Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac260404-28e7-34e8-b529-70e31ae13eb5.roa
File: ac260404-28e7-34e8-b529-70e31ae13eb5.roa (raw, json)
Hash identifier: A9xuK5iDMx0vS33QCZ8NbLdyud+CrnlizdaerZ0bmck=
Subject key identifier: 08:35:A2:AD:B0:13:40:64:1B:39:56:5C:FD:68:EC:58:3B:FD:9A:32
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F53C87488AE94D5C0B2848
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac260404-28e7-34e8-b529-70e31ae13eb5.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.89.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:3c:87:48:8a:e9:4d:5c:0b:28:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=23018707-0f0e-4a5e-a2e0-56e1622b2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:3a:b9:56:e8:14:e7:ea:1a:ec:32:f2:1c:
5a:e1:6c:44:8b:60:32:cd:0c:9f:61:f0:0f:54:67:
87:4d:c0:7a:95:0b:15:e2:07:0b:2b:80:e6:3a:49:
89:1e:28:2c:95:93:5c:48:5b:57:3b:27:e5:23:4f:
b9:ec:86:e7:0f:e6:6f:e0:bc:ef:ea:c3:fe:7f:0e:
7c:55:e5:b2:ce:f6:d7:33:ad:50:80:58:6c:ff:dc:
9c:0d:bd:a1:44:3f:85:6e:43:4e:87:f3:6d:8b:e3:
12:61:54:6a:67:43:f2:9e:8b:6e:22:c8:46:30:44:
9d:0e:05:6e:7c:ea:ab:19:a8:34:b7:f4:41:f5:7e:
89:3c:71:5f:67:1d:cc:22:1c:05:4b:69:85:1d:c1:
d8:fd:98:93:d9:82:76:93:ca:cc:14:68:75:6f:41:
26:2a:03:d2:d0:b3:6c:93:3a:1a:f1:eb:15:ed:50:
68:6d:73:7f:12:8f:25:96:84:5c:9a:86:b3:76:b8:
5e:68:84:ee:df:28:79:f0:97:e4:00:e2:23:70:6a:
55:98:b7:c8:82:5e:6b:f1:bc:90:e8:15:24:78:0b:
c1:89:fd:5a:5b:bd:ab:5d:51:e3:d7:da:76:14:78:
0f:ff:4b:61:71:6d:87:d9:40:2b:dc:c7:a9:79:7f:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:A2:AD:B0:13:40:64:1B:39:56:5C:FD:68:EC:58:3B:FD:9A:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac260404-28e7-34e8-b529-70e31ae13eb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f7:59:bb:09:94:9f:d6:f5:76:4c:ac:5b:0c:bf:95:8d:e9:
64:93:ac:c0:0a:33:7f:0d:c6:d9:57:dc:46:96:5b:2b:4c:0c:
a6:7f:54:a4:91:9a:04:40:8e:b5:ad:50:97:12:98:86:d6:c1:
a8:b3:43:21:22:8c:f5:3b:3c:24:7a:56:1b:8f:ce:a2:1d:51:
b6:a1:42:81:11:e2:64:4a:4f:cf:27:2d:c8:76:39:a4:1d:e0:
9e:a5:b8:86:81:7f:38:7f:0c:d1:6c:2a:51:ba:4e:60:12:4a:
f8:b5:43:bc:59:43:82:c9:c1:02:c0:84:ac:8d:01:cd:f3:95:
79:55:c0:a9:c5:66:b5:dd:be:d5:65:6e:b3:cd:6a:4b:07:49:
43:68:af:f8:4a:c6:5c:26:b3:ce:fc:82:f2:b7:0f:fb:c3:3f:
a4:e0:7e:48:78:a2:45:41:1c:98:22:b3:0d:88:00:4b:2c:bf:
3a:3a:c5:bb:d0:d9:e1:17:f4:f3:f7:0b:ea:c2:84:7b:f5:30:
45:2a:a2:fe:44:81:74:89:be:ab:ea:80:f0:de:98:be:33:26:
b7:b1:c1:ba:e4:eb:20:fd:02:5a:ab:e3:aa:a5:b1:10:13:d6:
9a:d4:d1:01:14:c6:13:75:9d:18:a6:79:7f:55:e9:77:98:a4:
64:ae:00:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TyHSIrpTVwLKEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MjMwMTg3MDctMGYwZS00YTVlLWEyZTAtNTZlMTYyMmIyOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN86uVboFOfqGuwy8hxa4WxEi2AyzQyfYfAP
VGeHTcB6lQsV4gcLK4DmOkmJHigslZNcSFtXOyflI0+57IbnD+Zv4Lzv6sP+fw58
VeWyzvbXM61QgFhs/9ycDb2hRD+FbkNOh/Nti+MSYVRqZ0PynotuIshGMESdDgVu
fOqrGag0t/RB9X6JPHFfZx3MIhwFS2mFHcHY/ZiT2YJ2k8rMFGh1b0EmKgPS0LNs
kzoa8esV7VBobXN/Eo8lloRcmoazdrheaITu3yh58JfkAOIjcGpVmLfIgl5r8byQ
6BUkeAvBif1aW72rXVHj19p2FHgP/0thcW2H2UAr3MepeX+U7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAg1oq2wE0BkGzlWXP1o7Fg7/ZoyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMyNjA0MDQtMjhlNy0z
NGU4LWI1MjktNzBlMzFhZTEzZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFT3WbsJlJ/W9XZMrFsMv5WN6WSTrMAKM38NxtlX3EaWWytMDKZ/VKSR
mgRAjrWtUJcSmIbWwaizQyEijPU7PCR6VhuPzqIdUbahQoER4mRKT88nLch2OaQd
4J6luIaBfzh/DNFsKlG6TmASSvi1Q7xZQ4LJwQLAhKyNAc3zlXlVwKnFZrXdvtVl
brPNaksHSUNor/hKxlwms878gvK3D/vDP6Tgfkh4okVBHJgisw2IAEssvzo6xbvQ
2eEX9PP3C+rChHv1MEUqov5EgXSJvqvqgPDemL4zJrexwbrk6yD9Alqr46qlsRAT
1prU0QEUxhN1nRimeX9V6XeYpGSuAPU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:27 2025 by rpki-client