Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec616020-64b2-39d3-af88-2fb11c7372d7.roa
File: ec616020-64b2-39d3-af88-2fb11c7372d7.roa (raw, json)
Hash identifier: hGzbwzcHoK6kxUQCoVQPBTZNddhx7/BXP7qYxBUXzBc=
Subject key identifier: 37:8E:01:97:94:72:C9:9C:53:41:2C:AF:80:B7:17:DC:6A:CB:57:65
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F52263125238F699AEAF40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec616020-64b2-39d3-af88-2fb11c7372d7.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.188.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:22:63:12:52:38:f6:99:ae:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=ef6d16c3-8c87-4cd5-8ce7-bfaffad6f73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:29:1d:3a:87:fa:8e:92:ad:58:26:dc:0c:
f1:62:07:b0:63:40:ac:ec:31:61:97:d9:c7:18:4c:
07:f0:12:c5:1c:ae:26:29:d0:b2:a7:44:51:11:de:
7d:ce:68:8a:41:e5:72:6f:73:0d:22:e8:0b:09:10:
45:22:22:18:30:98:8f:c0:f5:a0:77:7f:42:88:c3:
90:1e:92:0c:6f:2c:33:6c:c9:3b:22:10:9d:d4:59:
d1:bb:90:74:92:50:e9:fb:6f:d4:98:01:8a:b7:0d:
9b:e6:2b:60:d6:25:7e:ab:dd:b8:76:25:64:12:42:
1a:4a:78:60:b2:c6:2b:dd:60:b1:4d:10:af:f2:36:
c8:14:e2:02:a9:67:93:53:05:4f:5f:28:57:78:97:
d4:08:08:a5:88:ff:fe:67:e9:a6:bd:f7:29:a5:41:
ae:fc:bb:3d:dc:af:18:81:e5:d1:84:3e:a5:bf:9d:
e1:f2:57:42:70:8f:60:31:51:a6:c9:74:8c:05:b9:
7e:a2:b6:ba:b9:66:cc:36:89:f6:69:ca:29:2c:53:
c3:63:9f:7c:63:7f:ac:4d:2f:64:cf:62:3b:e0:8d:
df:43:99:21:5d:03:07:a5:fb:a2:8e:0f:f5:10:6f:
ca:81:e1:8d:e8:39:b4:1f:8d:b7:eb:a0:60:0a:4a:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:01:97:94:72:C9:9C:53:41:2C:AF:80:B7:17:DC:6A:CB:57:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec616020-64b2-39d3-af88-2fb11c7372d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.188.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:4b:f6:f5:81:70:8f:63:15:9b:76:2b:8b:f6:62:3e:60:8b:
ad:3f:f4:7f:13:1c:fa:cb:97:75:ea:54:92:d1:97:5c:46:46:
81:ef:b6:db:8a:5b:f4:94:82:4a:dc:e2:41:4d:0c:bb:f4:5d:
ec:5b:22:d4:7e:03:c6:88:62:21:8b:89:f5:e1:18:79:4a:dd:
89:b2:90:bc:49:6a:e5:43:62:40:26:38:a7:c2:fc:d4:de:1c:
d3:58:5e:29:28:02:f0:36:26:83:52:9d:70:37:e5:1f:f7:16:
b8:57:b6:d5:d6:c7:d0:aa:55:78:c6:7c:d6:d6:ea:cc:86:7b:
16:ea:3b:a3:a8:4d:ed:90:dc:da:fb:2a:39:20:c0:86:f7:b7:
43:a7:fc:c9:05:41:4a:30:97:b0:db:72:a2:bd:aa:43:4c:bf:
f1:be:6a:28:8f:5e:18:62:9f:92:cb:58:2e:a0:ee:60:59:b4:
bd:0c:1f:19:da:9d:ef:02:c3:07:4f:61:36:74:69:af:98:fe:
48:c7:4b:cb:a5:7c:61:38:59:15:4a:b6:7c:9b:42:5e:1a:cf:
d8:7a:17:4a:c8:4b:90:50:39:14:82:7e:88:4b:7c:ed:4d:6b:
ce:8f:2e:15:2d:54:44:71:47:47:3d:0f:bb:ad:da:a7:49:a6:
6d:49:99:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9SJjElI49pmur0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZWY2ZDE2YzMtOGM4Ny00Y2Q1LThjZTctYmZhZmZhZDZmNzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2UpHTqH+o6SrVgm3AzxYgewY0Cs7DFhl9nH
GEwH8BLFHK4mKdCyp0RREd59zmiKQeVyb3MNIugLCRBFIiIYMJiPwPWgd39CiMOQ
HpIMbywzbMk7IhCd1FnRu5B0klDp+2/UmAGKtw2b5itg1iV+q924diVkEkIaSnhg
ssYr3WCxTRCv8jbIFOICqWeTUwVPXyhXeJfUCAiliP/+Z+mmvfcppUGu/Ls93K8Y
geXRhD6lv53h8ldCcI9gMVGmyXSMBbl+ora6uWbMNon2acopLFPDY598Y3+sTS9k
z2I74I3fQ5khXQMHpfuijg/1EG/KgeGN6Dm0H42366BgCkqOAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeOAZeUcsmcU0Esr4C3F9xqy1dlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWM2MTYwMjAtNjRiMi0z
OWQzLWFmODgtMmZiMTFjNzM3MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7zQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1L9vWBcI9jFZt2K4v2Yj5gi60/9H8THPrLl3XqVJLRl1xGRoHvttuK
W/SUgkrc4kFNDLv0XexbItR+A8aIYiGLifXhGHlK3YmykLxJauVDYkAmOKfC/NTe
HNNYXikoAvA2JoNSnXA35R/3FrhXttXWx9CqVXjGfNbW6syGexbqO6OoTe2Q3Nr7
KjkgwIb3t0On/MkFQUowl7DbcqK9qkNMv/G+aiiPXhhin5LLWC6g7mBZtL0MHxna
ne8CwwdPYTZ0aa+Y/kjHS8ulfGE4WRVKtnybQl4az9h6F0rIS5BQORSCfohLfO1N
a86PLhUtVERxR0c9D7ut2qdJpm1JmSY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:55 2025 by rpki-client