Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa
File: 2d99e677-3ef8-3316-bf46-496cdddd10aa.roa (raw, json)
Hash identifier: yoncFB+arDI91LvjjEjBQwTB+ecveBXVG/Z4suBPceY=
Subject key identifier: 78:77:C8:40:61:22:53:2D:9C:14:02:49:4F:0E:28:36:04:89:86:43
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5066ED1E88A83A8DDBE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.243.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:06:6e:d1:e8:8a:83:a8:dd:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=d87995ec-c58e-4404-a7e9-5e012d48c0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cd:43:f7:f3:c8:ec:a7:6b:04:d1:b8:db:43:
6b:d8:af:dc:79:fa:28:15:49:7a:46:e2:02:bc:de:
b2:e1:d3:57:76:d0:1f:2c:6d:da:01:a6:0c:86:97:
4a:b0:96:62:62:45:ae:64:37:d9:21:ae:1f:dd:29:
ad:f1:58:e6:c8:51:22:8d:ae:63:ef:e7:83:14:12:
c4:ec:d2:b1:22:86:ed:8f:0a:ab:95:f8:8f:02:5c:
8e:82:3f:bb:0f:cb:2c:ef:c8:ec:ac:51:32:57:f6:
e8:c4:58:18:c4:4c:e4:f5:00:5f:7b:13:e0:de:8a:
62:c3:82:23:f0:ad:b1:97:53:38:69:ac:c9:24:ac:
fb:31:6e:7e:94:28:9d:6b:68:b7:e3:80:9f:93:4b:
c3:cd:7f:07:7c:ea:b1:a5:1e:68:a9:66:07:c8:cd:
25:75:9c:f6:25:66:24:aa:8b:9c:d7:9c:4e:a3:db:
2b:74:46:01:76:be:53:49:ef:a2:e6:5d:94:b6:dc:
3f:7a:b2:ff:9f:62:fc:5b:ba:a0:8d:14:52:cd:1c:
46:08:74:90:da:20:df:35:42:cf:35:5a:04:f1:cb:
ac:06:68:3a:00:a1:31:7f:52:38:dd:93:ad:01:89:
b3:5b:95:9d:d2:8f:99:31:d6:ae:41:a8:eb:ef:cb:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:C8:40:61:22:53:2D:9C:14:02:49:4F:0E:28:36:04:89:86:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.243.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:be:08:bd:c0:61:92:f2:44:03:35:a9:c1:ea:b5:89:e6:2d:
fd:68:f7:4e:0b:0d:b2:c3:94:fe:55:43:06:4a:82:a2:29:d1:
dc:01:96:20:c1:94:8e:eb:e5:d3:5e:e4:e9:ad:13:53:03:67:
30:f9:47:95:4b:3b:ba:97:26:bb:36:1a:4e:53:13:c3:97:d6:
67:3f:35:8c:9b:26:f9:31:33:5f:c0:4f:b9:ab:34:b9:53:3f:
9d:19:1c:49:e5:20:0e:11:bb:27:30:e7:cb:32:58:32:db:0c:
74:1b:9f:1a:99:3e:fd:c3:42:50:c6:a6:f6:bc:dd:22:90:42:
95:3f:bc:bf:c4:d2:0c:e4:86:71:77:ad:fa:8c:10:c4:e9:28:
bc:48:c9:96:7e:55:39:5c:49:0a:19:a0:ba:32:3b:e3:de:e2:
2e:4e:b8:3d:fb:f8:07:db:ae:b5:87:62:88:0c:f7:66:35:86:
1a:24:33:af:7d:24:39:4d:c8:05:f5:c8:ef:8a:bf:bf:45:c9:
e7:3f:ad:8a:23:5e:e9:6d:f4:47:13:ea:ed:11:3b:67:af:29:
c4:ed:bb:4b:34:48:2d:f8:86:96:e9:a3:9f:e2:71:a3:d2:f3:
74:ad:bc:f6:86:e2:19:f2:11:cd:e7:9f:93:cf:cf:50:3a:b8:
96:02:32:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QZu0eiKg6jdvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDg3OTk1ZWMtYzU4ZS00NDA0LWE3ZTktNWUwMTJkNDhjMGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs1D9/PI7KdrBNG420Nr2K/cefooFUl6RuIC
vN6y4dNXdtAfLG3aAaYMhpdKsJZiYkWuZDfZIa4f3Smt8VjmyFEija5j7+eDFBLE
7NKxIobtjwqrlfiPAlyOgj+7D8ss78jsrFEyV/boxFgYxEzk9QBfexPg3opiw4Ij
8K2xl1M4aazJJKz7MW5+lCida2i344Cfk0vDzX8HfOqxpR5oqWYHyM0ldZz2JWYk
qouc15xOo9srdEYBdr5TSe+i5l2Uttw/erL/n2L8W7qgjRRSzRxGCHSQ2iDfNULP
NVoE8cusBmg6AKExf1I43ZOtAYmzW5Wd0o+ZMdauQajr78uYdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHh3yEBhIlMtnBQCSU8OKDYEiYZDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ5OWU2NzctM2VmOC0z
MzE2LWJmNDYtNDk2Y2RkZGQxMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/OQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEW+CL3AYZLyRAM1qcHqtYnmLf1o904LDbLDlP5VQwZKgqIp0dwBliDB
lI7r5dNe5OmtE1MDZzD5R5VLO7qXJrs2Gk5TE8OX1mc/NYybJvkxM1/AT7mrNLlT
P50ZHEnlIA4Ruycw58syWDLbDHQbnxqZPv3DQlDGpva83SKQQpU/vL/E0gzkhnF3
rfqMEMTpKLxIyZZ+VTlcSQoZoLoyO+Pe4i5OuD37+AfbrrWHYogM92Y1hhokM699
JDlNyAX1yO+Kv79Fyec/rYojXult9EcT6u0RO2evKcTtu0s0SC34hpbpo5/icaPS
83StvPaG4hnyEc3nn5PPz1A6uJYCMpY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:03 2025 by rpki-client