Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa
File: aea4721b-2e1f-3fdc-8afc-8d381df68056.roa (raw, json)
Hash identifier: Xkh47yi20oli7icAhMMWq1VWtPydpVyw2OkwV/iX42w=
Subject key identifier: FD:09:3F:26:4B:CC:97:F9:4D:93:35:12:33:59:E8:C4:40:70:D1:BE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F523D5D8F1807D536033F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.133.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:23:d5:d8:f1:80:7d:53:60:33:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5cb010aa-7aca-4316-b899-3f418affe7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:87:3c:6e:a5:3c:28:bd:e9:20:a1:19:1d:
1f:bf:81:5a:43:11:bc:d2:7e:d7:c1:65:9c:48:06:
84:b4:23:46:33:11:d8:fd:aa:0e:6b:5f:41:6e:17:
ac:e3:ae:8c:f7:da:f3:ea:cf:75:a3:19:8f:86:c5:
7c:c2:28:fe:8f:73:2e:24:83:c6:08:13:03:d2:d4:
25:f7:79:bd:a4:4f:6c:2f:ef:ef:81:a7:e2:25:16:
4a:0e:d9:3e:0b:ce:73:d9:b8:08:f5:e6:13:fc:87:
5e:5b:d2:98:2a:eb:60:e6:b5:79:76:dd:cc:6c:5f:
f3:0b:1d:ee:33:26:80:4f:70:ae:0e:68:68:e4:6a:
91:e9:76:5b:30:fc:c6:26:4e:be:5b:a5:2f:08:d7:
c3:18:6e:0c:64:ad:2d:94:01:c8:ce:a2:2d:c2:ae:
e9:b6:87:76:69:1c:54:a8:0b:98:68:d6:c3:1b:96:
34:c2:79:e5:98:fb:73:9e:85:74:6b:90:19:14:bd:
dc:02:73:9e:1f:e7:1b:ec:6b:87:5a:4b:7f:e6:0d:
ad:b0:19:cc:2b:20:9d:29:c0:6d:26:ab:55:67:22:
62:a1:34:be:b5:ee:46:2e:20:1b:e3:3c:21:e6:c4:
1b:d9:c6:b4:33:26:b1:41:2d:dc:ac:88:66:9c:41:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:09:3F:26:4B:CC:97:F9:4D:93:35:12:33:59:E8:C4:40:70:D1:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:3a:06:89:36:bf:e4:ef:e6:5c:87:4f:95:70:25:ce:f6:50:
bf:9b:7c:62:a0:ac:09:65:37:22:5d:af:ee:cb:66:f0:93:cb:
9f:ba:39:d3:05:75:15:be:f9:39:be:f9:33:84:9f:51:56:05:
cb:2d:11:0d:27:b8:2c:01:32:66:b4:fc:59:bb:a2:36:e1:48:
23:d4:fd:2e:be:bf:c4:ed:ae:c9:61:29:d2:91:60:f5:4c:e1:
4c:fd:64:bd:a8:50:6f:fd:34:68:62:ed:33:06:d9:47:50:1a:
63:0f:ed:62:f0:0e:24:02:82:3c:09:0b:b7:70:87:8b:28:fd:
e9:6f:81:de:c2:9f:1f:3a:db:47:d8:23:0c:88:76:c8:ec:b4:
8d:31:a9:84:2a:9d:77:53:fc:7a:c2:31:d2:3d:ef:c5:a8:2a:
e4:5c:c4:fc:90:c4:68:19:9f:a3:86:37:ca:d9:3d:0f:28:7a:
09:d2:d1:34:71:ae:bb:39:ab:c2:ed:80:25:19:98:23:f5:c3:
07:a7:d6:7f:ea:34:e7:bf:b5:91:46:3c:53:b3:b7:59:c2:2f:
cf:25:e4:33:28:f3:6d:55:14:5a:9e:bd:1d:2c:00:ca:23:50:
07:db:dc:0f:d5:59:49:40:d8:d5:54:74:0a:0d:c0:00:75:c3:
67:2d:4b:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9SPV2PGAfVNgM/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NWNiMDEwYWEtN2FjYS00MzE2LWI4OTktM2Y0MThhZmZlN2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ6HPG6lPCi96SChGR0fv4FaQxG80n7XwWWc
SAaEtCNGMxHY/aoOa19Bbhes466M99rz6s91oxmPhsV8wij+j3MuJIPGCBMD0tQl
93m9pE9sL+/vgafiJRZKDtk+C85z2bgI9eYT/IdeW9KYKutg5rV5dt3MbF/zCx3u
MyaAT3CuDmho5GqR6XZbMPzGJk6+W6UvCNfDGG4MZK0tlAHIzqItwq7ptod2aRxU
qAuYaNbDG5Y0wnnlmPtznoV0a5AZFL3cAnOeH+cb7GuHWkt/5g2tsBnMKyCdKcBt
JqtVZyJioTS+te5GLiAb4zwh5sQb2ca0MyaxQS3crIhmnEGHhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0JPyZLzJf5TZM1EjNZ6MRAcNG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVhNDcyMWItMmUxZi0z
ZmRjLThhZmMtOGQzODFkZjY4MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC86Bok2v+Tv5lyHT5VwJc72UL+bfGKgrAllNyJdr+7LZvCTy5+6OdMF
dRW++Tm++TOEn1FWBcstEQ0nuCwBMma0/Fm7ojbhSCPU/S6+v8TtrslhKdKRYPVM
4Uz9ZL2oUG/9NGhi7TMG2UdQGmMP7WLwDiQCgjwJC7dwh4so/elvgd7Cnx8620fY
IwyIdsjstI0xqYQqnXdT/HrCMdI978WoKuRcxPyQxGgZn6OGN8rZPQ8oegnS0TRx
rrs5q8LtgCUZmCP1wwen1n/qNOe/tZFGPFOzt1nCL88l5DMo821VFFqevR0sAMoj
UAfb3A/VWUlA2NVUdAoNwAB1w2ctS44=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:21 2025 by rpki-client