Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa
File: cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa (raw, json)
Hash identifier: FI0J1TgBWvlKifolIu3OHyZCvortDfdpNdNlNOn2Bys=
Subject key identifier: 76:67:A8:29:A1:B9:4B:72:5D:B9:BC:49:3A:7A:B5:86:31:D4:61:24
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52F46D531E8120A132240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.222.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:2f:46:d5:31:e8:12:0a:13:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=630947e2-1110-496e-bc71-b3b66b98ffa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:8b:cd:82:da:d8:4b:a4:6f:b4:06:8f:9e:
8f:8b:95:36:aa:24:1d:d9:22:37:d4:92:f3:ae:f9:
d9:b0:26:9d:72:fa:b0:91:20:0c:36:8e:e7:85:34:
fc:b3:b8:24:5d:af:eb:ef:12:ff:fc:56:9a:50:60:
51:96:14:00:98:78:0f:c8:ff:79:f4:da:00:f5:b9:
51:43:b7:5c:9b:0c:7d:43:59:fd:b7:20:66:51:08:
09:f2:a6:4f:73:0c:17:dd:b1:ec:e9:a8:43:e7:9c:
a8:50:1c:51:4a:74:9a:4a:0b:e1:cc:7e:78:2b:7e:
36:77:29:9b:73:f5:b0:47:5c:2c:f9:9c:af:ca:78:
a4:a4:30:9f:80:0c:3d:95:7f:ea:b7:0d:11:15:c3:
d5:4c:fa:5c:9c:d9:1d:94:b2:fb:f5:50:3b:5f:61:
ed:7c:07:8d:11:6c:0b:8d:ea:04:92:0b:83:e6:af:
39:2a:d3:0d:9a:c5:19:2d:f9:ee:20:64:c7:ac:6a:
d7:f8:60:56:0d:5b:87:8c:3b:0f:28:2f:86:b1:82:
14:bc:53:6f:af:3e:4c:30:31:cc:4e:f9:3f:71:d3:
78:26:20:82:ec:6c:6a:07:8a:52:a4:60:b1:7e:0f:
f7:64:23:e8:e7:6a:46:b1:6a:ab:f1:c2:c8:f9:f3:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:A8:29:A1:B9:4B:72:5D:B9:BC:49:3A:7A:B5:86:31:D4:61:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.222.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:97:1c:ba:16:ba:3c:4f:e7:5d:fe:1d:43:4e:07:ec:4e:5a:
1f:d8:01:77:81:ad:0c:c9:93:84:5a:36:8e:dd:69:e4:98:c0:
54:6a:bb:d1:ea:ec:ec:eb:90:14:fb:13:48:9d:22:ef:20:33:
a6:a8:f0:64:dc:ef:05:c5:51:a0:75:ff:4c:e7:79:3b:5c:66:
d2:5e:c5:63:9a:63:87:34:65:ca:63:79:77:21:33:4e:6d:31:
70:a8:25:05:48:3d:5a:5c:22:19:fb:6e:9a:4d:84:f2:50:e2:
a5:c9:53:0f:87:bf:39:d1:99:7a:ac:c7:e1:d7:92:c2:aa:5b:
0f:80:35:af:76:dd:8d:e3:ab:80:83:38:f6:48:54:ac:1e:9a:
c1:3f:ea:f0:bb:96:58:bf:f9:e5:f9:db:8d:4c:72:2b:62:c0:
2f:3c:75:64:7b:27:ec:6a:86:0e:55:79:fa:ba:dd:fb:4d:9c:
cf:57:73:fe:0c:87:06:c0:b2:b7:a3:eb:5a:30:c2:61:d7:a4:
4f:50:12:a6:59:ad:79:d2:96:d3:9a:3b:13:61:08:90:f2:41:
30:04:cd:95:37:01:35:85:ee:e6:19:68:b8:25:f2:90:39:0a:
a1:c5:f8:41:73:14:30:61:a3:07:3c:3b:a4:71:5f:c8:e9:9b:
7d:13:38:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9S9G1THoEgoTIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NjMwOTQ3ZTItMTExMC00OTZlLWJjNzEtYjNiNjZiOThmZmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZaLzYLa2Eukb7QGj56Pi5U2qiQd2SI31JLz
rvnZsCadcvqwkSAMNo7nhTT8s7gkXa/r7xL//FaaUGBRlhQAmHgPyP959NoA9blR
Q7dcmwx9Q1n9tyBmUQgJ8qZPcwwX3bHs6ahD55yoUBxRSnSaSgvhzH54K342dymb
c/WwR1ws+ZyvynikpDCfgAw9lX/qtw0RFcPVTPpcnNkdlLL79VA7X2HtfAeNEWwL
jeoEkguD5q85KtMNmsUZLfnuIGTHrGrX+GBWDVuHjDsPKC+GsYIUvFNvrz5MMDHM
Tvk/cdN4JiCC7GxqB4pSpGCxfg/3ZCPo52pGsWqr8cLI+fMByQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZnqCmhuUtyXbm8STp6tYYx1GEkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZkZjViNzEtZTgwMy0z
Y2I4LWEzZDgtN2E4NDVmZWE0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKXHLoWujxP513+HUNOB+xOWh/YAXeBrQzJk4RaNo7daeSYwFRqu9Hq
7OzrkBT7E0idIu8gM6ao8GTc7wXFUaB1/0zneTtcZtJexWOaY4c0ZcpjeXchM05t
MXCoJQVIPVpcIhn7bppNhPJQ4qXJUw+HvznRmXqsx+HXksKqWw+ANa923Y3jq4CD
OPZIVKwemsE/6vC7lli/+eX5241McitiwC88dWR7J+xqhg5Vefq63ftNnM9Xc/4M
hwbAsrej61owwmHXpE9QEqZZrXnSltOaOxNhCJDyQTAEzZU3ATWF7uYZaLgl8pA5
CqHF+EFzFDBhowc8O6RxX8jpm30TOJw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:53 2025 by rpki-client