Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3123dae0-66dd-3399-a6ac-be3aba46a983.roa
File: 3123dae0-66dd-3399-a6ac-be3aba46a983.roa (raw, json)
Hash identifier: g2yk/fP4ZpBkaJyzI6z4ytYSkY0dUzUeuYJ4aA6vlMw=
Subject key identifier: BF:14:93:7B:BF:30:41:70:51:E4:28:1F:19:AD:D5:CF:51:C8:B7:D3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AA5F0156F4178A9CA1200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3123dae0-66dd-3399-a6ac-be3aba46a983.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 34.108.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a5:f0:15:6f:41:78:a9:ca:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=af06e533-587c-4b91-bfa9-b7dbee2b4fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:ca:d9:0a:a6:35:06:99:73:d0:32:8b:cd:
d8:71:a1:f1:74:d2:b4:6a:3c:b1:10:97:94:af:f1:
3b:ee:59:36:c6:ee:01:62:93:76:dc:9d:26:5d:43:
65:96:5c:a7:99:e6:39:67:d2:a7:bc:a1:1d:4d:9f:
5d:35:a7:46:6c:c3:f5:04:1a:8b:0a:79:ec:ad:bd:
0c:17:a7:1c:bb:31:e4:0d:d7:03:83:5d:f8:23:4b:
b5:55:85:5f:aa:22:ec:f7:04:73:b7:da:07:7f:3e:
76:1d:85:cb:b7:a8:01:a7:c2:72:88:6b:36:34:ba:
a6:be:9a:35:bc:29:b1:a7:6b:23:8c:aa:87:cf:7f:
7d:33:a5:39:39:2c:6f:ac:87:73:03:0e:e1:6b:70:
dc:47:9a:7c:2d:43:b3:cf:fd:6d:e2:aa:95:de:8f:
b1:51:9d:8d:4f:01:1d:f9:51:00:78:28:aa:cf:60:
5b:d3:dc:1a:57:52:90:e2:58:ae:9f:3a:04:c5:c8:
20:9c:8a:dd:30:ef:9c:3e:d5:56:0a:19:ef:15:c7:
cd:d3:33:42:45:77:90:ba:e2:20:07:62:ef:91:94:
8c:44:dc:6d:15:60:d4:dd:38:01:0f:b5:1d:14:62:
f7:a0:4d:bc:ad:42:4c:5a:76:15:ed:4b:b8:0f:79:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:93:7B:BF:30:41:70:51:E4:28:1F:19:AD:D5:CF:51:C8:B7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3123dae0-66dd-3399-a6ac-be3aba46a983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7d:52:a1:2a:52:67:df:1b:3e:af:b9:81:70:77:9b:51:97:
2e:95:2d:5b:9d:01:0a:4b:e4:38:f3:66:f0:4f:85:54:16:71:
a4:2d:e1:ae:63:ef:e4:a6:80:8a:44:38:2b:75:57:57:e3:8f:
5f:b7:e0:ba:27:4d:f3:12:b5:ca:70:44:56:52:6d:c8:a3:34:
cc:ee:a4:02:91:31:d7:fd:33:1f:30:b4:46:58:a0:bf:4e:00:
4f:39:43:1e:3b:c2:19:39:03:ba:cb:1a:86:c7:9f:24:e6:a6:
38:4a:34:b9:ec:c8:20:89:2f:8c:2d:be:da:1a:a3:64:b4:15:
c2:dd:47:ad:02:19:84:23:c4:74:04:df:7d:f3:35:67:44:34:
d0:35:f3:be:a3:0a:2d:1d:b4:10:2b:5e:34:74:14:6d:35:9d:
9d:4d:73:9a:69:fd:b0:61:b8:1a:12:fd:28:6e:42:80:57:62:
07:69:5d:11:bc:29:7c:6b:f0:af:f2:e6:d0:35:c4:d2:03:85:
9b:bb:01:a2:f8:55:c5:b5:3a:81:9c:ee:93:b6:20:d3:9e:1f:
01:fb:d9:21:24:06:0b:49:74:60:df:9e:7b:d0:8c:db:b0:7e:
22:73:2f:56:eb:1c:2e:3a:20:aa:b3:01:f6:43:b1:54:d6:1c:
c9:10:5b:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqXwFW9BeKnKEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YWYwNmU1MzMtNTg3Yy00YjkxLWJmYTktYjdkYmVlMmI0ZmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6XK2QqmNQaZc9Ayi83YcaHxdNK0ajyxEJeU
r/E77lk2xu4BYpN23J0mXUNlllynmeY5Z9KnvKEdTZ9dNadGbMP1BBqLCnnsrb0M
F6ccuzHkDdcDg134I0u1VYVfqiLs9wRzt9oHfz52HYXLt6gBp8JyiGs2NLqmvpo1
vCmxp2sjjKqHz399M6U5OSxvrIdzAw7ha3DcR5p8LUOzz/1t4qqV3o+xUZ2NTwEd
+VEAeCiqz2Bb09waV1KQ4liunzoExcggnIrdMO+cPtVWChnvFcfN0zNCRXeQuuIg
B2LvkZSMRNxtFWDU3TgBD7UdFGL3oE28rUJMWnYV7Uu4D3lr8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8Uk3u/MEFwUeQoHxmt1c9RyLfTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzEyM2RhZTAtNjZkZC0z
Mzk5LWE2YWMtYmUzYWJhNDZhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFF9UqEqUmffGz6vuYFwd5tRly6VLVudAQpL5DjzZvBPhVQWcaQt4a5j
7+SmgIpEOCt1V1fjj1+34LonTfMStcpwRFZSbcijNMzupAKRMdf9Mx8wtEZYoL9O
AE85Qx47whk5A7rLGobHnyTmpjhKNLnsyCCJL4wtvtoao2S0FcLdR60CGYQjxHQE
333zNWdENNA1876jCi0dtBArXjR0FG01nZ1Nc5pp/bBhuBoS/ShuQoBXYgdpXRG8
KXxr8K/y5tA1xNIDhZu7AaL4VcW1OoGc7pO2INOeHwH72SEkBgtJdGDfnnvQjNuw
fiJzL1brHC46IKqzAfZDsVTWHMkQW78=
-----END CERTIFICATE-----
Generated at Fri May 9 19:53:07 2025 by rpki-client