Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49ffc83f-5e99-3e94-aaf3-f70aa0c7549e.roa
File: 49ffc83f-5e99-3e94-aaf3-f70aa0c7549e.roa (raw, json)
Hash identifier: gR340236Z4t3fudbeZCgmlKq7m1uC/OmvIIPjXM7T6k=
Subject key identifier: D1:75:79:DE:B0:29:D3:F5:F0:D8:5E:00:73:71:00:E0:C7:0F:51:BF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F51EBC761C14C7557318B8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49ffc83f-5e99-3e94-aaf3-f70aa0c7549e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.123.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1e:bc:76:1c:14:c7:55:73:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=d69a396a-ee16-4fef-8915-cf45cbd687f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:7a:67:dd:8d:46:5f:9f:f5:9a:7a:a1:63:
8d:a6:27:df:1c:a1:72:97:90:3e:a8:a7:4d:64:4a:
f9:65:b4:bd:87:79:d2:16:b9:e1:c2:a4:13:e3:2a:
98:21:58:14:c7:3d:2f:b6:36:94:3a:6d:49:50:65:
d2:6f:f5:54:ea:09:86:78:c7:ea:a1:ea:19:7a:63:
4b:d0:d1:f3:95:59:a9:86:ad:b7:cc:99:97:59:dc:
03:41:79:60:2a:a7:b2:23:3a:89:bc:64:2b:b0:d6:
11:a6:14:7c:08:26:15:8a:3f:45:49:20:67:9d:fc:
09:a1:5c:0b:d6:6e:38:76:a1:c0:05:6a:45:d0:fb:
52:af:6e:2d:9d:42:84:e6:f8:9c:8f:83:a6:09:c0:
93:27:a8:fd:7a:01:45:d4:52:e3:08:84:1d:98:d8:
43:34:c0:8a:ac:86:e9:1a:ea:8e:b6:7e:20:5d:a4:
32:68:e9:65:83:47:2a:b5:41:ad:ae:4c:7e:f2:16:
ac:b2:2f:c5:9b:72:bf:95:92:01:9c:2a:6d:96:20:
35:88:dd:31:2d:91:76:1d:c4:26:d5:8e:af:bd:7c:
01:95:b3:3b:48:c5:09:5d:45:09:39:ca:d1:4d:a9:
ff:ed:77:46:ed:b4:c1:df:f3:95:d5:c3:d4:3e:8e:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:75:79:DE:B0:29:D3:F5:F0:D8:5E:00:73:71:00:E0:C7:0F:51:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49ffc83f-5e99-3e94-aaf3-f70aa0c7549e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b2:bc:05:18:bd:80:c9:c6:d7:41:9e:26:61:4c:02:67:d8:
26:24:cc:d3:f4:ed:12:fe:3d:a6:6f:df:5d:2c:a6:d0:82:6a:
e2:79:92:53:e1:ea:f1:81:77:44:0e:dc:da:1e:fa:68:ea:6b:
ed:c3:c6:e3:ef:9b:3f:50:ae:58:49:bc:7e:1e:25:56:c4:c5:
83:7d:97:1e:b2:93:16:ed:b3:cc:9c:06:a9:1c:98:b1:d7:6d:
d9:b2:e5:ca:2a:0c:61:78:c8:20:53:88:e4:aa:34:5d:1c:8e:
28:ae:73:77:f5:3e:b2:bd:a5:90:c9:79:e1:99:93:b8:fc:6c:
16:51:c3:67:44:d8:66:37:f9:87:64:51:89:17:9d:31:e0:ec:
67:f2:95:11:df:de:dc:fe:8b:84:03:4e:37:05:c6:fa:a9:95:
50:76:24:5b:32:85:9f:6c:9d:20:1c:b5:19:25:04:e8:e8:55:
e4:8d:be:4d:7f:9a:01:27:f6:49:85:bc:d5:04:4d:97:3f:28:
5b:cf:a5:dd:c1:13:b5:2c:c7:8b:dd:c9:ca:b5:3b:22:24:9b:
3d:dd:9b:8f:84:a6:bc:e5:3b:5e:4d:f8:92:26:b7:ff:ba:76:
ae:40:89:c8:3d:1f:eb:7f:3e:d0:83:a4:69:c6:32:59:6e:b1:
cf:6a:c5:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9R68dhwUx1VzGLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDY5YTM5NmEtZWUxNi00ZmVmLTg5MTUtY2Y0NWNiZDY4N2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzZ6Z92NRl+f9Zp6oWONpiffHKFyl5A+qKdN
ZEr5ZbS9h3nSFrnhwqQT4yqYIVgUxz0vtjaUOm1JUGXSb/VU6gmGeMfqoeoZemNL
0NHzlVmphq23zJmXWdwDQXlgKqeyIzqJvGQrsNYRphR8CCYVij9FSSBnnfwJoVwL
1m44dqHABWpF0PtSr24tnUKE5vicj4OmCcCTJ6j9egFF1FLjCIQdmNhDNMCKrIbp
GuqOtn4gXaQyaOllg0cqtUGtrkx+8hassi/Fm3K/lZIBnCptliA1iN0xLZF2HcQm
1Y6vvXwBlbM7SMUJXUUJOcrRTan/7XdG7bTB3/OV1cPUPo640QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNF1ed6wKdP18NheAHNxAODHD1G/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDlmZmM4M2YtNWU5OS0z
ZTk0LWFhZjMtZjcwYWEwYzc1NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGyvAUYvYDJxtdBniZhTAJn2CYkzNP07RL+PaZv310sptCCauJ5klPh
6vGBd0QO3Noe+mjqa+3DxuPvmz9QrlhJvH4eJVbExYN9lx6ykxbts8ycBqkcmLHX
bdmy5coqDGF4yCBTiOSqNF0cjiiuc3f1PrK9pZDJeeGZk7j8bBZRw2dE2GY3+Ydk
UYkXnTHg7GfylRHf3tz+i4QDTjcFxvqplVB2JFsyhZ9snSActRklBOjoVeSNvk1/
mgEn9kmFvNUETZc/KFvPpd3BE7Usx4vdycq1OyIkmz3dm4+EprzlO15N+JImt/+6
dq5Aicg9H+t/PtCDpGnGMllusc9qxcQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:39 2025 by rpki-client