Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11b09e2-604b-30e6-8005-0ef3e7872efb.roa
File: f11b09e2-604b-30e6-8005-0ef3e7872efb.roa (raw, json)
Hash identifier: k5MfAzpVynGetEY0T478xI4Zqpxe9vcy2/60fpDVhlY=
Subject key identifier: 98:97:08:C0:A8:6A:D6:DD:79:87:80:51:EE:20:DD:13:90:FD:7B:DB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E8F54215402155056230D000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11b09e2-604b-30e6-8005-0ef3e7872efb.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 396982
IP address blocks: 35.192.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:42:15:40:21:55:05:62:30:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=ef0b0aba-599b-4fe8-8103-013339445e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:87:3b:73:8f:b7:b8:94:0d:9f:fb:fd:29:
13:a6:55:bb:f4:6e:b1:98:71:53:b2:a1:de:08:3d:
a6:1d:6e:ce:7d:d0:67:8d:bd:cd:9a:bd:bb:bd:ea:
34:87:9a:53:09:5c:ad:d6:98:42:7c:56:ff:e8:6a:
ed:a9:19:3f:16:27:b8:40:d5:ba:e9:1f:19:b7:9d:
45:2d:89:8f:35:9e:4e:45:f8:a3:aa:4d:0c:ce:eb:
5c:a0:b3:b4:e7:24:24:a4:d9:b0:f3:71:7a:70:99:
b7:e5:03:e5:1b:71:fd:55:4d:27:1a:a4:11:e1:01:
cc:a4:2b:84:9b:0d:94:51:49:b7:51:84:08:a6:f0:
54:8c:d4:88:ab:eb:ce:14:59:33:cc:b9:26:1e:94:
58:7e:fb:e7:3d:4e:b8:35:d0:81:58:98:0d:6d:d5:
65:39:13:b1:0f:ac:bf:ba:29:6f:3f:fb:46:99:63:
fe:a7:a9:e6:27:b9:96:bf:d7:41:b0:32:75:6c:46:
df:13:d9:b0:b1:2b:08:00:36:b9:c0:f1:69:94:d8:
c3:82:56:11:d0:6c:c2:b4:da:98:f9:41:f7:60:e4:
d5:d8:a6:3c:a4:c4:a2:78:7c:2f:ce:fb:c5:07:12:
05:12:93:63:82:80:86:64:30:50:9e:63:e2:99:ef:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:97:08:C0:A8:6A:D6:DD:79:87:80:51:EE:20:DD:13:90:FD:7B:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11b09e2-604b-30e6-8005-0ef3e7872efb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:71:74:8b:d5:70:61:f5:33:9d:8c:79:3b:6a:38:a7:65:dc:
4a:48:49:f9:39:1e:41:8d:30:ec:59:39:ad:9f:df:ca:ec:92:
92:84:51:c9:ec:de:31:42:d8:a3:82:6a:88:1c:63:36:89:d6:
aa:25:79:17:f1:cf:db:f9:89:af:3a:79:ac:85:60:14:68:5e:
88:42:0a:8e:ab:5a:8f:a7:1f:8b:c6:37:5e:f1:b3:23:2c:77:
4a:4c:34:d9:75:e1:e5:92:99:68:53:fe:29:09:f9:19:fd:45:
86:b6:b9:c9:58:2f:1e:f0:37:e8:15:ec:01:92:69:60:a7:1a:
bc:3e:91:66:29:af:58:f8:5a:c6:3a:48:a7:60:5c:fd:29:9c:
36:9f:40:b6:8e:05:f0:49:a4:1f:9f:ae:07:85:7a:30:9c:2c:
70:da:82:29:68:b7:15:7e:71:43:70:33:fe:a2:3f:47:3a:90:
09:91:03:dc:5b:ce:48:c6:03:a4:e9:84:53:8e:b2:90:b3:ac:
d5:ce:95:ee:01:fb:26:ae:57:99:2b:8c:52:b8:06:5e:6e:57:
9f:72:89:7a:a4:7d:6a:5d:7c:90:54:11:43:83:e8:c5:84:d5:
a7:0f:b5:e9:3d:37:60:bd:6c:5b:d5:5f:45:67:9b:a8:32:99:
02:36:bd:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9UIVQCFVBWIw0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZWYwYjBhYmEtNTk5Yi00ZmU4LTgxMDMtMDEzMzM5NDQ1ZTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbmHO3OPt7iUDZ/7/SkTplW79G6xmHFTsqHe
CD2mHW7OfdBnjb3Nmr27veo0h5pTCVyt1phCfFb/6GrtqRk/Fie4QNW66R8Zt51F
LYmPNZ5ORfijqk0MzutcoLO05yQkpNmw83F6cJm35QPlG3H9VU0nGqQR4QHMpCuE
mw2UUUm3UYQIpvBUjNSIq+vOFFkzzLkmHpRYfvvnPU64NdCBWJgNbdVlOROxD6y/
uilvP/tGmWP+p6nmJ7mWv9dBsDJ1bEbfE9mwsSsIADa5wPFplNjDglYR0GzCtNqY
+UH3YOTV2KY8pMSieHwvzvvFBxIFEpNjgoCGZDBQnmPime+HVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJiXCMCoatbdeYeAUe4g3ROQ/XvbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjExYjA5ZTItNjA0Yi0z
MGU2LTgwMDUtMGVmM2U3ODcyZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8DAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRxdIvVcGH1M52MeTtqOKdl3EpISfk5HkGNMOxZOa2f38rskpKEUcns
3jFC2KOCaogcYzaJ1qoleRfxz9v5ia86eayFYBRoXohCCo6rWo+nH4vGN17xsyMs
d0pMNNl14eWSmWhT/ikJ+Rn9RYa2uclYLx7wN+gV7AGSaWCnGrw+kWYpr1j4WsY6
SKdgXP0pnDafQLaOBfBJpB+frgeFejCcLHDagilotxV+cUNwM/6iP0c6kAmRA9xb
zkjGA6TphFOOspCzrNXOle4B+yauV5krjFK4Bl5uV59yiXqkfWpdfJBUEUOD6MWE
1acPtek9N2C9bFvVX0Vnm6gymQI2vck=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:23 2025 by rpki-client