Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43436c02-0337-37f3-bf92-d102a1abb24e.roa
File: 43436c02-0337-37f3-bf92-d102a1abb24e.roa (raw, json)
Hash identifier: 64Zto3CWYi//N92R8Nf0N/RhkQflOPWekkcVogPDzZw=
Subject key identifier: 1F:61:C3:D0:64:50:3C:BD:CE:9A:13:2C:7A:F6:F2:74:54:18:9F:ED
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D72D4015886E8EF407E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43436c02-0337-37f3-bf92-d102a1abb24e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.234.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d7:2d:40:15:88:6e:8e:f4:07:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=800d33f5-d265-4b82-b713-32abdba61751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:8e:df:9b:20:5b:3e:16:31:86:bf:dd:88:
5f:74:64:63:fb:53:ae:2b:2d:e5:76:8c:27:68:b0:
06:f4:5f:33:b3:9d:4c:df:d9:6e:8b:a4:91:7f:08:
91:d0:c2:b1:40:68:a2:29:63:71:22:93:d5:d6:49:
fb:58:6b:d0:20:1b:56:d7:f8:d5:a9:25:81:96:89:
35:99:5b:05:2d:20:5f:e3:89:f6:37:0d:24:dc:cb:
0d:10:1a:71:a5:92:8d:fc:d0:b5:3e:ca:46:97:4f:
0a:d0:c3:5f:82:10:95:34:02:b9:ba:64:33:26:ce:
3b:56:f7:1c:a3:2a:7e:e9:c1:d7:5e:bd:b9:26:28:
95:61:ca:f4:ef:58:64:cc:1c:c0:b1:7d:67:ab:96:
ac:40:7e:f6:10:cb:75:21:df:0e:d0:ac:f2:78:c8:
39:38:96:a2:6b:36:bd:74:fb:52:68:6a:b1:63:9b:
ea:18:97:44:6e:cb:f4:56:79:22:de:dc:e0:b9:c4:
9e:24:03:5d:bf:10:cf:d3:f2:c8:23:44:8b:26:b2:
a8:65:4a:30:3b:fd:38:50:5b:2b:41:c9:36:14:75:
63:07:4f:92:46:49:30:0a:0c:d9:8a:0f:51:54:ed:
5a:a7:8f:9f:8c:bd:f3:43:0a:84:60:e6:8d:91:9f:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:C3:D0:64:50:3C:BD:CE:9A:13:2C:7A:F6:F2:74:54:18:9F:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43436c02-0337-37f3-bf92-d102a1abb24e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.234.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:59:e0:58:ae:0d:45:28:92:92:69:b4:1f:7d:41:1d:d8:f0:
35:f0:26:fa:73:d2:95:01:8a:4b:a4:d4:58:cf:3c:fc:54:21:
74:27:8d:ed:2e:af:46:bb:71:f7:78:c8:ec:4f:1d:5b:89:0b:
3b:e8:38:6e:bd:8f:b4:9c:7e:c0:f6:d1:31:54:ac:10:be:16:
b0:47:5c:62:80:10:b9:86:3e:b0:21:02:47:01:9a:cb:c3:86:
1d:5a:4d:16:06:4d:c9:97:70:c8:7b:3c:d0:c4:4b:d2:aa:53:
5e:30:0e:89:9b:fe:8c:34:86:24:79:61:ba:df:4e:8d:8a:8f:
31:c5:c3:56:ee:6e:fd:14:17:d0:28:01:7a:59:50:83:c9:2d:
c2:a8:3b:a1:42:67:3c:11:0c:03:7f:87:ab:20:59:ce:88:3f:
c4:26:85:34:c5:2d:4e:77:a6:ca:5b:ff:1a:15:fb:80:28:9e:
76:03:db:91:83:6a:07:01:23:81:4f:85:1f:df:74:ea:2f:fe:
82:47:85:9d:da:e4:28:7b:fe:cc:08:cf:6a:73:ba:93:35:7d:
b7:de:a1:62:00:7d:6c:14:95:b8:aa:32:41:d4:31:f3:10:0b:
8b:b1:44:19:c6:a4:ef:ac:e2:ae:72:61:13:f9:8f:e6:07:7c:
8b:08:e4:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9NctQBWIbo70B+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ODAwZDMzZjUtZDI2NS00YjgyLWI3MTMtMzJhYmRiYTYxNzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHqO35sgWz4WMYa/3YhfdGRj+1OuKy3ldown
aLAG9F8zs51M39lui6SRfwiR0MKxQGiiKWNxIpPV1kn7WGvQIBtW1/jVqSWBlok1
mVsFLSBf44n2Nw0k3MsNEBpxpZKN/NC1PspGl08K0MNfghCVNAK5umQzJs47Vvcc
oyp+6cHXXr25JiiVYcr071hkzBzAsX1nq5asQH72EMt1Id8O0KzyeMg5OJaiaza9
dPtSaGqxY5vqGJdEbsv0Vnki3tzgucSeJANdvxDP0/LII0SLJrKoZUowO/04UFsr
Qck2FHVjB0+SRkkwCgzZig9RVO1ap4+fjL3zQwqEYOaNkZ+yzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9hw9BkUDy9zpoTLHr28nRUGJ/tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM0MzZjMDItMDMzNy0z
N2YzLWJmOTItZDEwMmExYWJiMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+rAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZZ4FiuDUUokpJptB99QR3Y8DXwJvpz0pUBikuk1FjPPPxUIXQnje0u
r0a7cfd4yOxPHVuJCzvoOG69j7ScfsD20TFUrBC+FrBHXGKAELmGPrAhAkcBmsvD
hh1aTRYGTcmXcMh7PNDES9KqU14wDomb/ow0hiR5YbrfTo2KjzHFw1bubv0UF9Ao
AXpZUIPJLcKoO6FCZzwRDAN/h6sgWc6IP8QmhTTFLU53pspb/xoV+4AonnYD25GD
agcBI4FPhR/fdOov/oJHhZ3a5Ch7/swIz2pzupM1fbfeoWIAfWwUlbiqMkHUMfMQ
C4uxRBnGpO+s4q5yYRP5j+YHfIsI5PU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:50 2025 by rpki-client