Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd77fd26-92ca-3cc6-8798-73aad41c9f04.roa
File: bd77fd26-92ca-3cc6-8798-73aad41c9f04.roa (raw, json)
Hash identifier: 2aD0TXzdhRq/bYVsIwuigDnLyGcvv70U5JVDJsmdQ4A=
Subject key identifier: 08:4F:A2:85:2D:3B:82:C3:44:5F:48:2C:09:4F:CA:4D:F7:5C:DF:C8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F507327EB215892C4C7500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd77fd26-92ca-3cc6-8798-73aad41c9f04.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.228.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:07:32:7e:b2:15:89:2c:4c:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=d82b7bdb-d01d-4678-b3a9-c8d5a5cd6464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:72:09:37:d9:04:e1:e5:44:c7:23:f7:86:
21:fa:b3:38:6f:5b:39:84:f8:ef:9e:07:0f:fc:2e:
a4:3a:a2:49:e1:7c:8b:9f:9d:61:3f:c3:2a:d4:f0:
3e:6b:25:ef:87:88:08:e9:0b:d0:0a:18:a6:0e:ab:
72:c7:96:d2:2b:53:a1:90:2a:92:29:f5:0d:9f:d4:
6b:74:88:11:f9:a7:93:97:a0:4a:90:11:d7:77:ec:
22:aa:37:fc:8d:e9:cf:b9:ce:2d:58:fd:68:06:96:
54:21:bd:43:e7:7b:62:28:f1:31:51:14:12:2e:aa:
58:05:b0:75:4e:de:37:c4:71:db:69:68:da:30:ae:
48:e5:63:5c:fa:8a:4e:5c:de:fa:20:16:dc:65:39:
ec:95:e4:17:b8:1d:86:67:c6:1f:71:1e:88:3f:dd:
75:c2:6d:63:f3:a3:0f:15:01:bc:11:77:b2:df:5d:
f9:4f:69:ec:f1:dc:72:cf:81:39:14:0b:c6:a2:24:
86:6f:60:ad:8a:53:f0:cd:d6:81:57:93:7d:24:90:
46:71:5f:6f:b3:68:e0:dc:bc:6a:28:54:59:42:8f:
52:3b:a0:60:00:0d:c4:34:0d:50:c5:11:29:bf:77:
9e:35:f5:15:2e:ea:0c:67:92:9a:a9:55:69:8b:10:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:A2:85:2D:3B:82:C3:44:5F:48:2C:09:4F:CA:4D:F7:5C:DF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd77fd26-92ca-3cc6-8798-73aad41c9f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.228.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:2d:30:d9:a7:51:7a:76:47:7b:d9:1b:9b:5b:01:32:cc:43:
8d:c8:f1:b7:be:30:c9:02:85:13:23:51:3e:45:77:75:f9:43:
57:3b:fc:e0:51:6b:02:5d:ae:b1:c7:e0:ae:50:74:89:a3:1b:
3c:0a:58:a0:18:38:4e:8b:87:7e:78:13:36:d6:d5:37:43:d3:
02:05:32:0c:d0:8f:7f:c7:05:4f:6e:aa:95:f5:a5:c1:bd:c3:
df:55:57:68:97:7e:83:d0:c4:a1:db:81:e8:0a:8b:ba:3d:df:
4c:af:ea:46:b3:d5:3e:a3:96:97:81:e2:f9:f5:d2:1d:08:48:
fc:e4:c2:b7:0a:77:79:a9:e6:49:69:0a:4a:11:55:46:f5:97:
00:d8:f3:25:13:d0:6f:fb:e6:11:9f:bc:d7:58:b5:62:89:e3:
15:ac:82:b3:89:6f:aa:b5:77:c0:01:da:80:c0:91:f4:72:3c:
5d:03:6d:6e:b3:89:a8:52:ce:fa:9f:b1:e4:97:cf:c8:f4:e2:
f7:96:1c:4b:e7:cd:5a:8a:c5:a0:52:92:91:be:07:89:20:8d:
c5:db:dc:7c:66:4c:b2:20:a9:92:39:db:3d:44:43:7d:ab:3d:
12:07:80:93:38:57:15:b2:3c:21:b1:4d:31:43:cc:12:99:b8:
a6:06:30:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QcyfrIViSxMdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDgyYjdiZGItZDAxZC00Njc4LWIzYTktYzhkNWE1Y2Q2NDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQxyCTfZBOHlRMcj94Yh+rM4b1s5hPjvngcP
/C6kOqJJ4XyLn51hP8Mq1PA+ayXvh4gI6QvQChimDqtyx5bSK1OhkCqSKfUNn9Rr
dIgR+aeTl6BKkBHXd+wiqjf8jenPuc4tWP1oBpZUIb1D53tiKPExURQSLqpYBbB1
Tt43xHHbaWjaMK5I5WNc+opOXN76IBbcZTnsleQXuB2GZ8YfcR6IP911wm1j86MP
FQG8EXey3135T2ns8dxyz4E5FAvGoiSGb2CtilPwzdaBV5N9JJBGcV9vs2jg3Lxq
KFRZQo9SO6BgAA3ENA1QxREpv3eeNfUVLuoMZ5KaqVVpixB8SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhPooUtO4LDRF9ILAlPyk33XN/IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ3N2ZkMjYtOTJjYS0z
Y2M2LTg3OTgtNzNhYWQ0MWM5ZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+TAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUtMNmnUXp2R3vZG5tbATLMQ43I8be+MMkChRMjUT5Fd3X5Q1c7/OBR
awJdrrHH4K5QdImjGzwKWKAYOE6Lh354EzbW1TdD0wIFMgzQj3/HBU9uqpX1pcG9
w99VV2iXfoPQxKHbgegKi7o930yv6kaz1T6jlpeB4vn10h0ISPzkwrcKd3mp5klp
CkoRVUb1lwDY8yUT0G/75hGfvNdYtWKJ4xWsgrOJb6q1d8AB2oDAkfRyPF0DbW6z
iahSzvqfseSXz8j04veWHEvnzVqKxaBSkpG+B4kgjcXb3HxmTLIgqZI52z1EQ32r
PRIHgJM4VxWyPCGxTTFDzBKZuKYGMOs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:02 2025 by rpki-client