Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa
File: a8770b90-df37-3eb5-8dc4-47f9216b080d.roa (raw, json)
Hash identifier: QUVtQAI3MEliHj1aPD6kSMc2cSq+uYw7M2XU8h+Fpik=
Subject key identifier: 34:87:66:B6:07:C6:98:91:AC:E7:3B:9F:CB:EE:2E:7B:58:C7:62:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F545966F36D6E4BB849600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.177.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:45:96:6f:36:d6:e4:bb:84:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8f58f3ae-2d3a-4fb9-86ec-2841c13b6f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:ea:b3:04:6d:be:ff:cc:b9:fc:1a:24:fb:
e8:4c:c1:04:22:94:d8:d8:7f:47:01:49:30:ae:4e:
67:56:86:8f:44:99:e1:b5:c6:cc:fa:e4:2b:98:00:
0b:11:fc:af:b2:87:0b:e7:e2:b7:75:ea:02:b3:af:
86:cc:3f:f4:cc:d6:96:1b:6b:3c:33:42:8c:e7:f6:
a7:4e:ee:09:a8:d0:fa:d1:56:b0:43:5d:ff:4b:d8:
1c:be:d2:d4:49:dc:64:38:21:49:0b:bc:61:91:d6:
23:14:30:ff:17:bf:cf:88:3b:b6:d8:9e:06:c9:92:
2a:d5:3b:d6:59:e4:8a:96:d0:e9:4d:b3:a9:16:27:
d3:ca:7d:5c:e5:ce:d2:fb:b3:a4:5d:9f:d2:92:57:
0b:4b:95:a1:54:39:02:d4:d3:88:6d:de:30:74:b1:
c2:66:4f:ae:aa:b3:bb:e0:b2:6b:56:11:3e:6b:07:
d6:15:a4:03:45:55:0c:8f:ed:39:61:bb:75:e5:48:
8c:ac:40:06:28:76:d6:0b:1a:00:8b:74:2b:7d:28:
39:20:0a:26:3f:51:8c:25:7c:57:cc:b4:ed:5b:06:
53:13:7e:e1:d6:80:be:16:c2:e4:da:15:12:07:ba:
c0:1f:e8:ed:d4:29:46:cb:72:e0:61:5d:f8:15:cf:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:66:B6:07:C6:98:91:AC:E7:3B:9F:CB:EE:2E:7B:58:C7:62:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.177.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:6b:fd:ce:05:91:77:6b:e7:27:70:84:13:88:ed:1e:ee:29:
de:b4:b8:51:64:0b:e3:ae:27:6c:b2:5a:43:92:d8:13:1c:a4:
b0:36:c4:d4:87:74:3c:5e:f3:f4:d3:55:ed:2f:34:56:f4:7e:
ea:5c:d9:d5:c3:57:22:26:a1:1a:ad:c1:7a:94:76:fb:b9:d2:
36:6e:88:47:f1:f4:23:a8:8f:96:07:c5:84:5a:56:9a:64:61:
dc:08:3e:88:2c:d9:02:a4:52:fd:f0:57:19:af:20:2a:6c:1f:
8e:99:13:8f:a5:27:e9:2b:da:75:04:13:28:b4:74:8b:f6:86:
33:ec:5f:7c:cb:c6:55:0a:58:b3:23:6a:96:91:8d:0d:46:42:
0b:89:46:ba:ef:43:e7:9a:d8:e2:3b:fb:ff:44:c2:e6:0d:73:
30:9f:70:7f:72:b0:3b:0e:f3:e0:ac:fe:c6:c2:e1:97:37:54:
5f:f6:04:66:07:fd:d1:7c:43:e6:eb:d2:7d:f9:01:32:8c:08:
e5:dc:69:c4:c0:04:9a:92:a3:f6:e0:b4:fe:a8:50:da:0c:d9:
f6:2a:0c:ae:b6:52:dc:0e:40:48:51:bd:e6:a0:2a:55:ba:e4:
6f:53:77:e9:80:d1:9a:c2:7b:22:3e:0d:af:78:5f:3f:60:53:
61:f4:01:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9UWWbzbW5LuElgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
OGY1OGYzYWUtMmQzYS00ZmI5LTg2ZWMtMjg0MWMxM2I2ZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnePqswRtvv/MufwaJPvoTMEEIpTY2H9HAUkw
rk5nVoaPRJnhtcbM+uQrmAALEfyvsocL5+K3deoCs6+GzD/0zNaWG2s8M0KM5/an
Tu4JqND60VawQ13/S9gcvtLUSdxkOCFJC7xhkdYjFDD/F7/PiDu22J4GyZIq1TvW
WeSKltDpTbOpFifTyn1c5c7S+7OkXZ/SklcLS5WhVDkC1NOIbd4wdLHCZk+uqrO7
4LJrVhE+awfWFaQDRVUMj+05Ybt15UiMrEAGKHbWCxoAi3QrfSg5IAomP1GMJXxX
zLTtWwZTE37h1oC+FsLk2hUSB7rAH+jt1ClGy3LgYV34Fc9WmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSHZrYHxpiRrOc7n8vuLntYx2J1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTg3NzBiOTAtZGYzNy0z
ZWI1LThkYzQtNDdmOTIxNmIwODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIrEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItr/c4FkXdr5ydwhBOI7R7uKd60uFFkC+OuJ2yyWkOS2BMcpLA2xNSH
dDxe8/TTVe0vNFb0fupc2dXDVyImoRqtwXqUdvu50jZuiEfx9COoj5YHxYRaVppk
YdwIPogs2QKkUv3wVxmvICpsH46ZE4+lJ+kr2nUEEyi0dIv2hjPsX3zLxlUKWLMj
apaRjQ1GQguJRrrvQ+ea2OI7+/9EwuYNczCfcH9ysDsO8+Cs/sbC4Zc3VF/2BGYH
/dF8Q+br0n35ATKMCOXcacTABJqSo/bgtP6oUNoM2fYqDK62UtwOQEhRveagKlW6
5G9Td+mA0ZrCeyI+Da94Xz9gU2H0AVU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:38 2025 by rpki-client