Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686ea408-38b6-3249-a9e2-2954d51749bc.roa
File: 686ea408-38b6-3249-a9e2-2954d51749bc.roa (raw, json)
Hash identifier: oPM5sDSdyhw6cWAsjx7sbA/0gAml+RyAcA2mMqucUSk=
Subject key identifier: 22:AB:A1:11:98:2C:5B:9C:BA:D3:4F:27:D9:30:05:6D:8E:3E:F6:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584861005889877E244DC3CF0CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686ea408-38b6-3249-a9e2-2954d51749bc.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 15169
IP address blocks: 34.0.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:58:89:87:7e:24:4d:c3:cf:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=80be1845-e7e3-4a1d-995c-19fa690b1a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:4f:fa:41:fb:bd:72:aa:c2:5b:21:51:e8:
a3:0c:69:60:ea:e8:92:41:8d:94:8c:ae:01:6b:84:
fe:d3:a0:52:fe:8d:2d:34:85:61:76:67:d6:7e:62:
29:91:f7:13:f6:50:5a:c5:90:0b:31:f0:f6:3a:63:
6c:5a:cb:1a:93:e2:60:94:d6:5c:37:f5:9d:9f:8c:
61:d8:af:94:f0:b0:ab:d3:cf:bd:46:ca:5f:8c:0b:
66:8c:84:9f:2e:7c:ab:1c:a6:b3:ad:da:90:0e:26:
a3:94:25:9b:24:99:cd:7a:a2:b8:6c:b6:4c:84:bc:
f8:af:99:85:bb:08:cc:dc:39:64:38:00:f4:33:23:
c5:bf:86:7e:0f:b1:bd:1e:ad:fd:5b:e7:05:c0:0b:
2f:33:2d:d4:0e:ab:87:d5:25:94:e8:f6:d7:1d:c1:
e5:02:a6:4a:8b:a0:06:79:3f:80:b9:5e:4a:d1:ec:
42:8c:49:f5:2d:a7:fb:3f:34:6e:68:6a:f4:b5:3f:
b9:a7:d6:69:9a:c6:25:43:7d:32:20:99:18:bf:38:
b6:fb:e8:93:43:01:6d:3a:ad:c1:d2:98:5e:1b:b3:
b2:b4:e5:aa:14:63:a8:37:7d:9b:2b:3b:d5:3b:f7:
23:13:de:b8:4f:14:1e:32:3a:43:a2:72:13:b5:83:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:A1:11:98:2C:5B:9C:BA:D3:4F:27:D9:30:05:6D:8E:3E:F6:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686ea408-38b6-3249-a9e2-2954d51749bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.0.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:2a:61:2d:6b:9c:2c:b9:63:59:16:0b:89:ae:10:1d:bd:74:
64:7e:2f:8c:1e:af:cb:b8:d9:fd:47:8c:79:41:a1:61:58:9c:
11:32:fa:3b:5b:e2:be:50:65:6c:af:71:60:0a:95:66:bc:66:
8b:1c:f5:cc:28:23:54:64:59:6d:9b:36:c5:bf:07:ff:72:b3:
bb:56:47:a2:df:0c:18:81:46:6c:3c:07:32:af:7a:20:67:31:
11:05:2e:b4:bb:18:11:fb:fb:e5:38:52:3f:6c:4c:70:04:b7:
ca:6b:f7:76:44:7c:d5:cc:87:0b:df:f8:bd:33:49:c5:75:07:
07:2f:fb:36:72:fb:30:b9:48:41:c0:8e:3d:b1:0e:e9:71:ce:
76:c9:ed:c1:e4:ee:f0:83:21:bc:38:f4:4b:33:15:e9:5e:a9:
f8:d1:67:5e:fc:61:a8:b1:2b:f9:1c:c8:86:cf:e9:6e:4f:2c:
84:f9:61:f2:0b:2d:b0:97:44:af:18:b5:be:76:c6:49:66:e5:
ab:39:fd:a6:17:81:56:67:78:6f:50:e9:ea:df:a3:f6:35:36:
4d:e0:de:7d:a4:57:a9:95:96:68:39:59:e7:5a:35:de:f5:fe:
5c:a4:ab:06:aa:59:76:92:04:68:da:69:a1:a9:96:95:b4:8f:
80:9f:bb:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhhAFiJh34kTcPPDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTIzMDE0MDA1MVoXDTI1MDMzMDEzMDA1MVowLzEtMCsGA1UEAxMk
ODBiZTE4NDUtZTdlMy00YTFkLTk5NWMtMTlmYTY5MGIxYTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBVP+kH7vXKqwlshUeijDGlg6uiSQY2UjK4B
a4T+06BS/o0tNIVhdmfWfmIpkfcT9lBaxZALMfD2OmNsWssak+JglNZcN/Wdn4xh
2K+U8LCr08+9RspfjAtmjISfLnyrHKazrdqQDiajlCWbJJnNeqK4bLZMhLz4r5mF
uwjM3DlkOAD0MyPFv4Z+D7G9Hq39W+cFwAsvMy3UDquH1SWU6PbXHcHlAqZKi6AG
eT+AuV5K0exCjEn1Laf7PzRuaGr0tT+5p9ZpmsYlQ30yIJkYvzi2++iTQwFtOq3B
0pheG7OytOWqFGOoN32bKzvVO/cjE964TxQeMjpDonITtYMf/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKroRGYLFucutNPJ9kwBW2OPvb4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg2ZWE0MDgtMzhiNi0z
MjQ5LWE5ZTItMjk1NGQ1MTc0OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsqYS1rnCy5Y1kWC4muEB29dGR+L4wer8u42f1HjHlBoWFYnBEy+jtb
4r5QZWyvcWAKlWa8Zosc9cwoI1RkWW2bNsW/B/9ys7tWR6LfDBiBRmw8BzKveiBn
MREFLrS7GBH7++U4Uj9sTHAEt8pr93ZEfNXMhwvf+L0zScV1Bwcv+zZy+zC5SEHA
jj2xDulxznbJ7cHk7vCDIbw49EszFeleqfjRZ178YaixK/kcyIbP6W5PLIT5YfIL
LbCXRK8Ytb52xklm5as5/aYXgVZneG9Q6erfo/Y1Nk3g3n2kV6mVlmg5WedaNd71
/lykqwaqWXaSBGjaaaGplpW0j4Cfu6Y=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:53:37 2025 by rpki-client