Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f06351d-132b-3ce7-9419-62608e26159c.roa
File: 8f06351d-132b-3ce7-9419-62608e26159c.roa (raw, json)
Hash identifier: 1oX1pxHYPHo815Msjngw+HPbH4UkNqkx0iw86n/vf0M=
Subject key identifier: 3F:3E:72:2F:54:09:1A:6A:05:87:1F:49:DE:2A:1C:14:26:BA:C0:4E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52EE0EB18EBA53C250A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f06351d-132b-3ce7-9419-62608e26159c.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.150.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:2e:e0:eb:18:eb:a5:3c:25:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=38ed3202-36e2-4a63-aa9d-2084cd742dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:e5:ba:8f:d2:09:a7:4e:c3:98:3d:79:ca:
97:75:1b:15:f7:5c:80:ca:9e:35:ac:0e:57:17:24:
cc:0e:18:0b:27:b6:ed:dd:aa:e8:b3:f4:90:64:bd:
11:57:e7:c9:c2:80:6f:55:37:f6:1b:dc:7f:df:a4:
d4:b6:b7:ea:e2:37:6f:f3:d5:05:6a:67:63:14:21:
58:89:6c:9d:ba:4a:9e:c5:fd:77:f3:13:86:59:8e:
ad:64:48:36:cd:04:cb:9b:fd:58:0b:4c:a4:25:3d:
47:60:f3:f5:9d:3f:cd:af:8b:fd:0d:8a:93:de:4e:
64:a8:eb:a2:72:20:04:94:92:02:ec:8d:0f:33:43:
f5:84:a4:fc:be:0c:eb:4a:c5:c9:a6:e2:83:f4:c8:
1a:1e:8a:a7:47:af:05:9d:6c:02:ac:99:74:ce:c0:
51:3b:09:9a:0b:ac:f5:89:47:5f:e2:4d:45:ef:94:
cb:0d:4a:ae:aa:c7:f1:5b:ee:82:82:2e:31:f4:0e:
06:1e:f6:60:64:31:46:59:8b:3a:f1:70:01:ef:76:
29:a1:d7:1b:78:b4:a5:a3:c4:80:ab:d7:77:5c:8b:
04:53:93:0b:0d:a8:d3:73:38:18:a0:92:49:37:96:
d3:be:3a:d3:5d:b0:56:bd:58:a7:12:eb:85:ad:73:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:72:2F:54:09:1A:6A:05:87:1F:49:DE:2A:1C:14:26:BA:C0:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f06351d-132b-3ce7-9419-62608e26159c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:08:0b:b8:59:ed:91:4d:be:80:50:8d:bd:a5:36:e7:12:c6:
02:40:7d:2a:e0:fa:04:01:29:99:56:60:f0:94:55:31:5e:ac:
11:5b:13:23:01:09:c5:19:87:6f:bc:ee:07:b8:12:4e:9c:4b:
5d:27:03:d2:83:d1:76:a7:dc:a2:ec:6d:44:61:d7:5e:10:30:
07:12:4a:5c:8d:e3:9d:72:73:ae:5d:b8:96:12:fe:0f:5e:f2:
f3:65:e4:0a:ca:fe:fd:5d:3b:62:63:26:5b:75:a6:83:ae:ee:
f6:f3:27:ad:ce:7a:8f:ef:05:78:e7:61:56:b5:f1:76:bf:cd:
0e:c9:65:b5:d5:20:0c:98:a9:a4:d3:b0:60:3f:d1:6c:cb:b6:
e0:d1:bf:26:9e:0f:d3:ae:0f:9f:0b:9f:a5:34:6a:61:f0:fb:
4e:c5:46:24:9c:17:81:61:3f:d0:e9:79:51:a5:53:21:1d:e9:
76:6c:bb:39:90:ac:1c:1a:eb:cc:f7:08:be:9f:83:a4:cf:c8:
4b:17:84:c4:64:26:36:44:24:c1:fc:bd:68:30:98:32:89:79:
ef:4f:f3:d7:5e:b6:08:9e:f8:f2:27:b9:5e:38:ba:e7:dd:6e:
9b:7b:0a:4a:05:05:48:f2:1f:d9:39:fc:7a:40:f5:82:c6:64:
bc:9f:ed:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9S7g6xjrpTwlCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MzhlZDMyMDItMzZlMi00YTYzLWFhOWQtMjA4NGNkNzQyZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j3luo/SCadOw5g9ecqXdRsV91yAyp41rA5X
FyTMDhgLJ7bt3aros/SQZL0RV+fJwoBvVTf2G9x/36TUtrfq4jdv89UFamdjFCFY
iWydukqexf138xOGWY6tZEg2zQTLm/1YC0ykJT1HYPP1nT/Nr4v9DYqT3k5kqOui
ciAElJIC7I0PM0P1hKT8vgzrSsXJpuKD9MgaHoqnR68FnWwCrJl0zsBROwmaC6z1
iUdf4k1F75TLDUquqsfxW+6Cgi4x9A4GHvZgZDFGWYs68XAB73YpodcbeLSlo8SA
q9d3XIsEU5MLDajTczgYoJJJN5bTvjrTXbBWvVinEuuFrXPpTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8+ci9UCRpqBYcfSd4qHBQmusBOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGYwNjM1MWQtMTMyYi0z
Y2U3LTk0MTktNjI2MDhlMjYxNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcIC7hZ7ZFNvoBQjb2lNucSxgJAfSrg+gQBKZlWYPCUVTFerBFbEyMB
CcUZh2+87ge4Ek6cS10nA9KD0Xan3KLsbURh114QMAcSSlyN451yc65duJYS/g9e
8vNl5ArK/v1dO2JjJlt1poOu7vbzJ63Oeo/vBXjnYVa18Xa/zQ7JZbXVIAyYqaTT
sGA/0WzLtuDRvyaeD9OuD58Ln6U0amHw+07FRiScF4FhP9DpeVGlUyEd6XZsuzmQ
rBwa68z3CL6fg6TPyEsXhMRkJjZEJMH8vWgwmDKJee9P89detgie+PInuV44uufd
bpt7CkoFBUjyH9k5/HpA9YLGZLyf7Uk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:55 2025 by rpki-client