Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa
File: 3f975dce-d326-3c97-af36-d6b6f386d43d.roa (raw, json)
Hash identifier: TppI9410IuMQqEOFyVsVJT7NpuJITd8LBdO8ipW7Phw=
Subject key identifier: 6D:A7:2E:B7:E4:F5:28:97:35:19:E0:A0:81:5E:BF:48:A5:1F:C6:5D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F50BDCBB5E118E83158D40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.129.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:0b:dc:bb:5e:11:8e:83:15:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=3bc01c5f-6f03-47bf-b4d5-ab5ec92bba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:95:cc:8d:3a:5d:c2:35:65:75:c3:13:1b:
a8:17:9b:b2:a4:2c:c1:24:80:ed:aa:0b:cf:e6:a2:
6f:d8:68:e3:31:8a:31:4e:c8:2e:6f:91:37:96:48:
5e:08:28:e3:1d:f4:4f:d1:9a:29:08:60:88:87:b6:
e5:b3:66:3c:3b:d5:0e:60:aa:b5:9b:14:db:89:83:
28:df:a6:37:e7:ed:d4:db:e4:5a:39:a1:b4:ee:85:
de:19:a5:40:00:f4:40:e4:c4:3d:11:d9:f2:c8:d2:
30:84:46:0c:53:e4:16:8e:cc:2e:c0:44:3b:65:e5:
38:a3:ea:03:24:8b:a9:a1:8a:a0:ba:b4:a0:ca:65:
10:b2:39:39:b4:b1:2b:5d:73:2c:92:0a:6e:5c:75:
18:19:7d:ef:a5:62:99:85:61:67:66:cd:9f:93:9f:
2a:49:8c:08:d1:0d:15:8e:90:f8:47:23:4d:36:c8:
46:bf:e2:49:89:9b:e3:f5:ec:96:08:4f:ff:53:51:
4d:5d:b4:33:58:f0:62:d4:53:78:95:7c:da:44:6f:
4e:d9:96:a3:6e:54:f0:ac:8e:7a:b4:6b:a9:45:2c:
32:98:97:96:0d:b6:ba:cf:ef:4e:78:84:cf:e1:35:
19:d8:2b:61:52:a7:87:bc:f1:fc:67:16:5b:59:98:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A7:2E:B7:E4:F5:28:97:35:19:E0:A0:81:5E:BF:48:A5:1F:C6:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:3e:73:8f:76:a6:2b:55:99:80:2d:db:44:c5:ad:ff:7e:33:
ea:36:cf:90:a2:f1:a6:94:17:b1:3c:e6:88:89:d5:c4:c2:b1:
90:46:ad:82:35:09:bb:8f:3c:e6:11:e1:9a:80:dd:36:63:13:
6f:51:0f:d5:4f:38:c6:ee:5a:21:9d:50:8d:d1:cb:9e:35:70:
0a:43:c6:da:3b:38:4b:45:e0:59:4e:7e:b9:39:10:2e:cb:68:
75:b3:c9:20:b2:ce:85:ac:a5:71:63:38:37:42:36:db:0b:3e:
35:d2:94:cd:49:ed:dc:d0:eb:90:44:76:4f:b6:5b:05:0e:35:
a2:56:74:e6:4d:9c:e1:f4:f1:2e:ac:58:f8:01:9a:76:00:54:
1f:95:84:2b:9c:7f:3d:bd:c7:98:cd:ad:30:90:0d:c3:ad:c3:
73:3a:3b:74:b7:8f:cd:c1:f1:ad:9b:40:a4:7a:95:89:2b:24:
2a:3e:6c:28:07:cf:49:37:f2:65:79:94:b5:b7:2f:a9:2c:4a:
8f:bf:15:1c:9d:79:6d:c4:32:75:f6:7b:b7:e6:d6:4c:87:4a:
8c:70:41:d5:75:ad:f0:ce:83:18:39:b1:16:81:00:6d:40:f6:
29:ec:6b:07:9b:31:38:f9:7a:3b:23:ab:9f:77:3b:5c:cf:b2:
74:e6:fc:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Qvcu14RjoMVjUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
M2JjMDFjNWYtNmYwMy00N2JmLWI0ZDUtYWI1ZWM5MmJiYTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhWVzI06XcI1ZXXDExuoF5uypCzBJIDtqgvP
5qJv2GjjMYoxTsgub5E3lkheCCjjHfRP0ZopCGCIh7bls2Y8O9UOYKq1mxTbiYMo
36Y35+3U2+RaOaG07oXeGaVAAPRA5MQ9EdnyyNIwhEYMU+QWjswuwEQ7ZeU4o+oD
JIupoYqgurSgymUQsjk5tLErXXMskgpuXHUYGX3vpWKZhWFnZs2fk58qSYwI0Q0V
jpD4RyNNNshGv+JJiZvj9eyWCE//U1FNXbQzWPBi1FN4lXzaRG9O2ZajblTwrI56
tGupRSwymJeWDba6z+9OeITP4TUZ2CthUqeHvPH8ZxZbWZgRcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2nLrfk9SiXNRngoIFev0ilH8ZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y5NzVkY2UtZDMyNi0z
Yzk3LWFmMzYtZDZiNmYzODZkNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4+c492pitVmYAt20TFrf9+M+o2z5Ci8aaUF7E85oiJ1cTCsZBGrYI1
CbuPPOYR4ZqA3TZjE29RD9VPOMbuWiGdUI3Ry541cApDxto7OEtF4FlOfrk5EC7L
aHWzySCyzoWspXFjODdCNtsLPjXSlM1J7dzQ65BEdk+2WwUONaJWdOZNnOH08S6s
WPgBmnYAVB+VhCucfz29x5jNrTCQDcOtw3M6O3S3j83B8a2bQKR6lYkrJCo+bCgH
z0k38mV5lLW3L6ksSo+/FRydeW3EMnX2e7fm1kyHSoxwQdV1rfDOgxg5sRaBAG1A
9insawebMTj5ejsjq593O1zPsnTm/FM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:52 2025 by rpki-client