Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c967d3dc-93d7-3a22-8fba-500527299001.roa
File: c967d3dc-93d7-3a22-8fba-500527299001.roa (raw, json)
Hash identifier: TdV7I+KJH317r70x6mDEmmfbIJkMsbZ/qGMzwhkUcSQ=
Subject key identifier: 2B:CE:AD:A9:D4:D4:96:2C:DF:43:3A:4C:2E:DA:7E:0C:80:43:8A:18
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4CD091F5D95DBC220C840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c967d3dc-93d7-3a22-8fba-500527299001.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.186.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:cd:09:1f:5d:95:db:c2:20:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=9aec703a-fee6-431b-bec0-6dadb60fd2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:a4:27:5e:a7:3d:2a:8b:81:25:6b:e6:fd:
19:cd:01:4c:31:c9:de:3b:cb:87:36:87:bb:7e:e1:
5b:d5:60:b8:5d:55:9b:00:4d:38:a0:dd:c0:e8:0c:
b1:71:da:18:9f:ac:66:59:39:43:86:77:bb:2a:eb:
63:f5:19:1c:be:00:ce:79:53:71:c6:47:f0:7b:af:
dd:db:c3:1f:d7:38:ef:57:46:82:c2:52:29:d3:8b:
b9:e5:5b:e8:cc:36:17:1b:f4:a5:82:4d:f8:03:00:
a2:9a:69:27:f8:e7:a8:b8:49:28:18:14:6a:0f:9b:
be:8c:bc:97:e4:12:cd:ce:4b:bc:a4:52:d2:68:56:
ce:db:0a:29:2b:84:1b:6c:fd:21:88:6d:d4:5f:a3:
bc:fa:5d:c1:e8:30:5e:87:1c:12:00:59:d1:1b:64:
f3:18:c5:bb:54:53:d0:0e:55:ad:d2:06:d9:9b:15:
a7:ee:b8:2a:7d:d0:97:ab:7a:c6:14:76:3c:7d:87:
cc:fe:7d:23:11:78:79:60:02:82:d1:55:82:57:93:
2a:9e:de:1c:bf:4f:2b:9f:61:fc:a0:dc:47:fe:31:
d9:53:cb:f7:37:8c:b9:b7:4f:12:c2:69:a0:cd:20:
b5:b7:6e:b0:60:43:d7:3e:f6:69:96:ff:e0:3d:70:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:AD:A9:D4:D4:96:2C:DF:43:3A:4C:2E:DA:7E:0C:80:43:8A:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c967d3dc-93d7-3a22-8fba-500527299001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.186.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:41:3f:65:fb:3f:6b:57:cc:57:61:a9:39:c8:d8:64:2b:bd:
9c:cb:f6:00:d5:ae:a5:4d:57:8e:74:17:e6:68:77:2f:60:0f:
4f:d4:26:e4:14:d4:14:b4:d8:36:4e:d6:6e:7d:9b:c0:2f:23:
90:89:74:01:2e:60:de:f8:fd:4e:8b:a8:e3:35:30:51:67:22:
0a:a8:56:02:64:bb:7c:4c:7d:b0:41:89:7c:c6:e7:c5:bd:9f:
5d:99:b9:0f:aa:42:fd:10:73:92:00:32:58:ff:44:50:73:58:
72:a4:53:e4:bc:92:bd:36:6b:83:55:a1:e8:a8:6a:d2:07:b9:
5b:a8:9b:e7:cc:06:b6:6d:3a:65:63:10:03:ea:da:7b:69:fe:
5d:6b:3e:b3:1f:6d:7a:0e:85:19:f4:1e:e0:9e:75:10:2a:d2:
e2:8d:8e:e6:15:86:0e:d8:ce:ef:cd:0f:12:fe:1f:66:e0:cc:
16:62:d8:dd:00:87:df:44:e7:49:0f:42:79:86:c7:06:34:33:
97:1a:69:75:a1:64:84:6f:61:ce:1f:fe:a9:da:6c:95:35:56:
1c:8f:97:49:b3:83:d1:a9:20:1c:16:fe:5f:3b:92:f4:69:21:
d9:a9:13:4a:ee:85:25:76:31:0f:9d:39:42:08:55:61:34:bc:
97:50:e3:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9M0JH12V28IgyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
OWFlYzcwM2EtZmVlNi00MzFiLWJlYzAtNmRhZGI2MGZkMmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHykJ16nPSqLgSVr5v0ZzQFMMcneO8uHNoe7
fuFb1WC4XVWbAE04oN3A6AyxcdoYn6xmWTlDhne7Kutj9RkcvgDOeVNxxkfwe6/d
28Mf1zjvV0aCwlIp04u55VvozDYXG/Slgk34AwCimmkn+OeouEkoGBRqD5u+jLyX
5BLNzku8pFLSaFbO2wopK4QbbP0hiG3UX6O8+l3B6DBehxwSAFnRG2TzGMW7VFPQ
DlWt0gbZmxWn7rgqfdCXq3rGFHY8fYfM/n0jEXh5YAKC0VWCV5Mqnt4cv08rn2H8
oNxH/jHZU8v3N4y5t08SwmmgzSC1t26wYEPXPvZplv/gPXCfSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvOranU1JYs30M6TC7afgyAQ4oYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk2N2QzZGMtOTNkNy0z
YTIyLThmYmEtNTAwNTI3Mjk5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIrqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBBP2X7P2tXzFdhqTnI2GQrvZzL9gDVrqVNV450F+Zody9gD0/UJuQU
1BS02DZO1m59m8AvI5CJdAEuYN74/U6LqOM1MFFnIgqoVgJku3xMfbBBiXzG58W9
n12ZuQ+qQv0Qc5IAMlj/RFBzWHKkU+S8kr02a4NVoeioatIHuVuom+fMBrZtOmVj
EAPq2ntp/l1rPrMfbXoOhRn0HuCedRAq0uKNjuYVhg7Yzu/NDxL+H2bgzBZi2N0A
h99E50kPQnmGxwY0M5caaXWhZIRvYc4f/qnabJU1VhyPl0mzg9GpIBwW/l87kvRp
IdmpE0ruhSV2MQ+dOUIIVWE0vJdQ42o=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:35 2025 by rpki-client