Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa
File: 7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa (raw, json)
Hash identifier: x1nXaGTbMyKkscOp/L943Vn+PvicIrvLseyScFCQmZU=
Subject key identifier: D4:BE:5D:66:90:A9:0A:CC:A4:9A:52:62:4E:2B:92:FC:56:F2:F9:F6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4D7EE3EDE0E8512652EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.245.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d7:ee:3e:de:0e:85:12:65:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=80acbdba-6732-41b8-8d79-2d702ef231b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:d8:69:4f:7f:61:97:7d:ad:e5:1c:7b:17:
4e:d6:c3:f4:43:ca:3e:0b:a7:fc:fe:20:82:8a:5c:
24:aa:12:0d:2a:74:d6:02:63:97:52:18:ff:f8:87:
24:c1:6b:38:5a:68:3a:86:af:66:9f:ae:e8:6a:d9:
7b:13:11:2a:3c:4f:27:3d:3c:87:51:52:71:00:c1:
9c:3f:c2:e7:20:7a:e2:1b:48:00:d5:44:2a:50:36:
62:83:d8:20:55:55:3a:5b:f1:60:f9:3c:f0:32:56:
1c:23:4a:75:7c:c6:0b:3c:04:44:13:b2:e8:bf:69:
77:ec:fd:3b:29:70:0f:56:23:3d:a3:45:12:6e:34:
b5:7e:c4:1e:ab:8a:3d:19:7d:a2:2b:3c:d2:9f:0c:
f2:4c:72:0d:12:74:77:80:74:23:3b:b8:55:ec:28:
b1:0b:76:a9:f8:ae:b1:65:d2:d2:f9:51:fc:25:0a:
ca:c0:ce:ce:d3:c5:1f:58:cb:9c:fb:2a:0c:74:37:
44:72:f6:a0:25:07:fa:12:d2:81:6c:cc:7d:ec:31:
f3:91:9b:3a:bd:58:ee:bb:83:68:d2:ef:ba:eb:d3:
08:42:d9:2e:e0:85:a4:3f:d0:1c:22:9d:b7:8e:96:
64:1b:c1:32:d6:71:4f:f5:3d:3a:08:c1:fb:b3:26:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:5D:66:90:A9:0A:CC:A4:9A:52:62:4E:2B:92:FC:56:F2:F9:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d54fa46-3c16-32a6-9169-f7db156b9d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.245.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c9:c8:33:f2:82:c3:da:28:a5:33:3a:0d:18:e4:74:7d:63:
04:b7:39:c1:7c:df:7d:42:43:01:52:35:da:5e:6f:91:35:e0:
49:96:b2:aa:4d:6d:1d:57:d5:7e:6d:f6:56:11:11:47:dd:a8:
f8:1f:6d:20:b9:bc:39:c3:cf:0f:1a:4e:8b:4a:d6:c1:ba:06:
45:5d:9a:e2:57:c7:9d:f0:f3:2b:7e:2a:32:d0:ea:97:07:cc:
11:f4:25:ea:d0:4e:c6:c6:44:c6:6d:69:f5:8a:fd:9d:b5:33:
4f:85:96:09:fc:33:9d:18:fa:ed:81:1b:b7:75:1e:44:b4:90:
27:42:3e:c4:dc:a4:a0:22:2e:a1:3c:4b:ce:22:16:1a:96:4a:
0b:27:5e:81:94:57:50:ef:3b:99:93:63:31:af:8a:60:53:dd:
e0:b3:c9:cf:35:25:c1:ea:26:32:77:ff:97:6a:62:08:1e:5d:
30:86:39:92:fb:e8:3f:88:65:69:4c:a5:4b:38:63:3c:a2:a2:
80:45:96:44:2b:74:17:c7:23:48:c6:5b:ee:de:a4:9c:7a:25:
a7:71:8f:13:84:76:38:f5:ee:87:d1:df:c4:5f:65:ce:cd:35:
0b:22:54:08:1f:b0:36:5d:d7:da:2c:cc:1a:86:d8:09:29:83:
9c:ad:18:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9NfuPt4OhRJlLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ODBhY2JkYmEtNjczMi00MWI4LThkNzktMmQ3MDJlZjIzMWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPLYaU9/YZd9reUcexdO1sP0Q8o+C6f8/iCC
ilwkqhINKnTWAmOXUhj/+IckwWs4Wmg6hq9mn67oatl7ExEqPE8nPTyHUVJxAMGc
P8LnIHriG0gA1UQqUDZig9ggVVU6W/Fg+TzwMlYcI0p1fMYLPAREE7Lov2l37P07
KXAPViM9o0USbjS1fsQeq4o9GX2iKzzSnwzyTHINEnR3gHQjO7hV7CixC3ap+K6x
ZdLS+VH8JQrKwM7O08UfWMuc+yoMdDdEcvagJQf6EtKBbMx97DHzkZs6vVjuu4No
0u+669MIQtku4IWkP9AcIp23jpZkG8Ey1nFP9T06CMH7sybrnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS+XWaQqQrMpJpSYk4rkvxW8vn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Q1NGZhNDYtM2MxNi0z
MmE2LTkxNjktZjdkYjE1NmI5ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrJyDPygsPaKKUzOg0Y5HR9YwS3OcF8331CQwFSNdpeb5E14EmWsqpN
bR1X1X5t9lYREUfdqPgfbSC5vDnDzw8aTotK1sG6BkVdmuJXx53w8yt+KjLQ6pcH
zBH0JerQTsbGRMZtafWK/Z21M0+Flgn8M50Y+u2BG7d1HkS0kCdCPsTcpKAiLqE8
S84iFhqWSgsnXoGUV1DvO5mTYzGvimBT3eCzyc81JcHqJjJ3/5dqYggeXTCGOZL7
6D+IZWlMpUs4YzyiooBFlkQrdBfHI0jGW+7epJx6JadxjxOEdjj17ofR38RfZc7N
NQsiVAgfsDZd19oszBqG2Akpg5ytGFs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:18 2025 by rpki-client