Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32878c9e-2fb3-3e42-95a5-bb2750b80936.roa
File: 32878c9e-2fb3-3e42-95a5-bb2750b80936.roa (raw, json)
Hash identifier: Y7qWDvRekM/biZUhcY/Q+8RvErLIPCP2TVqwiOsDjDg=
Subject key identifier: A9:F3:A7:16:96:FD:2F:D7:DF:79:A1:C5:20:6E:A1:4E:B2:D6:A4:90
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F518EB540DDA265876E100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32878c9e-2fb3-3e42-95a5-bb2750b80936.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.225.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:18:eb:54:0d:da:26:58:76:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=76affbc2-21d3-4b51-b885-6d9207247d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:8b:8d:70:77:ad:23:94:b0:71:b1:99:67:
ba:a6:eb:5f:87:7b:8b:63:48:13:6d:6b:3e:02:df:
d7:54:59:0c:9a:3b:bb:4c:ae:01:48:55:0e:68:7e:
50:16:6f:69:32:e9:1a:a8:4c:7f:4c:f8:52:de:0e:
ce:93:d0:f7:1f:61:81:f7:b5:c6:f5:7d:05:3c:51:
d8:c8:02:54:01:34:70:e7:e8:24:f5:69:da:d5:68:
4e:ca:43:a6:77:c4:3c:9a:b3:80:8f:be:a5:84:ae:
6d:fe:0b:92:19:f0:e8:09:ff:12:bc:d7:08:39:8f:
cc:56:b6:20:af:94:4e:6b:a5:8e:33:40:aa:69:3e:
9b:a9:00:1e:13:86:a9:ab:f9:2b:74:41:b6:9d:64:
3a:eb:19:5e:cc:d3:86:25:38:ab:fa:bf:f4:d6:9e:
81:c9:ad:fc:cd:07:80:16:fd:d9:ec:3d:f6:6c:68:
2b:34:d8:13:fc:8f:6b:33:f0:ed:ba:49:f3:92:2f:
15:01:d2:c5:9d:f9:53:74:cc:8c:40:3f:93:de:51:
aa:8c:a7:d3:14:f7:57:d6:7e:9c:34:45:21:09:5a:
8f:00:49:58:b5:ae:be:18:a6:b9:18:84:08:40:9a:
15:b8:24:4d:14:4d:10:d7:00:26:25:3b:21:1d:47:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:A7:16:96:FD:2F:D7:DF:79:A1:C5:20:6E:A1:4E:B2:D6:A4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32878c9e-2fb3-3e42-95a5-bb2750b80936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.225.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:53:e6:3f:c9:91:0e:7b:2c:8b:f3:ad:22:49:8e:36:a2:87:
cd:47:f3:54:ee:94:31:6d:49:f8:d8:ca:54:23:1f:e0:85:a7:
46:5e:d9:a0:8a:e1:eb:ed:69:9d:19:ed:17:d4:fa:2b:c1:98:
22:56:ff:17:6a:4f:ac:58:70:59:d9:9a:3f:07:95:3c:08:e2:
4f:36:26:75:3c:66:27:10:1e:15:fb:57:7b:a2:5e:8e:f4:6e:
ff:8a:eb:4d:29:f2:c2:2b:45:51:9b:16:04:e7:e2:f5:3d:f7:
db:7d:f8:66:1c:48:12:10:5f:86:b4:ca:3c:1d:7b:76:c6:06:
55:14:21:51:c2:fd:87:c9:e7:d0:98:62:31:3e:c9:22:2e:04:
d3:68:df:89:48:65:49:e5:58:0d:a3:9a:22:16:0d:13:a8:55:
74:a0:97:a3:04:58:37:f3:f5:01:a2:d7:bd:16:9e:3e:b3:18:
ef:f9:c8:49:c5:3f:0d:0f:d1:d9:09:7c:4d:6f:f7:9a:52:9b:
1c:0c:e3:da:e2:63:9f:44:3d:a3:39:16:11:7f:a6:63:eb:28:
68:c0:5d:0e:7a:28:4c:1b:4a:2f:ff:fc:11:db:4d:c1:e0:99:
63:bc:14:fa:63:fd:28:43:80:36:c3:0e:c0:7d:5b:02:19:23:
f1:e5:78:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RjrVA3aJlh24QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NzZhZmZiYzItMjFkMy00YjUxLWI4ODUtNmQ5MjA3MjQ3ZDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv6LjXB3rSOUsHGxmWe6putfh3uLY0gTbWs+
At/XVFkMmju7TK4BSFUOaH5QFm9pMukaqEx/TPhS3g7Ok9D3H2GB97XG9X0FPFHY
yAJUATRw5+gk9Wna1WhOykOmd8Q8mrOAj76lhK5t/guSGfDoCf8SvNcIOY/MVrYg
r5ROa6WOM0CqaT6bqQAeE4apq/krdEG2nWQ66xlezNOGJTir+r/01p6Bya38zQeA
Fv3Z7D32bGgrNNgT/I9rM/Dtuknzki8VAdLFnflTdMyMQD+T3lGqjKfTFPdX1n6c
NEUhCVqPAElYta6+GKa5GIQIQJoVuCRNFE0Q1wAmJTshHUcdHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnzpxaW/S/X33mhxSBuoU6y1qSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzI4NzhjOWUtMmZiMy0z
ZTQyLTk1YTUtYmIyNzUwYjgwOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+HwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxT5j/JkQ57LIvzrSJJjjaih81H81TulDFtSfjYylQjH+CFp0Ze2aCK
4evtaZ0Z7RfU+ivBmCJW/xdqT6xYcFnZmj8HlTwI4k82JnU8ZicQHhX7V3uiXo70
bv+K600p8sIrRVGbFgTn4vU999t9+GYcSBIQX4a0yjwde3bGBlUUIVHC/YfJ59CY
YjE+ySIuBNNo34lIZUnlWA2jmiIWDROoVXSgl6MEWDfz9QGi170Wnj6zGO/5yEnF
Pw0P0dkJfE1v95pSmxwM49riY59EPaM5FhF/pmPrKGjAXQ56KEwbSi///BHbTcHg
mWO8FPpj/ShDgDbDDsB9WwIZI/HlePM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:55 2025 by rpki-client