Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6022d7c-2584-31df-9af2-01aa074a465c.roa
File: b6022d7c-2584-31df-9af2-01aa074a465c.roa (raw, json)
Hash identifier: U+GBlNRKmdnABjAJ5AflmpYU10jyOnbhU6zNa0HGoFc=
Subject key identifier: 9B:5F:73:FE:34:AF:14:01:0D:B4:49:B7:2F:78:B3:E1:39:91:0E:18
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F5360FB95A12F3C792F6C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6022d7c-2584-31df-9af2-01aa074a465c.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.87.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:36:0f:b9:5a:12:f3:c7:92:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=f1cc44a6-5ec1-4c70-9784-ec7e6ce016a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:a7:ce:d8:d8:6c:80:3a:22:b7:c1:14:11:
0b:48:1f:02:80:b6:51:8c:5f:93:7a:be:16:0d:58:
20:d6:4d:21:98:26:0a:1a:5a:17:27:87:e4:05:09:
42:57:92:bb:a3:0e:59:82:84:99:47:f5:a0:e7:41:
09:f9:b4:b7:a2:70:42:6a:05:d6:e0:85:55:f0:39:
37:4e:29:cb:dc:f6:b1:c1:a0:22:c1:4d:e0:e2:5e:
3f:c6:1a:69:85:30:3e:4f:38:d2:39:69:f7:72:81:
92:45:a9:49:c1:91:a4:53:5e:6d:95:00:5c:1a:10:
fa:88:09:3a:c8:8d:53:fb:ff:87:b3:65:bd:bf:ac:
1f:c8:91:b7:5c:e2:6c:d7:77:0c:a5:dd:94:c7:2b:
9c:01:a5:19:6c:c8:e8:ea:6b:83:77:7c:ef:97:71:
6d:93:94:42:56:37:a1:8a:c0:4e:c2:1c:5f:c5:a2:
8b:81:ca:54:90:27:84:e4:fb:1d:49:90:47:68:60:
5a:75:fc:61:be:bb:c3:db:2b:26:d7:86:9e:26:6e:
96:0e:31:e7:7b:fe:c4:18:52:a5:f1:b0:32:ba:55:
bf:a3:16:e8:50:b2:df:7e:e0:96:fc:96:b0:2f:38:
57:88:35:74:0b:11:a6:0a:43:7c:c4:81:eb:8f:f8:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:73:FE:34:AF:14:01:0D:B4:49:B7:2F:78:B3:E1:39:91:0E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6022d7c-2584-31df-9af2-01aa074a465c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.87.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:9a:d1:b0:84:b2:d3:ea:41:f2:c0:5f:fa:34:cd:2c:db:c8:
7c:db:20:13:01:27:c1:fc:ec:81:41:98:2e:a7:90:7d:3d:94:
14:a3:1c:27:04:95:c4:dc:06:72:52:7c:75:ac:45:0d:40:e4:
6c:1c:6e:58:f7:e9:5e:13:d5:91:3f:b9:3d:0a:ea:af:f6:72:
0b:c0:a8:90:64:6c:ef:f7:87:ba:4b:76:bf:c6:e6:00:6b:80:
b2:cf:c4:82:25:33:6d:bc:a3:c2:45:6a:2a:75:3d:d4:2a:ad:
c1:4a:42:9b:a7:28:39:f1:6c:11:51:af:91:9d:2b:b3:08:16:
bf:14:0d:15:f1:95:90:45:e4:55:3b:55:b5:66:db:51:b3:76:
47:31:bb:1a:64:cf:e0:08:64:b7:55:f7:1a:62:fb:e4:5a:3d:
cc:57:4c:5a:5e:7b:91:0f:76:63:09:ef:f0:a2:63:60:78:38:
ca:23:9e:3c:1b:40:9d:31:ed:d7:d6:a1:bf:dc:7c:85:be:06:
4f:84:4b:e7:56:5a:70:28:c3:dd:ab:ed:d5:ab:6e:50:11:26:
10:88:be:56:14:ed:3a:df:60:be:2a:77:55:2f:b3:29:24:4d:
a9:f2:a0:e1:0b:e5:15:5e:c7:8e:d9:48:63:2e:5c:da:09:3d:
36:1d:03:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TYPuVoS88eS9sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZjFjYzQ0YTYtNWVjMS00YzcwLTk3ODQtZWM3ZTZjZTAxNmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH6nztjYbIA6IrfBFBELSB8CgLZRjF+Ter4W
DVgg1k0hmCYKGloXJ4fkBQlCV5K7ow5ZgoSZR/Wg50EJ+bS3onBCagXW4IVV8Dk3
TinL3PaxwaAiwU3g4l4/xhpphTA+TzjSOWn3coGSRalJwZGkU15tlQBcGhD6iAk6
yI1T+/+Hs2W9v6wfyJG3XOJs13cMpd2UxyucAaUZbMjo6muDd3zvl3Ftk5RCVjeh
isBOwhxfxaKLgcpUkCeE5PsdSZBHaGBadfxhvrvD2ysm14aeJm6WDjHne/7EGFKl
8bAyulW/oxboULLffuCW/JawLzhXiDV0CxGmCkN8xIHrj/hDZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtfc/40rxQBDbRJty94s+E5kQ4YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjYwMjJkN2MtMjU4NC0z
MWRmLTlhZjItMDFhYTA3NGE0NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIleAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqa0bCEstPqQfLAX/o0zSzbyHzbIBMBJ8H87IFBmC6nkH09lBSjHCcE
lcTcBnJSfHWsRQ1A5Gwcblj36V4T1ZE/uT0K6q/2cgvAqJBkbO/3h7pLdr/G5gBr
gLLPxIIlM228o8JFaip1PdQqrcFKQpunKDnxbBFRr5GdK7MIFr8UDRXxlZBF5FU7
VbVm21Gzdkcxuxpkz+AIZLdV9xpi++RaPcxXTFpee5EPdmMJ7/CiY2B4OMojnjwb
QJ0x7dfWob/cfIW+Bk+ES+dWWnAow92r7dWrblARJhCIvlYU7TrfYL4qd1Uvsykk
TanyoOEL5RVex47ZSGMuXNoJPTYdA8k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:18 2025 by rpki-client