Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa
File: 22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa (raw, json)
Hash identifier: aPaDallhTl5S7ZipE4X6IgTqmHflWrOZoqMT/tFjh/U=
Subject key identifier: C2:6D:42:01:15:99:C9:29:62:45:6D:A8:32:82:5B:54:AE:B4:3E:37
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF44676308324D27CA100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.66.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f4:46:76:30:83:24:d2:7c:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=eb30afe8-6c96-4247-8b64-dc873ec86091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:99:8e:b4:c7:6b:3f:65:f8:d8:a3:3f:05:
c1:fd:39:22:a4:99:a4:9c:65:6c:09:b5:57:ff:e6:
65:6f:86:45:c5:d8:05:c9:05:4b:41:bd:59:31:a2:
05:0b:51:80:65:9c:a3:70:25:e8:6b:1d:4b:cf:f7:
a9:e7:eb:38:0e:11:5c:77:0a:81:77:2b:46:36:e3:
0e:1f:08:6b:c6:a4:0e:c3:c4:f6:7a:41:37:b5:cf:
68:b1:2d:88:bf:4f:3b:af:d1:01:9d:af:bb:e3:ec:
ce:9a:13:4c:c0:35:a2:1a:4a:47:b9:22:94:1d:69:
5b:d3:f5:46:af:b0:ce:ff:91:53:92:8e:bd:c3:f6:
58:c9:07:8b:bf:03:dc:fd:68:03:35:d6:df:a4:2f:
96:67:70:63:31:d8:1d:5d:33:f4:8b:4d:7a:f0:76:
93:02:ef:c5:bc:7b:c4:6c:8a:c1:9f:3d:c7:60:20:
24:b1:14:bb:cd:9c:9a:42:4f:be:c9:28:14:47:0b:
b5:9f:14:f7:4e:30:38:83:f0:a0:7c:be:e6:ed:73:
b2:46:f3:32:50:2e:f8:a3:2f:05:f6:83:b9:ee:21:
dc:c7:39:54:cb:e0:3d:c0:79:3a:01:bd:0b:96:b9:
2f:c1:6e:4c:74:f6:2c:23:5e:fa:c8:fc:41:af:ae:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:42:01:15:99:C9:29:62:45:6D:A8:32:82:5B:54:AE:B4:3E:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.66.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b7:99:9a:b3:7c:bb:08:6d:69:ff:63:d2:e0:8c:aa:e1:e5:
4e:d0:03:68:95:de:cd:16:ae:e9:0e:de:3d:d8:f0:40:21:71:
3c:d4:9b:49:ea:8c:6f:5a:b0:84:de:c7:60:7d:b8:d1:02:69:
ec:f7:23:b0:58:d0:b0:b3:90:69:49:dc:7d:0e:33:69:41:dc:
b6:45:bc:cd:d1:1a:b6:9b:30:d3:61:ab:5e:a4:44:91:26:5f:
46:1c:f1:eb:53:23:8d:99:68:f8:50:0c:e3:fe:4e:b1:43:4d:
b2:18:77:80:26:f0:b2:b1:ea:5e:52:23:94:16:42:2e:52:60:
86:da:fa:a2:8c:b8:ba:5a:ca:46:6d:b5:73:19:2a:4d:9d:44:
75:90:12:fd:d6:68:ed:be:b0:8c:97:04:79:62:ee:8f:27:fc:
09:b0:f4:a4:ed:82:a5:79:3d:2f:ff:88:57:d3:5d:05:74:a7:
b4:95:71:2d:56:e5:fa:f3:7d:87:eb:a1:6f:18:cc:8c:3b:30:
0d:be:2f:7d:76:aa:5d:37:48:af:13:30:31:4c:a8:10:24:aa:
09:ad:ad:cf:b1:e6:7c:fe:d3:7b:42:43:61:a2:fa:79:71:eb:
23:ff:ba:fd:0c:6a:b3:d8:21:06:48:e9:14:05:79:2c:21:3e:
31:7e:fe:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/RGdjCDJNJ8oQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZWIzMGFmZTgtNmM5Ni00MjQ3LThiNjQtZGM4NzNlYzg2MDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfCZjrTHaz9l+NijPwXB/TkipJmknGVsCbVX
/+Zlb4ZFxdgFyQVLQb1ZMaIFC1GAZZyjcCXoax1Lz/ep5+s4DhFcdwqBdytGNuMO
HwhrxqQOw8T2ekE3tc9osS2Iv087r9EBna+74+zOmhNMwDWiGkpHuSKUHWlb0/VG
r7DO/5FTko69w/ZYyQeLvwPc/WgDNdbfpC+WZ3BjMdgdXTP0i0168HaTAu/FvHvE
bIrBnz3HYCAksRS7zZyaQk++ySgURwu1nxT3TjA4g/CgfL7m7XOyRvMyUC74oy8F
9oO57iHcxzlUy+A9wHk6Ab0LlrkvwW5MdPYsI176yPxBr65WowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJtQgEVmckpYkVtqDKCW1SutD43MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjI3NjhmM2UtMzg1Yi0z
ZTc0LWJiZTQtODJhMTMyMmU3ZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA63mZqzfLsIbWn/Y9LgjKrh5U7QA2iV3s0WrukO3j3Y8EAhcTzUm0nq
jG9asITex2B9uNECaez3I7BY0LCzkGlJ3H0OM2lB3LZFvM3RGrabMNNhq16kRJEm
X0Yc8etTI42ZaPhQDOP+TrFDTbIYd4Am8LKx6l5SI5QWQi5SYIba+qKMuLpaykZt
tXMZKk2dRHWQEv3WaO2+sIyXBHli7o8n/Amw9KTtgqV5PS//iFfTXQV0p7SVcS1W
5frzfYfroW8YzIw7MA2+L312ql03SK8TMDFMqBAkqgmtrc+x5nz+03tCQ2Gi+nlx
6yP/uv0MarPYIQZI6RQFeSwhPjF+/kw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:10 2025 by rpki-client