Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1088f665-cb6f-34fb-937f-d5e4ac1d00b7.roa
File: 1088f665-cb6f-34fb-937f-d5e4ac1d00b7.roa (raw, json)
Hash identifier: rbTVUmoWHM+GTVwL+1kMP0f9cggxUZPGgTjhfog8Wn0=
Subject key identifier: FA:84:91:4E:E3:36:D1:BF:39:7E:74:E3:BE:3B:CF:41:3A:3F:01:00
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BAD8E75EC5520D5DA6E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1088f665-cb6f-34fb-937f-d5e4ac1d00b7.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.192.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ad:8e:75:ec:55:20:d5:da:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=503b71bd-94fe-4457-86d2-603f780672d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:97:23:0f:ef:be:43:09:19:9e:9d:51:a3:
54:10:a2:e7:3a:12:52:7a:f7:08:d8:d3:81:f1:4b:
e4:19:16:be:02:7f:37:1d:17:0b:ce:da:48:54:f5:
21:e0:64:f6:61:df:e2:e4:90:61:56:55:46:7e:60:
ed:4e:5c:3e:5e:b3:ee:17:61:1e:01:60:16:dc:dd:
cf:f0:82:a7:cc:09:82:09:7f:f2:84:58:60:6e:09:
15:b3:d2:67:10:ed:cf:99:0d:50:0d:78:fc:d5:64:
92:d3:e1:46:8a:4f:2b:61:43:90:7e:0d:ff:f4:63:
8e:7a:f7:d8:d0:62:37:b0:c1:c8:b5:02:e6:9f:cc:
2f:4d:9b:f8:54:12:d4:94:4e:b9:a7:dd:7c:ac:87:
1d:ac:fa:aa:46:af:2f:a8:a1:db:57:26:6c:4e:e1:
8b:a9:08:2f:df:51:99:68:f3:86:d1:83:5b:7e:32:
21:10:43:fa:84:a0:33:b2:32:db:3a:56:1f:cf:4b:
6b:85:c2:a2:4b:6c:b6:51:67:a2:ef:9a:f1:ea:86:
e3:db:8d:7e:a5:86:f0:e1:8f:c4:eb:7e:21:25:e7:
f4:e5:51:cc:0e:dc:5a:55:7c:0e:d5:02:8e:a3:3c:
93:d8:20:cc:b0:88:37:e9:f2:b5:b1:45:67:32:f8:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:91:4E:E3:36:D1:BF:39:7E:74:E3:BE:3B:CF:41:3A:3F:01:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1088f665-cb6f-34fb-937f-d5e4ac1d00b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.192.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:8a:50:5d:2b:83:9a:eb:01:ae:db:c0:1e:29:d6:79:17:cb:
e0:44:79:5d:91:0c:7f:15:0e:22:08:f8:e5:96:32:06:24:75:
51:80:25:88:02:be:65:37:fd:0d:a1:09:e2:9b:25:5e:2d:39:
41:f8:8e:24:8a:5e:44:77:f0:06:d4:13:25:84:48:db:4a:4e:
d0:ef:f9:2f:6d:26:49:d0:e1:c2:7f:d0:63:8e:cc:77:ac:81:
c6:62:cb:2a:87:c8:27:8a:68:b7:d9:38:5f:70:1f:c9:0e:28:
70:ac:db:d8:31:7f:ca:44:51:9c:03:7c:de:84:3b:47:7d:84:
74:31:57:d2:df:5e:ff:e4:ec:7b:86:5c:8a:78:37:85:20:0a:
43:df:c5:ef:4f:d6:fa:68:b9:c9:cd:c0:81:b7:73:51:c2:10:
9a:a4:76:c5:d3:ed:12:4a:26:9d:6b:bc:e8:f1:cc:d2:a1:92:
83:84:76:b8:c8:67:4a:43:2a:c2:86:66:98:ef:20:9c:25:2d:
6d:8a:10:97:11:e6:42:a3:b8:7c:99:3b:69:62:d0:64:70:c6:
da:40:ba:f4:5b:03:28:e9:49:23:a0:c3:f3:40:43:2c:14:71:
70:bf:c6:4a:52:08:a0:db:8c:85:d0:74:1c:20:c8:76:4e:83:
2b:87:43:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS62OdexVINXaboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NTAzYjcxYmQtOTRmZS00NDU3LTg2ZDItNjAzZjc4MDY3MmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZGXIw/vvkMJGZ6dUaNUEKLnOhJSevcI2NOB
8UvkGRa+An83HRcLztpIVPUh4GT2Yd/i5JBhVlVGfmDtTlw+XrPuF2EeAWAW3N3P
8IKnzAmCCX/yhFhgbgkVs9JnEO3PmQ1QDXj81WSS0+FGik8rYUOQfg3/9GOOevfY
0GI3sMHItQLmn8wvTZv4VBLUlE65p918rIcdrPqqRq8vqKHbVyZsTuGLqQgv31GZ
aPOG0YNbfjIhEEP6hKAzsjLbOlYfz0trhcKiS2y2UWei75rx6obj241+pYbw4Y/E
634hJef05VHMDtxaVXwO1QKOozyT2CDMsIg36fK1sUVnMvgxLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqEkU7jNtG/OX504747z0E6PwEAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTA4OGY2NjUtY2I2Zi0z
NGZiLTkzN2YtZDVlNGFjMWQwMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8CQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6KUF0rg5rrAa7bwB4p1nkXy+BEeV2RDH8VDiII+OWWMgYkdVGAJYgC
vmU3/Q2hCeKbJV4tOUH4jiSKXkR38AbUEyWESNtKTtDv+S9tJknQ4cJ/0GOOzHes
gcZiyyqHyCeKaLfZOF9wH8kOKHCs29gxf8pEUZwDfN6EO0d9hHQxV9LfXv/k7HuG
XIp4N4UgCkPfxe9P1vpoucnNwIG3c1HCEJqkdsXT7RJKJp1rvOjxzNKhkoOEdrjI
Z0pDKsKGZpjvIJwlLW2KEJcR5kKjuHyZO2li0GRwxtpAuvRbAyjpSSOgw/NAQywU
cXC/xkpSCKDbjIXQdBwgyHZOgyuHQ4Y=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:57:33 2025 by rpki-client