Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/204f9f98-a45b-309a-93f2-0195880ea30b.roa
File: 204f9f98-a45b-309a-93f2-0195880ea30b.roa (raw, json)
Hash identifier: j1PkYcWMVD9fAVJdkkQ3EMTTpgonndhiJQj3B6fFWWc=
Subject key identifier: 80:C1:C2:46:17:57:FD:53:A6:BC:21:4C:F3:F6:AC:30:3D:13:65:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BBF921D378E947D05F3C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/204f9f98-a45b-309a-93f2-0195880ea30b.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.200.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:bf:92:1d:37:8e:94:7d:05:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=c2b18550-4d45-46ba-83ba-b69abf7dc27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:ab:77:fa:1f:0e:1c:56:cf:06:4b:64:cd:
b2:76:2a:a2:c3:d5:b1:a4:c8:bc:05:75:16:c3:92:
fa:b8:49:6f:8e:c4:66:ec:74:35:7f:21:a7:7e:79:
71:a1:7e:f6:c4:d8:0d:05:80:fc:f3:3a:38:e1:c4:
b0:98:eb:16:29:74:df:e3:4a:a0:4f:4e:07:02:47:
09:27:65:15:4f:5b:ea:9a:cc:6c:e0:b1:1e:26:88:
08:46:2d:83:8a:4a:48:97:ac:70:44:fd:01:2b:99:
1c:76:de:82:d9:7a:73:2f:56:78:09:52:c9:7e:14:
6d:28:80:bf:6b:a5:d4:c0:0e:d1:22:b8:17:78:47:
43:91:63:bf:d6:f3:36:a2:ec:b2:96:7a:80:fb:ff:
3c:49:3d:3d:78:8d:26:28:44:01:d5:e1:1f:95:1b:
db:fa:b2:59:fb:f3:a5:02:0f:67:9a:79:8d:93:9f:
5a:5d:61:ea:ad:14:3d:ee:14:28:82:72:13:ed:56:
00:e5:9b:0b:86:75:22:8f:84:06:3b:6d:f0:06:80:
06:b7:0f:ce:65:f3:4a:94:8c:2d:fb:60:81:fb:63:
a9:c3:8d:37:0b:50:ce:af:a8:c1:9d:6b:6c:a6:01:
00:df:f3:7f:cc:3e:1e:1b:09:17:cf:50:f7:ce:0d:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:C2:46:17:57:FD:53:A6:BC:21:4C:F3:F6:AC:30:3D:13:65:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/204f9f98-a45b-309a-93f2-0195880ea30b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.200.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:12:94:de:e0:f2:eb:22:29:1a:14:f4:76:d5:73:2b:57:f5:
6b:02:48:ab:dd:6f:60:0f:31:b5:89:40:d0:59:fe:08:68:27:
80:f4:f6:31:8c:a5:de:6c:fd:fd:3c:3d:17:c7:94:a8:66:f2:
4f:42:8b:10:8f:28:cb:b8:2a:0c:a7:90:ba:25:df:c3:b1:f4:
79:45:eb:66:92:17:55:b2:95:e4:27:2d:ca:cb:7e:d2:ad:65:
d0:a1:be:fd:14:e7:95:db:75:48:f6:eb:21:45:13:02:e2:fb:
9e:0e:05:f9:31:69:84:fa:fb:74:05:fa:ce:d2:87:82:ff:f4:
49:f2:cd:11:9e:f7:e7:08:ce:c4:ee:68:4d:9a:ba:cf:0f:96:
2b:3a:c0:e0:92:de:8c:e8:42:b5:1a:52:07:0e:c1:f6:fe:19:
76:af:30:f7:e3:7b:9c:3e:3b:03:42:98:1f:e8:ac:34:7b:db:
3f:49:93:d7:8b:1c:ab:af:ac:42:f0:43:0d:5a:2b:a1:5b:5c:
c3:6e:36:95:94:4e:4d:47:45:46:a1:73:2d:53:46:09:ad:34:
85:bd:c8:a9:3b:9a:a6:fc:79:e9:8a:8e:0c:b0:3e:d1:da:35:
93:15:bf:f5:b8:82:7e:ab:43:9e:2c:04:16:fc:62:c0:8d:77:
6b:8a:1c:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7+SHTeOlH0F88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YzJiMTg1NTAtNGQ0NS00NmJhLTgzYmEtYjY5YWJmN2RjMjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE+rd/ofDhxWzwZLZM2ydiqiw9WxpMi8BXUW
w5L6uElvjsRm7HQ1fyGnfnlxoX72xNgNBYD88zo44cSwmOsWKXTf40qgT04HAkcJ
J2UVT1vqmsxs4LEeJogIRi2DikpIl6xwRP0BK5kcdt6C2XpzL1Z4CVLJfhRtKIC/
a6XUwA7RIrgXeEdDkWO/1vM2ouyylnqA+/88ST09eI0mKEQB1eEflRvb+rJZ+/Ol
Ag9nmnmNk59aXWHqrRQ97hQognIT7VYA5ZsLhnUij4QGO23wBoAGtw/OZfNKlIwt
+2CB+2Opw403C1DOr6jBnWtspgEA3/N/zD4eGwkXz1D3zg2MpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDBwkYXV/1TprwhTPP2rDA9E2XJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjA0ZjlmOTgtYTQ1Yi0z
MDlhLTkzZjItMDE5NTg4MGVhMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8gwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQSlN7g8usiKRoU9HbVcytX9WsCSKvdb2APMbWJQNBZ/ghoJ4D09jGM
pd5s/f08PRfHlKhm8k9CixCPKMu4KgynkLol38Ox9HlF62aSF1WyleQnLcrLftKt
ZdChvv0U55XbdUj26yFFEwLi+54OBfkxaYT6+3QF+s7Sh4L/9EnyzRGe9+cIzsTu
aE2aus8Plis6wOCS3ozoQrUaUgcOwfb+GXavMPfje5w+OwNCmB/orDR72z9Jk9eL
HKuvrELwQw1aK6FbXMNuNpWUTk1HRUahcy1TRgmtNIW9yKk7mqb8eemKjgywPtHa
NZMVv/W4gn6rQ54sBBb8YsCNd2uKHOQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:43 2025 by rpki-client