Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34fedf6e-9c31-3167-9f02-08e824acb8e5.roa
File: 34fedf6e-9c31-3167-9f02-08e824acb8e5.roa (raw, json)
Hash identifier: 14OM975zU5uWV6W7zqNpEDHYfevs3J24XiXFuu1q0CI=
Subject key identifier: 10:01:49:6D:4B:45:A5:0F:BD:E7:15:53:1A:D8:B5:FE:C1:AF:55:1C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BF664009B6912FCCB2318
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34fedf6e-9c31-3167-9f02-08e824acb8e5.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.128.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f6:64:00:9b:69:12:fc:cb:23:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=5b7f21d6-5356-4692-a11c-643993abb8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:50:f1:30:1d:39:4f:38:f0:a3:56:00:a4:
e6:13:fe:21:46:39:e0:f9:ff:cc:f9:87:13:48:26:
69:1f:33:e3:5c:4b:2d:22:8a:41:6e:1e:29:97:b9:
e6:bf:b8:db:f1:11:26:01:7d:03:25:20:12:d5:02:
0a:6e:ca:f4:c2:1f:23:df:27:ba:67:08:f1:44:99:
76:35:a5:93:10:9e:e4:bf:20:58:73:58:4c:15:54:
02:55:48:cd:d6:75:72:cd:ff:e7:09:0c:00:21:9a:
4e:42:75:5e:22:f6:ca:a7:ff:3c:ca:b9:37:0e:55:
68:3b:d5:c2:1c:ca:76:f4:f6:db:79:87:8e:1f:bc:
a1:6c:bb:31:83:97:cb:53:92:29:bc:74:c0:3b:04:
f2:31:3c:55:98:85:13:72:7d:19:9b:b9:82:f1:36:
14:8b:1c:bb:ad:56:f8:f0:d7:f9:c1:2a:bf:cc:1b:
d7:0d:c1:26:49:84:7a:cb:4b:66:58:3a:d8:35:39:
6e:82:c1:4b:50:e4:e8:d5:d0:17:0d:2a:13:e6:83:
c1:b1:87:f8:64:3d:85:44:26:e1:14:7c:21:d6:94:
3c:14:1e:ec:3d:0f:cf:3f:7f:aa:62:61:55:76:00:
2e:56:0c:92:f0:d0:cf:ac:df:c2:de:55:21:20:71:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:49:6D:4B:45:A5:0F:BD:E7:15:53:1A:D8:B5:FE:C1:AF:55:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34fedf6e-9c31-3167-9f02-08e824acb8e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.128.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ad:4a:e1:76:00:e3:20:d4:32:b1:b3:5c:c5:1a:cb:76:a2:
aa:bd:2c:9a:b6:48:ec:a2:8b:69:ad:ea:e4:dc:75:e6:a8:40:
0a:95:53:fb:cc:8e:d0:94:51:5e:13:2f:54:7f:f7:24:64:a0:
b6:70:aa:0b:72:76:bf:c1:b1:19:b7:d1:07:f5:e3:0e:da:85:
44:6f:9a:f1:e2:e5:84:a7:08:ea:bf:04:a8:7f:14:a3:a8:c9:
8b:93:9a:fb:f4:5b:bf:19:29:df:61:a1:aa:3f:df:f6:d6:59:
16:ed:c5:6d:db:8d:62:93:95:4d:9f:b1:1a:b3:97:d2:3d:67:
4e:78:50:e7:66:a7:d6:28:03:2f:df:05:07:b9:e2:c8:8c:97:
9b:48:a4:90:cd:7b:e1:01:32:57:96:cf:9f:52:51:57:02:7b:
66:77:f5:9a:7d:72:48:bf:8e:8d:60:4c:b8:dd:0c:d5:be:0e:
59:d5:23:cf:72:5a:4b:3c:4e:0c:1e:d1:1f:1f:90:8d:f0:d9:
13:ce:be:b3:ec:97:ab:be:b2:04:c6:84:fa:6b:1a:ba:31:9e:
11:1c:1a:8b:ef:22:e3:9c:81:9a:f1:7a:44:40:44:c9:bf:b5:
0e:76:49:ba:e8:fe:e6:61:cd:a8:77:a9:63:7d:02:f1:7d:49:
a4:34:9d:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/ZkAJtpEvzLIxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NWI3ZjIxZDYtNTM1Ni00NjkyLWExMWMtNjQzOTkzYWJiOGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLVQ8TAdOU848KNWAKTmE/4hRjng+f/M+YcT
SCZpHzPjXEstIopBbh4pl7nmv7jb8REmAX0DJSAS1QIKbsr0wh8j3ye6ZwjxRJl2
NaWTEJ7kvyBYc1hMFVQCVUjN1nVyzf/nCQwAIZpOQnVeIvbKp/88yrk3DlVoO9XC
HMp29PbbeYeOH7yhbLsxg5fLU5IpvHTAOwTyMTxVmIUTcn0Zm7mC8TYUixy7rVb4
8Nf5wSq/zBvXDcEmSYR6y0tmWDrYNTlugsFLUOTo1dAXDSoT5oPBsYf4ZD2FRCbh
FHwh1pQ8FB7sPQ/PP3+qYmFVdgAuVgyS8NDPrN/C3lUhIHHW8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBABSW1LRaUPvecVUxrYtf7Br1UcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzRmZWRmNmUtOWMzMS0z
MTY3LTlmMDItMDhlODI0YWNiOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIoCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOtSuF2AOMg1DKxs1zFGst2oqq9LJq2SOyii2mt6uTcdeaoQAqVU/vM
jtCUUV4TL1R/9yRkoLZwqgtydr/BsRm30Qf14w7ahURvmvHi5YSnCOq/BKh/FKOo
yYuTmvv0W78ZKd9hoao/3/bWWRbtxW3bjWKTlU2fsRqzl9I9Z054UOdmp9YoAy/f
BQe54siMl5tIpJDNe+EBMleWz59SUVcCe2Z39Zp9cki/jo1gTLjdDNW+DlnVI89y
Wks8Tgwe0R8fkI3w2RPOvrPsl6u+sgTGhPprGroxnhEcGovvIuOcgZrxekRARMm/
tQ52Sbro/uZhzah3qWN9AvF9SaQ0nUs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:16 2025 by rpki-client