Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa
File: a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa (raw, json)
Hash identifier: l1OBdqTLA3/2HvQx72Nw4KYNzDDCDMNmsz4QWgxGjPg=
Subject key identifier: D3:2E:A9:53:63:56:BA:F3:F3:E3:94:FE:A5:5C:82:BA:16:F1:95:5B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5323EDD49D54DCE5E6480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.95.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:32:3e:dd:49:d5:4d:ce:5e:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=ecb0b5a4-30d6-4ab5-a178-f8751379dac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:21:63:3c:8a:10:fd:a5:57:97:e1:bd:c3:
8e:9c:bf:7c:29:cd:b3:fb:62:61:3f:83:f8:46:f1:
a5:47:83:6e:90:15:0f:1d:7d:f4:85:a0:16:2b:5b:
6a:ee:9b:7d:80:43:ae:0e:e7:bc:c9:2d:15:1e:29:
3d:6c:a0:e3:c7:1f:79:4a:77:1e:02:7c:b8:88:68:
9a:96:85:7f:5e:5b:75:cf:fb:66:dc:a9:4b:6e:6c:
eb:16:e2:56:ce:33:ff:26:71:19:c1:b7:65:6b:5c:
6b:5e:83:3a:fd:61:66:ba:ed:92:57:f4:11:ff:6d:
ad:f4:e2:cf:87:ae:2c:20:ec:1a:12:8a:80:20:cb:
df:ea:0e:a9:ec:3c:92:e3:1d:dd:3c:bb:7b:cb:e2:
52:eb:1b:03:18:f5:f4:05:01:b9:f9:bf:af:08:ad:
1d:18:89:4d:4f:0c:72:a1:b7:68:94:2c:1d:f8:39:
95:a2:dd:fd:82:29:78:8e:8e:2a:a9:8c:22:59:59:
9c:76:4f:13:a7:dc:23:c5:26:a2:7d:e5:20:c1:0b:
c9:cc:aa:10:be:72:6f:61:9d:27:89:24:08:58:f6:
8f:06:f4:2d:af:85:4b:2f:be:c6:9b:22:18:37:48:
41:1f:57:2b:ca:59:49:80:14:1b:4d:00:8f:bb:21:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:A9:53:63:56:BA:F3:F3:E3:94:FE:A5:5C:82:BA:16:F1:95:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a40ed0ca-66b9-3f30-bcf0-429d3570f03a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.95.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ee:03:9f:c9:47:e3:a8:02:15:f5:e8:31:08:27:51:71:6d:
f6:21:96:7b:b4:7a:6f:04:3b:8e:a3:fc:38:3e:fc:c3:e9:cc:
78:17:42:ce:e5:28:0c:86:a4:51:2a:fa:9b:69:98:ef:4d:13:
9c:97:2b:fd:5d:83:7a:bb:b0:a6:a4:1a:e7:dc:e1:8d:0f:8f:
f4:86:1e:5b:21:ed:49:1c:e2:21:1e:9b:78:22:77:48:ee:65:
c0:c1:bf:cb:76:c9:a3:fb:ed:eb:82:60:f4:3e:24:8c:c5:dc:
41:57:3f:0f:53:66:43:53:04:62:bf:bf:de:f5:41:30:ac:7f:
d1:ee:be:48:ce:e5:8a:fc:80:cb:2e:17:ce:2d:81:e4:6a:32:
bc:4b:4a:18:19:5c:e3:18:4e:b6:d3:8b:a1:ef:3b:e6:4f:fa:
38:e1:5a:65:14:0d:24:8d:f8:14:18:e0:0f:fc:d4:b7:19:13:
0f:f9:08:86:82:cb:20:b1:c1:15:f6:e6:ea:12:0a:8b:44:64:
76:16:48:f5:77:ad:f6:59:73:85:64:76:cb:91:49:4e:9a:d5:
5a:fe:02:88:cb:a5:c2:7c:50:56:4a:b3:e6:ad:94:15:bb:4e:
b2:75:d8:02:dc:d5:1c:99:df:f9:1b:dc:66:d3:59:26:9f:79:
cf:f1:74:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TI+3UnVTc5eZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZWNiMGI1YTQtMzBkNi00YWI1LWExNzgtZjg3NTEzNzlkYWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGUhYzyKEP2lV5fhvcOOnL98Kc2z+2JhP4P4
RvGlR4NukBUPHX30haAWK1tq7pt9gEOuDue8yS0VHik9bKDjxx95SnceAny4iGia
loV/Xlt1z/tm3KlLbmzrFuJWzjP/JnEZwbdla1xrXoM6/WFmuu2SV/QR/22t9OLP
h64sIOwaEoqAIMvf6g6p7DyS4x3dPLt7y+JS6xsDGPX0BQG5+b+vCK0dGIlNTwxy
obdolCwd+DmVot39gil4jo4qqYwiWVmcdk8Tp9wjxSaifeUgwQvJzKoQvnJvYZ0n
iSQIWPaPBvQtr4VLL77GmyIYN0hBH1cryllJgBQbTQCPuyGhqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMuqVNjVrrz8+OU/qVcgroW8ZVbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQwZWQwY2EtNjZiOS0z
ZjMwLWJjZjAtNDI5ZDM1NzBmMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDuA5/JR+OoAhX16DEIJ1FxbfYhlnu0em8EO46j/Dg+/MPpzHgXQs7l
KAyGpFEq+ptpmO9NE5yXK/1dg3q7sKakGufc4Y0Pj/SGHlsh7Ukc4iEem3gid0ju
ZcDBv8t2yaP77euCYPQ+JIzF3EFXPw9TZkNTBGK/v971QTCsf9HuvkjO5Yr8gMsu
F84tgeRqMrxLShgZXOMYTrbTi6HvO+ZP+jjhWmUUDSSN+BQY4A/81LcZEw/5CIaC
yyCxwRX25uoSCotEZHYWSPV3rfZZc4VkdsuRSU6a1Vr+AojLpcJ8UFZKs+atlBW7
TrJ12ALc1RyZ3/kb3GbTWSafec/xdBI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:11 2025 by rpki-client