Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
File: 574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa (raw, json)
Hash identifier: RRmas9wxv+II8sEvTNHMsU43iKJFd7IJwRQXbxO2Jkk=
Subject key identifier: 8F:D5:99:04:99:C1:A0:3B:20:54:3B:B6:AB:A9:72:09:84:EC:DA:55
Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial: 010D0C9F43285848424AD4AE67CF0230D0F62D80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 54994
IP address blocks: 174.35.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d4:ae:67:cf:02:30:d0:f6:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=3c2b7f6d-7aa6-408b-be3f-d62583f3ac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:39:fb:53:e4:0e:f2:48:25:be:e1:41:12:
c2:28:7b:4e:cb:44:a1:6c:7f:95:61:92:af:da:0a:
5d:c6:42:42:79:0b:6c:e4:68:2e:1f:7b:a2:5e:c9:
59:88:c9:de:4d:72:d3:36:be:2d:ac:50:49:ee:e3:
aa:70:bb:fb:2e:94:34:51:91:bb:4c:2e:e1:cf:6e:
b7:f8:e2:cb:17:6e:1c:4f:74:92:f3:d7:4f:33:69:
d1:96:79:c3:97:14:5d:9c:52:10:a3:85:b6:bd:e9:
ff:19:e3:45:d4:55:89:f1:6d:9b:1b:2c:fe:24:78:
e0:94:19:4e:3a:38:06:df:35:60:ad:0e:0e:4e:52:
77:a8:b5:ec:15:ca:d6:42:fb:ef:c8:28:ec:46:90:
30:c0:79:71:de:69:bb:34:08:89:d9:cc:97:a1:7a:
17:50:d7:51:bb:04:46:bd:92:fc:27:e2:7d:bd:db:
41:d2:66:ff:57:df:fe:fa:aa:63:e0:ee:46:d7:4b:
64:e3:45:3c:a4:53:79:4e:86:2a:18:a9:93:03:cd:
f3:e4:79:96:03:99:1e:83:b5:eb:f0:70:98:c6:64:
95:d5:cd:5f:93:ca:18:6a:8b:7d:ad:c8:16:c1:96:
ce:8b:c1:ae:fb:c7:a2:20:1f:f2:63:51:5d:e1:37:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:99:04:99:C1:A0:3B:20:54:3B:B6:AB:A9:72:09:84:EC:DA:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
X509v3 Authority Key Identifier:
keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
sbgp-ipAddrBlock: critical
IPv4:
174.35.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:77:58:09:37:4b:ed:d1:89:e4:51:8a:30:b4:4f:8c:f9:2e:
8b:97:f6:d0:ea:87:d1:21:46:5f:05:ce:ee:54:f2:ba:ed:cc:
f5:6c:4c:69:6b:02:f0:89:ba:83:0c:b1:e5:3e:e1:15:3e:37:
7a:f3:4f:72:5c:f8:bb:99:4f:71:f7:85:2d:9d:01:ae:6a:01:
3a:14:dd:2c:e5:a3:46:06:38:2d:21:84:31:a8:b8:5a:b8:cb:
f0:6e:b3:26:00:43:3f:de:9c:10:6c:2f:f2:c7:0c:be:e8:f4:
93:e1:16:ad:c8:b3:58:8b:2a:73:cf:b6:6d:0e:a6:49:2e:8f:
cb:ef:ed:eb:3c:76:d3:5c:0d:b4:0f:7b:25:a0:6f:82:13:ca:
88:d5:e0:7c:23:ce:51:81:08:63:64:c7:fe:3a:8f:64:fc:bf:
f0:2c:4c:c9:7d:fb:f9:79:cc:4c:c1:b4:74:91:7a:73:d3:88:
84:9b:f5:f4:c5:58:b8:ca:94:c0:c5:47:2f:0e:fa:f2:a6:70:
2e:e6:b5:c2:7d:d5:90:64:f9:6f:a2:f9:f9:9e:e4:ec:69:1b:
95:40:33:23:9a:bd:f6:99:22:21:97:f6:9b:65:15:10:bf:1d:
43:b5:20:78:83:ac:71:fb:01:fe:23:6e:61:23:1d:42:70:e5:
03:12:e9:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStSuZ88CMND2LYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
M2MyYjdmNmQtN2FhNi00MDhiLWJlM2YtZDYyNTgzZjNhYzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryc5+1PkDvJIJb7hQRLCKHtOy0ShbH+VYZKv
2gpdxkJCeQts5GguH3uiXslZiMneTXLTNr4trFBJ7uOqcLv7LpQ0UZG7TC7hz263
+OLLF24cT3SS89dPM2nRlnnDlxRdnFIQo4W2ven/GeNF1FWJ8W2bGyz+JHjglBlO
OjgG3zVgrQ4OTlJ3qLXsFcrWQvvvyCjsRpAwwHlx3mm7NAiJ2cyXoXoXUNdRuwRG
vZL8J+J9vdtB0mb/V9/++qpj4O5G10tk40U8pFN5ToYqGKmTA83z5HmWA5keg7Xr
8HCYxmSV1c1fk8oYaot9rcgWwZbOi8Gu+8eiIB/yY1Fd4TdpDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/VmQSZwaA7IFQ7tqupcgmE7NpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvNTc0ZWI5Y2UtOTA3NC0z
NGI1LWExNGMtZWJlMDcxNmZlNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriMUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ3WAk3S+3RieRRijC0T4z5LouX9tDqh9EhRl8Fzu5U8rrtzPVsTGlr
AvCJuoMMseU+4RU+N3rzT3Jc+LuZT3H3hS2dAa5qAToU3Szlo0YGOC0hhDGouFq4
y/BusyYAQz/enBBsL/LHDL7o9JPhFq3Is1iLKnPPtm0Opkkuj8vv7es8dtNcDbQP
eyWgb4ITyojV4HwjzlGBCGNkx/46j2T8v/AsTMl9+/l5zEzBtHSRenPTiISb9fTF
WLjKlMDFRy8O+vKmcC7mtcJ91ZBk+W+i+fme5OxpG5VAMyOavfaZIiGX9ptlFRC/
HUO1IHiDrHH7Af4jbmEjHUJw5QMS6dE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:47 2025 by rpki-client