Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa
File: ca68969c-6bab-3a18-b3f8-70281e402c94.roa (raw, json)
Hash identifier: tHlJc7P86MEQ+IyV6cdxRbVNjyho9gvz2a+mOQQr8Qg=
Subject key identifier: 69:84:41:C0:A4:72:38:97:00:CB:47:4C:53:B1:2B:4B:BC:CD:F0:5B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4EC2B1B97F0961E5ACA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.65.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:ec:2b:1b:97:f0:96:1e:5a:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=5c73374b-ff14-4456-b180-02b9157bf9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:8d:de:44:29:4a:60:4e:45:dd:fc:ff:2c:
a2:13:53:1e:15:39:5f:18:b6:36:51:68:3e:7b:4b:
50:ba:0a:d1:46:c2:75:d1:6e:37:21:b6:3e:e4:d0:
b4:fa:fe:1c:07:9e:83:41:f0:11:69:25:bc:98:35:
5e:c8:37:d0:f7:00:21:3f:2d:ab:2b:a9:58:05:88:
43:e3:cb:b7:84:19:c3:42:fe:83:03:05:c8:7b:ee:
07:44:25:e4:31:85:59:0a:ef:e2:46:e9:3c:ba:26:
c5:90:47:f6:6b:80:b5:00:68:9b:a6:cf:14:f0:7e:
f1:8c:54:8f:2f:3b:bc:75:51:5d:9f:66:31:04:32:
88:55:79:a4:2a:fb:04:97:e5:7e:66:a5:13:f1:98:
27:61:bf:91:80:77:ef:57:18:a6:6f:36:ed:b2:9b:
11:4f:54:57:8d:ca:12:82:46:51:56:38:08:e7:da:
c8:e3:64:a8:14:e8:a8:16:6e:4b:49:be:d0:21:40:
d4:9f:e7:8b:3c:d1:04:ce:19:76:dc:79:6b:c6:26:
bc:e5:0d:e8:cc:fd:ec:0e:56:89:bb:78:0f:9f:21:
7a:e9:f9:4f:4d:95:47:dc:13:39:1e:53:1a:24:92:
93:b3:9d:69:3f:9f:63:33:62:4f:30:f1:39:6b:a3:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:41:C0:A4:72:38:97:00:CB:47:4C:53:B1:2B:4B:BC:CD:F0:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.65.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:6e:4d:3c:09:ef:67:29:a4:39:56:4b:a5:67:cd:21:72:94:
21:53:c6:d0:1c:73:93:cd:f1:5c:14:95:b5:ee:11:11:ab:cc:
41:0b:86:cd:0a:54:93:2e:45:39:4c:5c:8d:65:ce:02:27:34:
f6:36:34:17:a3:05:08:82:92:d3:5d:5a:79:fa:b8:69:4b:d6:
8a:3f:ff:f6:bd:38:b9:fd:4a:2f:f7:1c:db:fa:50:5d:d4:e9:
d6:03:52:06:4e:fe:4c:1c:67:bd:fd:d9:0b:01:ce:14:b9:ee:
58:13:99:92:d1:4a:17:c5:ab:e6:01:0d:8d:44:21:e9:87:df:
e6:c9:d3:a1:6b:25:c5:2e:30:0f:6d:57:33:ed:c3:91:fc:9a:
15:32:56:a1:72:c1:60:6a:da:50:5e:56:78:8d:a6:e2:1e:dd:
00:b0:02:27:e7:10:0e:d1:90:bb:83:cc:a2:05:5f:0b:8c:30:
5a:75:17:09:e5:d4:ed:96:30:ad:51:44:98:9b:84:f6:2d:ba:
ec:dd:51:fb:b4:c1:f9:21:65:21:d8:b1:a3:e8:f9:8b:1f:2d:
5d:5c:05:31:41:1f:5c:01:fa:00:db:a5:99:7c:22:64:35:07:
0d:06:db:27:96:b8:ab:54:69:28:03:71:cd:dc:dc:59:a3:94:
53:8d:e5:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9OwrG5fwlh5aygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NWM3MzM3NGItZmYxNC00NDU2LWIxODAtMDJiOTE1N2JmOWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnaN3kQpSmBORd38/yyiE1MeFTlfGLY2UWg+
e0tQugrRRsJ10W43IbY+5NC0+v4cB56DQfARaSW8mDVeyDfQ9wAhPy2rK6lYBYhD
48u3hBnDQv6DAwXIe+4HRCXkMYVZCu/iRuk8uibFkEf2a4C1AGibps8U8H7xjFSP
Lzu8dVFdn2YxBDKIVXmkKvsEl+V+ZqUT8ZgnYb+RgHfvVximbzbtspsRT1RXjcoS
gkZRVjgI59rI42SoFOioFm5LSb7QIUDUn+eLPNEEzhl23Hlrxia85Q3ozP3sDlaJ
u3gPnyF66flPTZVH3BM5HlMaJJKTs51pP59jM2JPMPE5a6PUJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmEQcCkcjiXAMtHTFOxK0u8zfBbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E2ODk2OWMtNmJhYi0z
YTE4LWIzZjgtNzAyODFlNDAyYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhuTTwJ72cppDlWS6VnzSFylCFTxtAcc5PN8VwUlbXuERGrzEELhs0K
VJMuRTlMXI1lzgInNPY2NBejBQiCktNdWnn6uGlL1oo///a9OLn9Si/3HNv6UF3U
6dYDUgZO/kwcZ7392QsBzhS57lgTmZLRShfFq+YBDY1EIemH3+bJ06FrJcUuMA9t
VzPtw5H8mhUyVqFywWBq2lBeVniNpuIe3QCwAifnEA7RkLuDzKIFXwuMMFp1Fwnl
1O2WMK1RRJibhPYtuuzdUfu0wfkhZSHYsaPo+YsfLV1cBTFBH1wB+gDbpZl8ImQ1
Bw0G2yeWuKtUaSgDcc3c3FmjlFON5ek=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:41 2025 by rpki-client