Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51da40f3-43a2-3273-863e-343e541750b3.roa
File: 51da40f3-43a2-3273-863e-343e541750b3.roa (raw, json)
Hash identifier: rjP0dMW7tgrlT3PfVj57XxzwJSPng5Ylil21UczpqIM=
Subject key identifier: 38:61:FC:75:94:B8:70:E4:7B:11:E1:32:B6:E4:72:FD:F0:F7:E1:B0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5146082D6503B495B8FC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51da40f3-43a2-3273-863e-343e541750b3.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.129.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:14:60:82:d6:50:3b:49:5b:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=03815963-09b9-40b3-a2d9-4aeb9b18795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:b9:b9:17:cc:bf:ee:69:32:99:30:00:e7:
cb:05:47:41:b1:3e:a2:ed:78:c3:e1:fe:86:f4:aa:
27:15:ce:ab:6f:9e:bc:31:f7:ef:3c:dd:5a:eb:a8:
35:93:e1:9d:13:31:d2:c3:aa:cd:89:11:0f:32:9c:
5a:12:f0:f6:6f:3e:a3:fb:14:28:6f:64:0e:15:74:
2a:58:e2:21:8f:65:9e:80:ce:49:b2:bc:cc:8f:a0:
2f:c9:55:72:60:da:b2:1c:a5:5c:46:cd:3a:a1:de:
7c:07:88:6d:87:12:bb:47:75:da:f8:6d:a7:1e:61:
9b:bb:e1:90:32:ce:c5:3b:1a:01:79:e7:9f:60:2c:
dc:a0:04:18:88:76:42:35:50:4c:7d:c7:60:32:b5:
06:48:12:5c:5c:a6:9a:7b:f7:36:4e:09:84:00:ea:
cc:02:5a:58:4d:50:b9:53:bb:3b:b3:9f:7c:36:51:
48:1a:be:5f:08:9f:23:b8:96:cc:c5:8f:38:51:05:
8b:ec:fe:c4:71:22:50:60:9a:ba:b8:f9:f1:50:6b:
e6:1f:d8:a8:52:91:ef:13:33:96:6f:f9:26:29:4f:
89:91:45:52:ed:1a:32:a7:d5:4d:f1:0c:13:ec:80:
b4:09:91:3f:48:d3:a0:36:bd:24:52:a5:a6:c5:5f:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:FC:75:94:B8:70:E4:7B:11:E1:32:B6:E4:72:FD:F0:F7:E1:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51da40f3-43a2-3273-863e-343e541750b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.129.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e6:fc:83:85:cb:44:13:7a:d1:04:e7:2c:7d:20:77:e3:11:
b3:69:44:a8:f7:47:a9:10:6f:8b:35:7e:ee:b4:78:6b:2b:12:
37:93:a5:13:28:89:83:62:8f:b2:fe:57:a5:fa:e4:4b:23:4e:
5e:e3:c4:b9:35:ff:c8:60:19:e7:f1:c3:b4:d7:83:33:e2:3a:
22:86:f9:5f:09:07:94:0d:4f:fd:7f:3a:7a:23:c1:11:17:95:
85:61:de:6a:1d:ad:11:ca:fa:6b:c4:6a:37:c3:9c:a2:ee:28:
42:27:1a:49:24:d5:aa:63:d2:f4:29:65:88:ae:eb:1d:6f:f2:
3f:ee:17:84:ae:45:8e:9d:a4:62:52:e8:a1:cb:1f:4c:9d:0b:
72:d1:1c:c9:b0:e0:1c:1e:ce:37:bc:50:92:fd:f9:17:db:82:
05:03:2f:69:3c:b3:e6:19:d2:8c:fd:fd:a5:87:77:60:de:59:
b4:b5:5e:bf:07:95:e4:d3:36:1f:8a:7a:ac:17:21:d0:8d:40:
40:cc:e3:3a:8b:c4:d9:8f:31:ae:37:d4:6e:dc:af:36:2a:6f:
4d:f3:d3:0f:63:a8:90:17:b7:81:35:16:1c:12:0f:a4:95:9c:
9c:ae:50:df:f8:a7:65:cc:e8:ed:fb:6f:83:91:5a:a3:84:79:
50:86:7f:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RRggtZQO0lbj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MDM4MTU5NjMtMDliOS00MGIzLWEyZDktNGFlYjliMTg3OTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeu5uRfMv+5pMpkwAOfLBUdBsT6i7XjD4f6G
9KonFc6rb568MffvPN1a66g1k+GdEzHSw6rNiREPMpxaEvD2bz6j+xQob2QOFXQq
WOIhj2WegM5JsrzMj6AvyVVyYNqyHKVcRs06od58B4hthxK7R3Xa+G2nHmGbu+GQ
Ms7FOxoBeeefYCzcoAQYiHZCNVBMfcdgMrUGSBJcXKaae/c2TgmEAOrMAlpYTVC5
U7s7s598NlFIGr5fCJ8juJbMxY84UQWL7P7EcSJQYJq6uPnxUGvmH9ioUpHvEzOW
b/kmKU+JkUVS7Royp9VN8QwT7IC0CZE/SNOgNr0kUqWmxV+EVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhh/HWUuHDkexHhMrbkcv3w9+GwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTFkYTQwZjMtNDNhMi0z
MjczLTg2M2UtMzQzZTU0MTc1MGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbm/IOFy0QTetEE5yx9IHfjEbNpRKj3R6kQb4s1fu60eGsrEjeTpRMo
iYNij7L+V6X65EsjTl7jxLk1/8hgGefxw7TXgzPiOiKG+V8JB5QNT/1/OnojwREX
lYVh3modrRHK+mvEajfDnKLuKEInGkkk1apj0vQpZYiu6x1v8j/uF4SuRY6dpGJS
6KHLH0ydC3LRHMmw4Bwezje8UJL9+RfbggUDL2k8s+YZ0oz9/aWHd2DeWbS1Xr8H
leTTNh+KeqwXIdCNQEDM4zqLxNmPMa431G7crzYqb03z0w9jqJAXt4E1FhwSD6SV
nJyuUN/4p2XM6O37b4ORWqOEeVCGf+M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:52 2025 by rpki-client