Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91fe2844-b8d5-3b7e-b0e1-3c23c8a05194.roa
File: 91fe2844-b8d5-3b7e-b0e1-3c23c8a05194.roa (raw, json)
Hash identifier: 5XsHCXLlZ1+tlkY9nvNLZGWRgg/m4FSc5b2nY+6BlqA=
Subject key identifier: FC:55:D6:56:EA:BE:17:92:CB:1A:A0:C9:AA:A2:E3:8C:BF:61:91:64
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4FAF863ABE666C821DBC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91fe2844-b8d5-3b7e-b0e1-3c23c8a05194.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.163.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:fa:f8:63:ab:e6:66:c8:21:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=28031a50-e8c8-4198-8108-a4d2fd1b3940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:d6:e0:f8:a6:98:68:5c:aa:54:20:b2:0e:
80:72:97:4f:f9:79:3e:e7:80:6d:6d:ed:2c:05:c7:
4a:45:af:a8:b5:77:f3:4b:4c:af:92:65:b2:3c:ae:
9e:7f:af:e9:3b:ef:36:95:e6:f1:89:92:f2:b8:72:
ab:b6:e5:e8:0f:52:27:f5:a9:f5:22:b1:38:2b:e2:
75:bf:5c:66:18:66:8c:3f:3d:61:e0:fe:78:5a:87:
07:39:3a:de:81:24:66:21:fb:12:d9:76:e6:9a:f7:
f0:f3:10:eb:72:ff:85:5a:20:20:fc:a3:e9:8e:08:
1d:24:47:b0:7d:d6:35:1b:55:8d:44:1b:60:d3:ff:
1d:0b:ff:1d:e7:08:f7:2f:6e:26:65:ef:81:c8:97:
f9:cc:be:d4:7b:bb:7f:15:d2:31:ba:5f:5a:60:1d:
5b:7b:2f:6f:ea:e7:18:87:2a:1b:79:dd:05:06:b3:
d7:3b:f0:d6:c1:ec:4d:d6:df:b8:cc:3d:8e:0c:f8:
e9:29:f8:be:05:01:66:fa:6c:b0:2f:93:17:4d:c3:
36:88:06:d2:1a:49:cf:78:2a:2c:47:d3:b8:3e:82:
de:e7:ea:36:fd:1b:fa:22:37:25:e0:56:56:36:07:
1a:78:01:00:75:43:7b:fa:44:9e:55:81:cc:41:42:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:D6:56:EA:BE:17:92:CB:1A:A0:C9:AA:A2:E3:8C:BF:61:91:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91fe2844-b8d5-3b7e-b0e1-3c23c8a05194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.163.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:dc:5a:a5:9b:13:7d:6a:96:fd:5b:91:c8:c1:11:00:88:69:
37:d0:ce:52:b6:b6:8d:b2:d7:24:7e:3e:12:65:85:05:d7:ea:
df:c4:a7:fb:09:4b:33:70:ce:2d:78:6a:f5:6a:13:ce:f9:1f:
eb:d9:d8:4f:cc:03:61:10:7d:58:c5:83:61:59:92:c1:7b:b2:
52:a5:ee:ef:97:d1:83:51:57:dc:57:82:71:97:f7:40:f8:02:
49:fc:70:43:f6:32:12:0d:55:e5:01:a7:76:b3:14:e7:c3:29:
b0:c5:2e:0d:47:bf:58:64:2e:bd:bb:8e:73:26:fb:40:86:42:
19:bf:53:dd:22:07:bf:a3:e6:dc:1f:28:0c:29:4b:33:6a:3d:
cf:4d:2b:fc:66:94:01:0b:28:7c:b1:5e:9a:13:56:3a:74:b4:
f4:21:d1:1a:4c:28:5e:5c:79:32:c0:3d:21:b4:07:5f:55:4b:
cf:c5:57:d0:0a:14:74:94:01:1a:4e:42:bb:4c:7e:ab:f6:00:
83:fa:f9:3d:06:db:c7:e7:a8:9b:f7:ef:d3:fa:27:e0:e3:c2:
1d:e5:17:8a:62:02:f2:33:3e:89:c6:ba:63:fc:6b:14:aa:4a:
ec:09:be:ca:f2:f3:e0:ea:0f:30:eb:3b:68:aa:14:6d:27:2e:
fd:c6:a0:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Pr4Y6vmZsgh28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MjgwMzFhNTAtZThjOC00MTk4LTgxMDgtYTRkMmZkMWIzOTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OfW4PimmGhcqlQgsg6AcpdP+Xk+54Btbe0s
BcdKRa+otXfzS0yvkmWyPK6ef6/pO+82lebxiZLyuHKrtuXoD1In9an1IrE4K+J1
v1xmGGaMPz1h4P54WocHOTregSRmIfsS2Xbmmvfw8xDrcv+FWiAg/KPpjggdJEew
fdY1G1WNRBtg0/8dC/8d5wj3L24mZe+ByJf5zL7Ue7t/FdIxul9aYB1bey9v6ucY
hyobed0FBrPXO/DWwexN1t+4zD2ODPjpKfi+BQFm+mywL5MXTcM2iAbSGknPeCos
R9O4PoLe5+o2/Rv6Ijcl4FZWNgcaeAEAdUN7+kSeVYHMQULguwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxV1lbqvheSyxqgyaqi44y/YZFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFmZTI4NDQtYjhkNS0z
YjdlLWIwZTEtM2MyM2M4YTA1MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbcWqWbE31qlv1bkcjBEQCIaTfQzlK2to2y1yR+PhJlhQXX6t/Ep/sJ
SzNwzi14avVqE875H+vZ2E/MA2EQfVjFg2FZksF7slKl7u+X0YNRV9xXgnGX90D4
Akn8cEP2MhINVeUBp3azFOfDKbDFLg1Hv1hkLr27jnMm+0CGQhm/U90iB7+j5twf
KAwpSzNqPc9NK/xmlAELKHyxXpoTVjp0tPQh0RpMKF5ceTLAPSG0B19VS8/FV9AK
FHSUARpOQrtMfqv2AIP6+T0G28fnqJv379P6J+Djwh3lF4piAvIzPonGumP8axSq
SuwJvsry8+DqDzDrO2iqFG0nLv3GoPs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:39 2025 by rpki-client