Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f62e2a4-c3e8-3961-9a6b-92cc7dbc9a99.roa
File: 9f62e2a4-c3e8-3961-9a6b-92cc7dbc9a99.roa (raw, json)
Hash identifier: Lvq8iKl2883ASnYGbL9tpoC1fIZv4XzI0FSVELUS7Rc=
Subject key identifier: 02:B2:A2:79:02:D5:20:4A:F3:D6:6A:12:E3:34:63:1F:BF:F4:BE:C6
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52C7CE46D5153E1DE9D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f62e2a4-c3e8-3961-9a6b-92cc7dbc9a99.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.143.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:2c:7c:e4:6d:51:53:e1:de:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=4be87bd8-d3b1-4cac-a745-e43ba25d378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:59:a0:4e:63:a3:e6:a3:2a:d8:2e:e6:20:ff:
60:1e:98:e7:5a:05:53:33:73:6c:10:a1:52:54:ab:
97:72:03:7a:33:1f:01:5a:f1:95:de:7a:40:94:eb:
65:49:db:a2:e1:c5:b8:30:72:77:2d:d9:ee:b6:a6:
c3:a6:1a:27:ba:a1:a2:c4:30:28:7e:c9:72:d0:65:
46:f1:55:f7:ba:a6:76:11:bf:83:2f:19:6d:88:7a:
d8:91:f4:c6:ab:bf:1a:52:e2:49:20:b6:da:97:d8:
89:e2:ec:66:13:19:7a:66:e8:05:9c:e8:2e:5a:77:
fd:d7:43:3b:72:1b:d4:a1:a3:be:21:ff:0c:35:8f:
68:ef:1f:f5:ba:b0:19:aa:17:a6:56:9e:02:eb:cd:
4b:65:1f:7d:cc:1e:3c:75:5f:49:88:03:1a:5c:00:
37:5d:65:a7:3d:b9:f0:57:be:02:65:90:45:27:0f:
0a:e0:0b:1b:bd:f3:2b:d8:6b:3e:8f:66:81:3a:08:
a0:98:7a:bb:70:f0:83:41:ed:15:5c:04:53:c8:71:
34:bc:ac:a9:b4:a4:9e:6e:4f:3c:da:38:e9:1f:37:
c2:7a:db:bf:d1:af:f1:51:20:76:45:2f:d9:70:72:
07:eb:75:43:da:6e:55:1b:24:74:2e:e0:52:05:58:
6f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:A2:79:02:D5:20:4A:F3:D6:6A:12:E3:34:63:1F:BF:F4:BE:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f62e2a4-c3e8-3961-9a6b-92cc7dbc9a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:27:79:a4:b1:98:05:fa:d7:d4:32:3e:2b:77:80:fa:74:a4:
c1:85:79:51:d2:ba:21:eb:26:b9:28:8d:05:f5:1d:d3:87:41:
f2:a6:20:74:5e:e4:36:e4:5b:ce:66:4f:4e:12:8f:90:f1:8c:
ca:f0:32:d0:74:0c:61:b0:45:29:c0:a9:91:2d:2b:6b:9b:c2:
ec:13:fe:47:b6:fd:bf:16:4c:fd:89:cc:97:64:e0:3b:56:65:
26:af:18:d2:18:c8:59:14:88:5b:f3:a0:34:a3:25:bb:d6:cf:
90:71:f4:89:1c:bf:20:49:5b:ae:a3:7b:a1:9b:8f:0d:6e:78:
58:fb:05:0b:30:01:f5:c9:95:96:15:c3:30:66:11:d6:bf:7c:
7d:ea:8c:2f:4e:e6:d1:d6:60:71:8c:a7:77:d3:f9:e9:ac:48:
49:97:b0:e6:21:a9:98:fa:46:be:ae:f0:d3:c0:9c:b7:c8:83:
63:2a:b1:77:e7:fc:bb:44:a0:dd:f3:78:6d:10:6c:02:d1:6f:
fa:49:fa:42:27:8e:09:e3:da:b5:ad:df:1e:b5:dc:a8:40:16:
c8:bd:bb:77:ff:c0:c8:71:24:1d:c1:4e:a0:52:c5:88:35:8c:
a5:94:c9:5f:26:a3:bd:e8:19:77:b0:45:6b:8c:b0:c6:84:b8:
db:11:8d:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9Sx85G1RU+HenYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NGJlODdiZDgtZDNiMS00Y2FjLWE3NDUtZTQzYmEyNWQzNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVmgTmOj5qMq2C7mIP9gHpjnWgVTM3NsEKFS
VKuXcgN6Mx8BWvGV3npAlOtlSdui4cW4MHJ3LdnutqbDphonuqGixDAofsly0GVG
8VX3uqZ2Eb+DLxltiHrYkfTGq78aUuJJILbal9iJ4uxmExl6ZugFnOguWnf910M7
chvUoaO+If8MNY9o7x/1urAZqhemVp4C681LZR99zB48dV9JiAMaXAA3XWWnPbnw
V74CZZBFJw8K4AsbvfMr2Gs+j2aBOgigmHq7cPCDQe0VXARTyHE0vKyptKSebk88
2jjpHzfCetu/0a/xUSB2RS/ZcHIH63VD2m5VGyR0LuBSBVhvKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKyonkC1SBK89ZqEuM0Yx+/9L7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWY2MmUyYTQtYzNlOC0z
OTYxLTlhNmItOTJjYzdkYmM5YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIo9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUneaSxmAX619QyPit3gPp0pMGFeVHSuiHrJrkojQX1HdOHQfKmIHRe
5DbkW85mT04Sj5DxjMrwMtB0DGGwRSnAqZEtK2ubwuwT/ke2/b8WTP2JzJdk4DtW
ZSavGNIYyFkUiFvzoDSjJbvWz5Bx9IkcvyBJW66je6Gbjw1ueFj7BQswAfXJlZYV
wzBmEda/fH3qjC9O5tHWYHGMp3fT+emsSEmXsOYhqZj6Rr6u8NPAnLfIg2MqsXfn
/LtEoN3zeG0QbALRb/pJ+kInjgnj2rWt3x613KhAFsi9u3f/wMhxJB3BTqBSxYg1
jKWUyV8mo73oGXewRWuMsMaEuNsRjXE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:51 2025 by rpki-client