Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa
File: 30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa (raw, json)
Hash identifier: RccXMkayZ2ndBYudmT6rh9l+/IFXXVPDxFSGZihwaD0=
Subject key identifier: 39:BA:A5:87:64:7C:8D:4A:8C:DA:E7:3A:D3:A8:76:51:D5:81:1D:32
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BE2705F800085BBC2FE80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.86.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:e2:70:5f:80:00:85:bb:c2:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=c6a6bc60-39c6-480d-9e48-29c959392445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:33:5e:04:9a:3e:68:c4:7f:f8:eb:44:72:
44:66:56:61:39:3e:ca:49:20:48:ef:b3:bd:29:ce:
1f:47:56:1e:92:25:f8:3f:3c:40:6c:c7:a3:47:9a:
41:60:01:c7:2f:15:dd:da:bc:e0:1c:b5:ae:b6:f0:
5a:a1:5c:3d:c4:fc:7d:7f:96:15:f3:69:6e:6d:3f:
17:84:f6:5a:27:97:68:76:4d:53:3c:b0:6b:fb:91:
7a:91:ec:30:e4:4c:1a:95:83:56:32:f8:2c:c7:f6:
b6:f9:6d:18:ed:1d:7c:09:b7:21:78:08:08:39:ff:
22:13:d3:6a:83:1e:d1:bf:be:de:07:86:44:9f:39:
3d:2a:32:35:bd:f0:61:f9:ac:cd:48:a7:ec:90:e4:
01:40:db:2c:03:fd:e9:6d:96:04:30:40:58:49:ae:
93:31:68:5d:22:ad:18:d2:d5:58:e5:fa:1d:11:8d:
fc:fa:e1:46:94:47:bb:b9:d9:53:f1:5c:f6:eb:18:
01:2d:72:67:0f:83:26:0e:30:f5:e3:12:ad:63:40:
89:5c:38:10:9d:50:c4:dd:b4:bf:64:2c:1e:7f:3e:
cb:24:19:05:49:e8:da:23:af:45:d6:69:b4:6a:5c:
14:9b:74:eb:b7:70:48:ba:f5:7e:31:7e:ab:6c:09:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:A5:87:64:7C:8D:4A:8C:DA:E7:3A:D3:A8:76:51:D5:81:1D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.86.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:8d:a7:01:ea:c3:e4:1c:88:b1:f0:31:71:ed:c5:c9:22:d4:
ee:2e:c4:65:d5:64:21:8c:99:65:b6:5e:3b:60:de:b0:ba:09:
a7:ca:19:33:a7:c4:2b:ce:55:04:8a:16:a6:d9:4f:91:85:4d:
f4:b7:37:1e:60:51:cc:c9:8f:bc:02:cb:ae:ba:00:6b:4c:2a:
e7:88:10:d0:17:ef:f3:cc:43:7c:99:08:92:9f:50:a7:08:63:
cf:05:b0:41:37:ea:6f:a8:e7:26:e9:c9:da:ee:96:e3:fa:c1:
72:94:73:cb:fe:0e:b8:33:47:0e:fe:3a:00:2b:a9:81:7e:31:
8a:31:5e:8d:36:11:43:aa:c6:a6:19:30:07:2c:42:7d:32:4e:
df:00:9d:52:7a:da:62:98:c0:fe:6c:92:a9:56:a1:35:23:36:
0a:a9:c5:8d:61:c9:82:0d:26:ae:c6:0d:2b:ec:6c:35:7d:03:
66:e1:40:f4:4d:af:41:e6:e0:0f:8f:99:0c:f9:c9:bd:fc:56:
dd:1a:82:f7:9c:bc:72:51:a1:94:6c:b3:b8:db:5e:9a:36:e8:
4b:a1:a9:5d:3f:c6:21:a9:3d:91:8f:d7:84:8d:ea:06:ba:32:
1d:f8:30:7e:b4:ea:40:1f:c2:02:48:23:09:da:77:fc:50:c5:
c4:8d:32:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+JwX4AAhbvC/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YzZhNmJjNjAtMzljNi00ODBkLTllNDgtMjljOTU5MzkyNDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPEzXgSaPmjEf/jrRHJEZlZhOT7KSSBI77O9
Kc4fR1YekiX4PzxAbMejR5pBYAHHLxXd2rzgHLWutvBaoVw9xPx9f5YV82lubT8X
hPZaJ5dodk1TPLBr+5F6keww5EwalYNWMvgsx/a2+W0Y7R18CbcheAgIOf8iE9Nq
gx7Rv77eB4ZEnzk9KjI1vfBh+azNSKfskOQBQNssA/3pbZYEMEBYSa6TMWhdIq0Y
0tVY5fodEY38+uFGlEe7udlT8Vz26xgBLXJnD4MmDjD14xKtY0CJXDgQnVDE3bS/
ZCwefz7LJBkFSejaI69F1mm0alwUm3Trt3BIuvV+MX6rbAmSMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDm6pYdkfI1KjNrnOtOodlHVgR0yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzBmZDFhODktOTljMy0z
ZTRhLWFkMDEtZmU3NmRjZTAyYTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGNpwHqw+QciLHwMXHtxcki1O4uxGXVZCGMmWW2Xjtg3rC6CafKGTOn
xCvOVQSKFqbZT5GFTfS3Nx5gUczJj7wCy666AGtMKueIENAX7/PMQ3yZCJKfUKcI
Y88FsEE36m+o5ybpydruluP6wXKUc8v+DrgzRw7+OgArqYF+MYoxXo02EUOqxqYZ
MAcsQn0yTt8AnVJ62mKYwP5skqlWoTUjNgqpxY1hyYINJq7GDSvsbDV9A2bhQPRN
r0Hm4A+PmQz5yb38Vt0agvecvHJRoZRss7jbXpo26EuhqV0/xiGpPZGP14SN6ga6
Mh34MH606kAfwgJIIwnad/xQxcSNMi8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:45:53 2025 by rpki-client