Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa
File: 3522a44b-9834-3ba3-bf38-77634819db56.roa (raw, json)
Hash identifier: jHJXkk6+DapbEOVBiou8R/nZ7KoTHhNoEbuV4o90ZzQ=
Subject key identifier: 0C:DA:2C:A2:6C:E4:40:CE:5E:A1:5A:8A:43:97:23:96:BA:8F:2E:BD
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4FCE1E901AAEEBCEF1500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.72.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:fc:e1:e9:01:aa:ee:bc:ef:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=bd7f823e-c843-477a-bae6-74ddf8e593d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:c0:cd:8c:99:96:cc:93:b6:f6:0a:49:d7:
f8:4a:3e:04:69:b1:4b:db:24:ba:aa:65:45:2e:93:
cc:76:65:5a:89:37:43:8f:5e:fd:f8:9c:6a:86:b3:
5c:f9:95:03:78:e8:06:94:15:6f:e2:8b:d2:a2:ef:
b2:1f:ce:f4:ef:89:35:3e:9a:2c:9a:c7:f4:18:23:
07:e7:64:f1:dd:cb:10:7a:de:f4:5a:bc:bf:96:4e:
81:cf:18:02:a9:0b:18:06:c9:d5:c2:93:a2:0d:7d:
d3:d3:b0:48:e0:d3:64:3e:61:24:82:45:9c:b5:ed:
e8:8b:db:eb:c0:d9:b9:52:1f:0a:90:d2:c9:6b:3e:
27:99:cd:9f:92:b1:95:17:aa:01:72:bb:dd:22:94:
f7:a8:9e:9e:c8:df:9a:a7:b7:32:74:b7:ce:cd:81:
db:9c:57:81:af:19:f8:11:d7:d5:e0:cf:33:8a:20:
5f:a8:7f:92:34:8f:55:4d:63:ab:74:95:05:66:77:
f4:67:90:00:3f:58:21:4f:e7:28:5d:41:06:fd:0a:
df:ee:8d:e5:ea:31:76:ab:d4:7f:ba:f2:c5:c8:ff:
cf:e3:0c:e9:26:95:9e:29:76:6f:ff:6b:a5:8f:06:
16:fd:7b:46:a9:c9:5a:b7:57:0d:97:5c:e5:98:77:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:2C:A2:6C:E4:40:CE:5E:A1:5A:8A:43:97:23:96:BA:8F:2E:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3522a44b-9834-3ba3-bf38-77634819db56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:34:4c:06:f7:b6:79:f0:7e:bd:b6:3e:dd:b9:b7:0f:f0:1a:
35:60:2d:c9:3b:4a:61:79:9a:20:2e:ab:11:87:50:29:c6:fd:
7b:3e:8f:b4:72:56:7e:d2:74:78:ce:60:18:83:9b:dc:1b:43:
df:c4:aa:a9:5a:e3:03:f0:10:3c:26:e4:91:af:fa:b6:b8:ce:
0b:09:5d:c3:31:6b:f9:fe:1f:8f:fd:78:03:3e:c7:d2:c6:1a:
bd:5d:ef:19:9a:15:0e:c3:ff:a3:a1:17:4c:79:7c:99:bf:ef:
0b:f8:94:2d:7e:40:42:31:d5:0f:36:72:40:0e:d2:77:39:07:
54:76:9d:d2:e4:3c:7f:d5:6e:ee:d5:ee:59:05:be:40:1e:cf:
e0:8f:a9:03:fb:6d:fb:ba:64:74:a5:7f:84:ef:12:81:1a:77:
bb:50:a4:72:71:51:e9:ea:3a:cf:75:d5:b1:38:a2:3e:39:76:
55:e3:d8:61:34:f1:fb:da:9d:38:17:e4:66:ae:c3:f5:dd:3b:
dc:2b:ed:62:31:43:1f:39:c8:5b:fb:9c:e1:60:4a:aa:fb:3b:
c7:08:0e:2b:38:0d:8a:ca:c9:f6:8c:fa:e6:cf:ee:38:42:5f:
27:54:88:bb:08:a0:ba:bb:5a:13:d8:0b:0d:45:19:cd:f2:19:
e5:bb:01:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Pzh6QGq7rzvFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YmQ3ZjgyM2UtYzg0My00NzdhLWJhZTYtNzRkZGY4ZTU5M2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirrAzYyZlsyTtvYKSdf4Sj4EabFL2yS6qmVF
LpPMdmVaiTdDj179+JxqhrNc+ZUDeOgGlBVv4ovSou+yH87074k1Pposmsf0GCMH
52Tx3csQet70Wry/lk6BzxgCqQsYBsnVwpOiDX3T07BI4NNkPmEkgkWcte3oi9vr
wNm5Uh8KkNLJaz4nmc2fkrGVF6oBcrvdIpT3qJ6eyN+ap7cydLfOzYHbnFeBrxn4
EdfV4M8ziiBfqH+SNI9VTWOrdJUFZnf0Z5AAP1ghT+coXUEG/Qrf7o3l6jF2q9R/
uvLFyP/P4wzpJpWeKXZv/2uljwYW/XtGqclat1cNl1zlmHeTDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzaLKJs5EDOXqFaikOXI5a6jy69MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzUyMmE0NGItOTgzNC0z
YmEzLWJmMzgtNzc2MzQ4MTlkYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACM0TAb3tnnwfr22Pt25tw/wGjVgLck7SmF5miAuqxGHUCnG/Xs+j7Ry
Vn7SdHjOYBiDm9wbQ9/Eqqla4wPwEDwm5JGv+ra4zgsJXcMxa/n+H4/9eAM+x9LG
Gr1d7xmaFQ7D/6OhF0x5fJm/7wv4lC1+QEIx1Q82ckAO0nc5B1R2ndLkPH/Vbu7V
7lkFvkAez+CPqQP7bfu6ZHSlf4TvEoEad7tQpHJxUenqOs911bE4oj45dlXj2GE0
8fvanTgX5Gauw/XdO9wr7WIxQx85yFv7nOFgSqr7O8cIDis4DYrKyfaM+ubP7jhC
XydUiLsIoLq7WhPYCw1FGc3yGeW7AWc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:17 2025 by rpki-client