Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa
File: c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa (raw, json)
Hash identifier: OZdremBdfnoRcONdGZii6B9xSv1jPGZPslpcjwE88V0=
Subject key identifier: 85:CE:84:F7:94:03:31:7A:F2:52:D2:11:4A:9B:D5:F5:50:07:B9:0C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F539E1AC150D6BBDF7ED80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.99.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:39:e1:ac:15:0d:6b:bd:f7:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=2de4e7dc-ada2-4c2b-bb2a-62115cfcd285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:2b:29:a3:01:79:3e:55:00:06:28:9b:b3:
44:86:94:d7:50:fb:4e:3e:09:3e:bc:fc:64:d8:08:
ae:fb:41:80:89:0f:47:36:82:7b:d0:d5:a0:3e:ac:
62:7b:93:d0:af:f0:18:08:8b:46:66:c6:76:a5:f0:
b6:94:e2:7f:a0:22:c4:6c:98:09:eb:e8:41:38:9f:
2d:da:f6:51:ca:cc:3d:a2:05:47:b6:6b:6a:00:50:
f2:74:54:1a:7d:58:14:ae:52:4e:01:5f:c3:c9:53:
6a:cd:61:e0:53:67:e7:95:2c:1d:33:3b:df:44:7c:
28:80:dd:8e:c0:b1:81:a7:5c:1e:79:af:4b:e9:8b:
d7:9d:06:c7:0b:b2:38:be:36:c5:23:41:5c:03:8a:
18:74:98:c8:11:0f:2a:65:34:98:e8:db:4e:fa:73:
95:a9:fc:03:89:55:2d:16:f0:10:99:65:7e:24:dd:
1b:35:fd:c6:6a:e2:93:42:8a:44:ee:4a:0c:89:78:
ea:aa:c2:40:aa:ea:22:15:82:f3:ac:c2:26:b8:d8:
c5:56:2d:13:e7:12:93:15:a1:1b:b7:e6:5a:47:ba:
d6:7c:11:73:88:7a:14:b2:f1:eb:a4:93:b7:7b:1d:
be:cc:07:75:6a:48:0c:e0:fc:d7:f9:d3:d9:0c:4b:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:84:F7:94:03:31:7A:F2:52:D2:11:4A:9B:D5:F5:50:07:B9:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.99.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ea:37:f4:4c:bf:8d:8a:41:98:af:2c:4d:d4:14:6a:36:1b:
5f:6c:92:75:e2:46:00:32:5b:f2:33:4c:b9:b4:dc:2b:0c:51:
4a:f7:5f:aa:05:5e:e2:d2:3c:b8:a4:68:bb:08:60:37:08:27:
92:ac:c2:5c:d3:e6:8b:ad:42:36:37:3e:25:37:39:e5:c3:4d:
6d:1e:f4:f4:e5:9e:68:e3:77:d6:5a:97:4c:a0:88:ba:d4:36:
2f:3d:7d:bf:e0:b8:fd:15:39:39:c6:50:6f:77:24:fc:a9:10:
32:02:e8:0b:bb:6c:1d:9c:e9:c1:9f:93:3b:b8:3c:aa:ed:a7:
25:3e:2b:73:41:07:0e:e5:70:dc:84:6a:52:25:b5:af:45:4d:
94:a8:7b:60:e2:3d:37:72:f9:a6:e7:2b:c1:e8:d8:03:81:65:
1f:1c:9c:46:9e:51:4b:79:a1:d8:91:56:3c:19:83:34:9a:00:
73:92:9d:f4:09:5d:7f:d1:30:5e:db:55:9d:df:76:e3:db:44:
18:d1:1b:0c:8d:3d:f9:82:14:79:2b:5f:2a:53:ac:5e:ef:34:
16:b5:7f:4d:e3:0d:6f:fd:af:64:bb:7a:75:b2:0a:8a:a0:b1:
f1:6a:5c:25:de:3f:6a:b8:1b:5b:5a:4b:a5:ff:ba:a8:a5:1b:
7b:89:00:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TnhrBUNa7337YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MmRlNGU3ZGMtYWRhMi00YzJiLWJiMmEtNjIxMTVjZmNkMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjgrKaMBeT5VAAYom7NEhpTXUPtOPgk+vPxk
2Aiu+0GAiQ9HNoJ70NWgPqxie5PQr/AYCItGZsZ2pfC2lOJ/oCLEbJgJ6+hBOJ8t
2vZRysw9ogVHtmtqAFDydFQafVgUrlJOAV/DyVNqzWHgU2fnlSwdMzvfRHwogN2O
wLGBp1weea9L6YvXnQbHC7I4vjbFI0FcA4oYdJjIEQ8qZTSY6NtO+nOVqfwDiVUt
FvAQmWV+JN0bNf3GauKTQopE7koMiXjqqsJAquoiFYLzrMImuNjFVi0T5xKTFaEb
t+ZaR7rWfBFziHoUsvHrpJO3ex2+zAd1akgM4PzX+dPZDEvqqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXOhPeUAzF68lLSEUqb1fVQB7kMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzRjZWExNjYtYTE1ZC0z
YTBhLTk0YjktNGFhNWQyZjRjNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfqN/RMv42KQZivLE3UFGo2G19sknXiRgAyW/IzTLm03CsMUUr3X6oF
XuLSPLikaLsIYDcIJ5KswlzT5outQjY3PiU3OeXDTW0e9PTlnmjjd9Zal0ygiLrU
Ni89fb/guP0VOTnGUG93JPypEDIC6Au7bB2c6cGfkzu4PKrtpyU+K3NBBw7lcNyE
alIlta9FTZSoe2DiPTdy+abnK8Ho2AOBZR8cnEaeUUt5odiRVjwZgzSaAHOSnfQJ
XX/RMF7bVZ3fduPbRBjRGwyNPfmCFHkrXypTrF7vNBa1f03jDW/9r2S7enWyCoqg
sfFqXCXeP2q4G1taS6X/uqilG3uJAPM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:08 2025 by rpki-client