Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0de311ab-0724-3913-8f57-c4154c83c4f2.roa
File: 0de311ab-0724-3913-8f57-c4154c83c4f2.roa (raw, json)
Hash identifier: sXkzsHj/5qlSD2L3IssD5OOqE+0pftLz2GSAKhV7V10=
Subject key identifier: 0A:5F:5B:2E:74:5D:B9:23:F4:E1:BD:7E:1C:47:F8:FA:9F:92:6A:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848CDE11059DAF9969AC8761F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0de311ab-0724-3913-8f57-c4154c83c4f2.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 34.155.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:10:59:da:f9:96:9a:c8:76:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=e4a579d5-d704-4938-b174-e74c1e04c02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:33:6d:b7:02:2d:1b:03:0d:f4:0f:e8:5e:
7c:0f:fc:a7:9b:39:dd:1a:24:2a:b4:ba:b2:da:54:
21:0e:11:67:de:9c:7e:b7:de:a7:af:ae:9c:01:ea:
dd:1a:bc:71:a6:79:d3:d4:d9:aa:02:70:3e:25:7f:
5f:de:2e:f1:7f:eb:53:41:10:d7:36:cc:5a:7f:3a:
e9:d6:fa:25:db:f5:9e:b0:26:8c:6d:64:66:b5:c7:
fe:bb:6e:9f:80:ee:b6:76:91:3a:d7:f4:6d:b3:f3:
ca:88:a4:33:bd:fd:0d:5d:5d:70:60:b7:74:38:7a:
61:7d:28:8b:02:c3:a8:ce:47:ea:e5:22:e4:fd:d8:
08:ab:b4:6a:0f:d4:6b:35:0e:50:b9:e1:74:fc:a1:
f6:b5:21:28:fa:70:97:49:3e:13:93:ab:07:c1:0c:
3e:3d:08:e2:24:c3:b9:3d:50:b5:29:dd:0b:00:93:
8d:c6:5d:c9:66:ea:8b:7a:23:7a:9c:99:3e:a6:bb:
78:8d:85:65:d2:43:27:14:de:65:39:15:eb:cf:00:
ec:de:d2:20:75:46:3d:02:0e:4c:5b:0d:84:a0:98:
69:88:0f:6f:79:5d:e4:3d:85:dc:61:f6:c5:e9:a7:
e5:ab:59:08:ae:5a:72:4e:be:6d:00:a9:c1:a8:b8:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5F:5B:2E:74:5D:B9:23:F4:E1:BD:7E:1C:47:F8:FA:9F:92:6A:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0de311ab-0724-3913-8f57-c4154c83c4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.155.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:cd:ea:ab:23:9a:5e:0e:25:37:b8:2f:3c:83:61:4a:b0:57:
61:0a:1e:0c:68:b3:9f:70:65:00:86:36:4a:c3:c3:b0:06:c8:
c5:f3:cb:3f:4b:94:c9:20:15:8c:09:50:29:47:0c:b3:5a:9a:
81:94:bd:8c:29:ea:1d:ce:ac:17:1f:67:ba:d1:0e:1a:3e:64:
c5:e3:a4:18:1d:6f:76:e8:d4:20:49:f4:c3:b0:45:1b:a2:ab:
c4:79:65:fe:92:a2:c8:63:03:12:72:4a:f9:b7:16:70:95:c8:
e6:62:46:a2:65:41:ff:ed:e3:e9:22:68:dd:09:f0:50:a8:2b:
95:28:f5:de:e7:23:96:48:49:ce:6e:e9:f0:d9:60:eb:11:eb:
38:c3:58:e2:c9:aa:d2:70:d5:a6:2f:11:16:96:e6:41:03:4a:
4a:15:38:2f:63:e7:3d:11:34:68:08:8d:68:65:38:81:0a:b4:
27:aa:bf:08:2d:a2:95:2d:c0:ad:d8:2d:94:76:2b:48:dd:b7:
c4:06:a0:54:e8:12:73:d4:8c:7d:48:be:1d:bf:11:99:75:b3:
f9:de:9b:9c:8f:c2:d2:28:33:da:7f:3f:20:86:44:73:c2:a3:
13:2c:3b:4a:5f:2c:75:87:5f:93:39:80:4c:52:e5:6a:dd:5c:
c9:f0:9b:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RBZ2vmWmsh2H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
ZTRhNTc5ZDUtZDcwNC00OTM4LWIxNzQtZTc0YzFlMDRjMDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiczbbcCLRsDDfQP6F58D/ynmzndGiQqtLqy
2lQhDhFn3px+t96nr66cAerdGrxxpnnT1NmqAnA+JX9f3i7xf+tTQRDXNsxafzrp
1vol2/WesCaMbWRmtcf+u26fgO62dpE61/Rts/PKiKQzvf0NXV1wYLd0OHphfSiL
AsOozkfq5SLk/dgIq7RqD9RrNQ5QueF0/KH2tSEo+nCXST4Tk6sHwQw+PQjiJMO5
PVC1Kd0LAJONxl3JZuqLeiN6nJk+prt4jYVl0kMnFN5lORXrzwDs3tIgdUY9Ag5M
Ww2EoJhpiA9veV3kPYXcYfbF6aflq1kIrlpyTr5tAKnBqLg/lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApfWy50Xbkj9OG9fhxH+PqfkmqpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGRlMzExYWItMDcyNC0z
OTEzLThmNTctYzQxNTRjODNjNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvN6qsjml4OJTe4LzyDYUqwV2EKHgxos59wZQCGNkrDw7AGyMXzyz9L
lMkgFYwJUClHDLNamoGUvYwp6h3OrBcfZ7rRDho+ZMXjpBgdb3bo1CBJ9MOwRRui
q8R5Zf6SoshjAxJySvm3FnCVyOZiRqJlQf/t4+kiaN0J8FCoK5Uo9d7nI5ZISc5u
6fDZYOsR6zjDWOLJqtJw1aYvERaW5kEDSkoVOC9j5z0RNGgIjWhlOIEKtCeqvwgt
opUtwK3YLZR2K0jdt8QGoFToEnPUjH1Ivh2/EZl1s/nem5yPwtIoM9p/PyCGRHPC
oxMsO0pfLHWHX5M5gExS5WrdXMnwm+w=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:10:06 2025 by rpki-client