Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996cac2c-1e08-37f6-b35d-52a00d14005f.roa
File: 996cac2c-1e08-37f6-b35d-52a00d14005f.roa (raw, json)
Hash identifier: IaQ7T4sgWyyu4IdWhYeaup0VmCs1oPZCXWgKWGG13LQ=
Subject key identifier: D1:DE:FD:55:6F:A9:71:54:6F:C6:D1:83:8A:A6:86:22:1E:31:5E:33
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5034343BAC7CB02C3E280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996cac2c-1e08-37f6-b35d-52a00d14005f.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.72.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:03:43:43:ba:c7:cb:02:c3:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=bc858cd2-ed93-4f39-882a-3c4239572838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:5a:3f:d8:63:07:4e:28:0e:06:ce:ea:9e:
e6:d8:b0:65:d8:51:67:08:d3:04:df:80:03:2d:7c:
b6:88:04:18:22:25:5f:ed:ba:45:a4:c0:63:66:43:
63:2d:15:0b:e2:81:66:d7:71:29:9d:fa:6d:0c:00:
6d:a1:5a:4f:bd:b7:2c:88:32:68:51:92:50:f4:09:
e0:39:d7:82:f1:81:f4:4c:65:a0:1d:90:09:8f:9a:
15:aa:f5:ba:31:bc:93:b5:10:e4:d6:ae:53:75:1b:
31:26:dc:a5:18:17:72:05:99:d4:f9:29:ca:29:1c:
08:b8:1c:d0:ea:61:40:d7:b9:94:0b:d0:4e:9a:ee:
ac:0a:63:4e:02:78:8c:e6:06:50:a5:06:60:b9:5e:
cf:bb:d5:1c:60:3e:d5:15:a0:8a:78:00:4c:22:76:
94:4f:36:44:6e:af:2d:53:43:df:e5:4a:d2:53:d5:
f4:07:92:a5:b0:31:e8:d6:4c:8f:83:74:25:46:dd:
15:66:0e:c6:19:e0:9a:64:a9:02:6f:66:7e:d6:6a:
6a:15:5e:49:2e:ea:41:d8:3a:55:84:57:de:2c:a3:
65:a8:42:4f:53:4c:f1:18:da:fe:05:e5:a9:62:95:
50:10:1a:51:99:2a:82:c4:e2:2e:a8:e1:0a:5e:00:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:FD:55:6F:A9:71:54:6F:C6:D1:83:8A:A6:86:22:1E:31:5E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/996cac2c-1e08-37f6-b35d-52a00d14005f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:44:58:20:04:35:c3:60:e7:44:5d:9e:e0:3d:f7:f4:e0:fd:
1a:2e:c0:a4:e5:72:1b:06:ff:40:3e:7d:df:06:09:68:4e:31:
6e:ea:bc:26:63:25:35:fa:b0:68:4d:a2:0a:49:49:a7:6d:b2:
14:20:34:b6:c7:34:10:c1:f7:9a:da:a5:72:8d:42:f6:2f:3f:
67:49:43:f2:5f:b3:3d:eb:b6:f0:37:49:c1:29:54:71:7e:bc:
39:29:07:5e:b9:98:63:74:23:ae:d8:de:1b:13:51:b9:ce:78:
90:ca:53:1f:3d:c8:13:f2:fb:2f:a1:ca:8e:dc:3c:e1:f5:09:
46:a7:c2:9e:01:11:e6:f8:e9:1c:52:68:d3:5d:4e:81:04:2a:
d9:2f:76:45:49:c8:c1:8f:a1:b5:05:bd:0e:4d:df:fc:df:bd:
cb:4e:45:2c:9a:2e:40:67:e3:ca:ff:ae:d0:54:1d:2d:41:f3:
a0:37:89:df:5c:0c:f4:db:5c:d5:8f:0d:2d:88:b4:ed:4e:ed:
8a:0f:69:36:78:55:9d:f5:d4:f5:f5:10:74:79:5d:dd:8a:9c:
49:5e:3e:15:49:49:23:36:c0:f2:0e:00:27:bf:75:ec:53:b8:
b2:75:06:35:2f:eb:4e:cd:c8:0f:8b:b4:4c:3a:1e:39:1d:08:
b1:ee:b8:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QNDQ7rHywLD4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YmM4NThjZDItZWQ5My00ZjM5LTg4MmEtM2M0MjM5NTcyODM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4JaP9hjB04oDgbO6p7m2LBl2FFnCNME34AD
LXy2iAQYIiVf7bpFpMBjZkNjLRUL4oFm13EpnfptDABtoVpPvbcsiDJoUZJQ9Ang
OdeC8YH0TGWgHZAJj5oVqvW6MbyTtRDk1q5TdRsxJtylGBdyBZnU+SnKKRwIuBzQ
6mFA17mUC9BOmu6sCmNOAniM5gZQpQZguV7Pu9UcYD7VFaCKeABMInaUTzZEbq8t
U0Pf5UrSU9X0B5KlsDHo1kyPg3QlRt0VZg7GGeCaZKkCb2Z+1mpqFV5JLupB2DpV
hFfeLKNlqEJPU0zxGNr+BeWpYpVQEBpRmSqCxOIuqOEKXgBBIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHe/VVvqXFUb8bRg4qmhiIeMV4zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk2Y2FjMmMtMWUwOC0z
N2Y2LWIzNWQtNTJhMDBkMTQwMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpEWCAENcNg50RdnuA99/Tg/RouwKTlchsG/0A+fd8GCWhOMW7qvCZj
JTX6sGhNogpJSadtshQgNLbHNBDB95rapXKNQvYvP2dJQ/Jfsz3rtvA3ScEpVHF+
vDkpB165mGN0I67Y3hsTUbnOeJDKUx89yBPy+y+hyo7cPOH1CUanwp4BEeb46RxS
aNNdToEEKtkvdkVJyMGPobUFvQ5N3/zfvctORSyaLkBn48r/rtBUHS1B86A3id9c
DPTbXNWPDS2ItO1O7YoPaTZ4VZ311PX1EHR5Xd2KnElePhVJSSM2wPIOACe/dexT
uLJ1BjUv607NyA+LtEw6HjkdCLHuuEU=
-----END CERTIFICATE-----
Generated at Mon May 5 18:46:35 2025 by rpki-client