Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37297ef6-f67e-31e1-85d6-2782861f0766.roa
File: 37297ef6-f67e-31e1-85d6-2782861f0766.roa (raw, json)
Hash identifier: 9n9CVaRPoFtURjblU1OgRVTD9DCQFMMGBox1ojhp7Z8=
Subject key identifier: 82:64:DE:9F:00:99:26:04:5F:F4:BC:22:13:38:85:28:CF:63:96:24
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584894053655835B6CA3B17AE7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37297ef6-f67e-31e1-85d6-2782861f0766.roa
Signing time: Fri 17 Jan 2025 20:37:01 +0000
ROA not before: Fri 17 Jan 2025 20:37:01 +0000
ROA not after: Thu 17 Apr 2025 19:37:01 +0000
asID: 15169
IP address blocks: 34.2.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:05:36:55:83:5b:6c:a3:b1:7a:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 17 20:37:01 2025 GMT
Not After : Apr 17 19:37:01 2025 GMT
Subject: CN=35d427ee-ea1d-4755-9a10-86a7221e7079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:b4:4b:83:5f:dd:39:0f:60:ab:9b:90:96:
a9:3d:0f:26:8f:94:af:69:2e:25:9e:a2:4d:ec:cc:
1c:2a:ac:a9:fa:01:ea:64:5f:0a:c7:b1:bd:ed:ce:
b3:02:f7:bc:ad:13:1e:69:68:ee:f2:45:1b:5b:00:
0d:52:ed:c6:c5:81:ae:7a:bf:2c:05:73:63:a0:16:
8c:bd:22:4d:3c:f4:1f:bf:6e:33:e3:0c:67:47:68:
d6:6c:1d:bf:29:31:67:1a:61:98:cd:f5:75:32:a1:
77:08:10:b5:e1:80:2d:3f:90:02:00:07:8c:17:3f:
a4:56:2f:61:12:1a:15:a3:53:51:3c:9f:13:d6:f6:
cd:59:a5:e6:cc:72:b3:24:59:ed:f6:5f:5e:1c:88:
f3:b4:b6:e2:1d:3e:7e:15:0e:0e:5b:1c:e5:2a:29:
45:62:8a:49:52:54:e0:80:19:58:ab:00:58:c3:b8:
36:8c:be:57:9b:52:e8:4e:fe:a9:be:80:d2:71:5b:
35:b6:ac:97:1c:a9:53:a4:11:ad:25:da:4f:1b:31:
0b:71:29:8e:87:81:eb:9f:f6:60:d1:25:b8:78:c8:
5a:97:f9:1c:a5:e3:c2:80:eb:c0:a5:33:24:bb:f5:
54:d2:71:92:c4:ee:88:6e:b5:ac:f7:f1:ef:7c:8b:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:DE:9F:00:99:26:04:5F:F4:BC:22:13:38:85:28:CF:63:96:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37297ef6-f67e-31e1-85d6-2782861f0766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.2.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:c0:f0:b0:a3:5d:50:5e:50:01:64:a1:2e:c1:b9:3d:a6:11:
3b:17:71:12:c3:b9:51:7c:05:2e:3a:0b:a2:f5:0d:85:cf:61:
0e:86:5b:79:97:ce:f0:f8:82:e8:f8:e7:6c:db:81:65:51:40:
a5:a5:4d:f0:1d:23:53:37:ae:13:a0:93:1e:99:81:18:08:11:
c2:4c:66:3d:0f:87:20:a2:47:91:c5:7d:d5:7e:2d:a7:fa:34:
25:5b:60:79:2b:7e:ad:72:c2:b3:a1:0c:11:6e:33:fa:22:5e:
5e:ac:f0:86:a6:79:57:e7:82:98:c7:16:c5:c3:34:27:ff:c3:
a8:d3:d7:06:93:48:d1:34:d9:bb:18:41:70:d3:21:44:d3:04:
b7:9e:c3:36:a7:cf:ef:23:bc:1e:d8:ea:d1:dc:54:98:8f:a6:
f4:98:72:47:44:0a:b8:fe:c0:ed:90:18:af:18:38:27:f6:3c:
4e:18:ce:b0:5d:22:56:84:d7:88:60:25:fd:59:99:ee:d0:50:
21:c2:29:a8:f7:3a:b4:8a:aa:fc:0c:dd:a4:da:a6:ae:d4:ff:
5b:9a:61:43:6b:59:88:b4:85:9b:98:b3:54:1d:9f:50:bb:c2:
9c:c4:b9:f0:46:e2:6c:0e:c7:2c:d4:da:db:4d:7c:14:42:d6:
3c:4b:0c:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUBTZVg1tso7F658AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDExNzIwMzcwMVoXDTI1MDQxNzE5MzcwMVowLzEtMCsGA1UEAxMk
MzVkNDI3ZWUtZWExZC00NzU1LTlhMTAtODZhNzIyMWU3MDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFe0S4Nf3TkPYKubkJapPQ8mj5SvaS4lnqJN
7MwcKqyp+gHqZF8Kx7G97c6zAve8rRMeaWju8kUbWwANUu3GxYGuer8sBXNjoBaM
vSJNPPQfv24z4wxnR2jWbB2/KTFnGmGYzfV1MqF3CBC14YAtP5ACAAeMFz+kVi9h
EhoVo1NRPJ8T1vbNWaXmzHKzJFnt9l9eHIjztLbiHT5+FQ4OWxzlKilFYopJUlTg
gBlYqwBYw7g2jL5Xm1LoTv6pvoDScVs1tqyXHKlTpBGtJdpPGzELcSmOh4Hrn/Zg
0SW4eMhal/kcpePCgOvApTMku/VU0nGSxO6IbrWs9/HvfIuxiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJk3p8AmSYEX/S8IhM4hSjPY5YkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzcyOTdlZjYtZjY3ZS0z
MWUxLTg1ZDYtMjc4Mjg2MWYwNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHA8LCjXVBeUAFkoS7BuT2mETsXcRLDuVF8BS46C6L1DYXPYQ6GW3mX
zvD4guj452zbgWVRQKWlTfAdI1M3rhOgkx6ZgRgIEcJMZj0PhyCiR5HFfdV+Laf6
NCVbYHkrfq1ywrOhDBFuM/oiXl6s8IameVfngpjHFsXDNCf/w6jT1waTSNE02bsY
QXDTIUTTBLeewzanz+8jvB7Y6tHcVJiPpvSYckdECrj+wO2QGK8YOCf2PE4YzrBd
IlaE14hgJf1Zme7QUCHCKaj3OrSKqvwM3aTapq7U/1uaYUNrWYi0hZuYs1Qdn1C7
wpzEufBG4mwOxyzU2ttNfBRC1jxLDNI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:03:48 2025 by rpki-client