TGv9uHujAPk5FcZYbacHdn4EHK7ljmui7JTiybMl3I1NE1MrfS7kuojk7
wHv6R9IMSyUqm9cTRGerY6K+GtwAm9mdlwvgaqbws0azhdbTBgfgHcNlWa5prkB8
yl/kyuzRt/qA0crKP20+nejam2G8P2jWAUacqKWGqWBuu0byvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOoXgNcqm+UlK1SMIxYOoK4VgxWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjU1ZTA3ZWEtZTU3ZC0z
YmY4LTk4NzEtZTg5NGJhNDNiMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9QWNOe69z+E0JpjMfSJqlxemsYNT4FgN0ihzi0MtaTl0GIqS4nnpj0
JP+4pdxf6vwb5iG7u68COifdxkitZKBGgHxLBV8foVgkJj+gOfEq53KxCQEX6gD5
QvWoeKYXyYpxdAn4ZqsAJ3QwcUweCe88O/fZmmr9rvL3bjr7rTl7Zr1iDq7y+S8U
nNvdOu1MkZKRvxV9CQoOH/2Iko0mfTP4KekM75/6JdpzsH9YfdfbCwHMgJ538SJ9
qLKWinja1lwioio+dkg1lrmtvI0uTH/199ZXRRMWAlyJ3pqdCJmsmgMUkMSzFXzX
HPPxDSvDuydm/CADv5ZFZyI+lhCtWZo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:35 2025 by rpki-client