Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3a7cd6-ecae-30b9-8261-d4e9cb5609cc.roa
File: cb3a7cd6-ecae-30b9-8261-d4e9cb5609cc.roa (raw, json)
Hash identifier: Xiy8gClLcoiPjVpDy2+C3DZKrykIvbhYQpyfwARssws=
Subject key identifier: F3:E2:D9:BE:FA:D9:2E:A4:21:A5:CD:31:3A:65:22:A1:BD:30:A8:63
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F4F49E16CE6E997D7003C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3a7cd6-ecae-30b9-8261-d4e9cb5609cc.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 34.98.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:f4:9e:16:ce:6e:99:7d:70:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=224d005e-1531-46ac-96df-89aafba3ce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:5c:3d:b5:3a:de:6c:b6:16:96:73:42:e1:
0a:d7:9f:a3:c3:6d:72:cb:26:f6:de:15:91:e9:0f:
ea:7b:d3:45:7b:53:e7:ee:2e:ae:b2:b9:fa:9a:08:
c9:c9:56:bc:1b:17:26:fc:a3:30:47:23:5b:25:28:
61:50:b6:06:b2:fa:af:38:3a:a6:f2:96:e0:6e:3d:
86:5e:08:82:22:0f:a5:ec:76:0f:8d:1b:2b:37:16:
a4:7b:3a:4f:af:98:41:91:c1:df:12:1f:6d:40:a7:
80:4c:f9:06:34:a3:d0:ef:cb:a5:ab:bb:d6:c3:56:
4d:04:03:ff:a3:5b:c8:e5:d3:2a:5d:a7:56:38:dd:
cb:44:73:76:fd:b6:3c:ce:bf:56:39:28:58:18:2c:
ae:79:56:ea:89:39:39:ad:62:51:fd:c0:ab:3a:6d:
98:1f:7f:1c:8e:93:17:b5:35:e6:a4:1e:51:93:c6:
f1:40:42:6e:73:3d:68:81:89:a8:96:9c:34:b5:a5:
2e:49:f4:d8:5f:2a:7f:fd:f2:f7:4a:91:c6:8d:da:
95:bf:45:67:9d:37:80:17:f3:ba:24:8e:fc:1b:c4:
3b:19:d0:75:49:35:e4:26:61:fe:b1:90:0f:e4:1c:
e1:5a:06:76:a3:f5:8f:75:88:31:a2:09:dc:3a:12:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E2:D9:BE:FA:D9:2E:A4:21:A5:CD:31:3A:65:22:A1:BD:30:A8:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3a7cd6-ecae-30b9-8261-d4e9cb5609cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.98.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:82:ec:12:84:8c:dd:44:07:a5:32:9f:52:a1:e4:26:6d:0b:
a7:74:aa:89:8a:75:35:cc:03:13:f0:f6:10:79:86:3f:92:08:
46:5e:2e:59:19:6b:7c:7d:ef:8f:01:4f:a1:7a:ed:7d:88:af:
30:e6:ee:9d:23:c6:c4:74:3f:d4:6d:61:fb:39:88:89:8e:e1:
8d:42:1e:3a:7b:7d:9b:20:c4:c9:ed:34:1a:02:19:a0:96:9a:
91:df:eb:63:10:35:92:c7:14:5d:44:36:e6:cc:ff:53:89:a7:
79:ef:1b:ff:66:c3:a7:75:a9:93:bd:a7:89:dd:b6:fe:cf:1f:
68:f7:17:7e:81:84:57:b1:6a:3e:28:4d:31:e4:8b:fe:92:1d:
eb:d8:2b:09:54:22:88:38:cc:9a:6f:71:ce:d3:2d:01:83:b9:
da:0c:77:20:a7:7d:d8:8c:84:25:df:41:3b:a8:5b:8a:02:00:
f3:d4:7c:fa:1b:30:43:9f:7d:16:8c:3d:ff:6e:c0:81:ca:ad:
a2:5b:77:2c:6d:11:73:b6:56:55:70:cd:4e:35:e3:9b:68:7c:
65:aa:45:43:c1:54:52:30:6f:e1:44:b3:58:14:a7:87:c9:f4:
82:c3:15:7f:21:74:e1:1a:1f:8b:d5:12:f4:b3:82:5b:b4:e1:
aa:ff:25:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9PSeFs5umX1wA8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MjI0ZDAwNWUtMTUzMS00NmFjLTk2ZGYtODlhYWZiYTNjZTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EpcPbU63my2FpZzQuEK15+jw21yyyb23hWR
6Q/qe9NFe1Pn7i6usrn6mgjJyVa8Gxcm/KMwRyNbJShhULYGsvqvODqm8pbgbj2G
XgiCIg+l7HYPjRsrNxakezpPr5hBkcHfEh9tQKeATPkGNKPQ78ulq7vWw1ZNBAP/
o1vI5dMqXadWON3LRHN2/bY8zr9WOShYGCyueVbqiTk5rWJR/cCrOm2YH38cjpMX
tTXmpB5Rk8bxQEJucz1ogYmolpw0taUuSfTYXyp//fL3SpHGjdqVv0VnnTeAF/O6
JI78G8Q7GdB1STXkJmH+sZAP5BzhWgZ2o/WPdYgxogncOhIAUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPi2b762S6kIaXNMTplIqG9MKhjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IzYTdjZDYtZWNhZS0z
MGI5LTgyNjEtZDRlOWNiNTYwOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOC7BKEjN1EB6Uyn1Kh5CZtC6d0qomKdTXMAxPw9hB5hj+SCEZeLlkZ
a3x9748BT6F67X2IrzDm7p0jxsR0P9RtYfs5iImO4Y1CHjp7fZsgxMntNBoCGaCW
mpHf62MQNZLHFF1ENubM/1OJp3nvG/9mw6d1qZO9p4ndtv7PH2j3F36BhFexaj4o
TTHki/6SHevYKwlUIog4zJpvcc7TLQGDudoMdyCnfdiMhCXfQTuoW4oCAPPUfPob
MEOffRaMPf9uwIHKraJbdyxtEXO2VlVwzU4145tofGWqRUPBVFIwb+FEs1gUp4fJ
9ILDFX8hdOEaH4vVEvSzglu04ar/JZw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:54 2025 by rpki-client