Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a952c2-fa95-3fe0-a70f-168e302d4702.roa
File: 37a952c2-fa95-3fe0-a70f-168e302d4702.roa (raw, json)
Hash identifier: Sm2yq7FF3CyfTenZJ3mB6WIHlA2fez/HH7ssqQC3vXQ=
Subject key identifier: C1:CA:AD:25:21:6A:EE:F7:9C:7F:33:2F:13:39:9F:37:1F:3F:FC:33
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C0A5B7C2E938FA1534160
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a952c2-fa95-3fe0-a70f-168e302d4702.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.140.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:0a:5b:7c:2e:93:8f:a1:53:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b66246d1-b37b-4398-94f7-42a98fa447a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:44:e2:44:25:2f:b6:0a:81:c6:a5:ce:65:
26:f7:5a:e3:aa:bc:77:d4:bc:eb:7c:ef:7b:5f:e5:
95:85:33:32:a8:fd:a5:30:3a:38:66:8c:1b:34:6f:
57:48:c0:b3:8f:e3:72:48:2a:70:91:17:ca:f5:92:
56:2e:a8:16:93:3c:64:15:f4:e9:7e:5f:c5:c1:e0:
ab:4c:9a:b6:b7:6f:01:b7:ad:74:a1:26:d8:12:92:
83:ac:f5:05:c6:80:ef:29:c9:6b:71:f7:ba:ff:2c:
fc:66:af:de:25:ae:51:27:73:d7:2e:62:23:92:ca:
95:17:19:e0:e0:91:5f:8f:02:00:05:dc:89:b9:8a:
33:cc:b1:2e:27:7e:33:f5:9f:c1:a7:cf:3b:f2:c3:
9e:41:32:7d:81:0c:3d:ce:22:0f:91:66:5c:3a:43:
bc:ad:c5:72:25:f0:be:ed:23:e5:d0:0e:bd:cd:9f:
b8:1b:ce:0b:7d:0e:f3:c7:7f:b1:93:ca:84:27:6d:
fc:68:49:8a:6a:0d:69:e8:b2:43:05:99:ba:5e:21:
1d:30:6a:91:63:8a:f5:3f:7a:5c:8e:c8:86:e1:51:
01:e2:d2:fe:f9:73:dc:b1:d1:cd:a5:45:2c:29:a1:
35:a2:d1:71:ff:0e:a1:c3:b3:4b:0e:54:06:4a:54:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:AD:25:21:6A:EE:F7:9C:7F:33:2F:13:39:9F:37:1F:3F:FC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a952c2-fa95-3fe0-a70f-168e302d4702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:80:0c:eb:5e:4a:1a:fd:da:3c:fa:0e:d5:14:3a:d9:97:cf:
e3:34:66:1f:ba:bf:ca:39:7c:e2:40:d7:47:1d:be:82:4d:91:
0d:22:d1:5d:1f:0d:68:46:fc:00:24:e1:ad:8e:63:d9:14:e9:
36:c7:b3:71:8c:c6:25:f1:7f:74:cc:dc:03:9d:aa:26:38:c0:
5d:a3:b1:06:a7:5f:23:f0:ee:4c:e4:29:d2:1b:a5:c8:50:d6:
f9:09:b1:28:82:f3:92:61:d1:35:5c:2f:ef:4b:76:f1:68:7d:
ab:f0:f8:a3:b8:04:fb:49:15:e7:2d:3b:d7:be:86:0f:12:fd:
3f:37:49:8a:75:af:70:6c:a6:c0:9b:a2:1a:fb:c6:4f:da:1b:
f8:09:2e:89:18:a6:68:9f:2c:e0:66:57:bc:a4:74:28:10:f0:
9f:c7:75:70:be:8e:86:56:55:70:b7:db:0a:62:df:9b:fd:f9:
18:96:5f:88:d5:0f:9c:f8:bd:dd:3f:98:27:2e:94:4e:6e:a7:
31:a4:69:11:11:ac:1f:5b:17:3a:26:cb:aa:f9:71:76:64:0b:
6c:54:d1:df:95:a6:27:5e:f6:f9:26:7e:9d:40:d3:b5:73:d0:
c0:4f:87:9d:3e:5f:57:e8:03:f0:ae:25:c5:0f:c6:2e:bf:eb:
23:04:13:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITApbfC6Tj6FTQWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YjY2MjQ2ZDEtYjM3Yi00Mzk4LTk0ZjctNDJhOThmYTQ0N2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsFE4kQlL7YKgcalzmUm91rjqrx31LzrfO97
X+WVhTMyqP2lMDo4ZowbNG9XSMCzj+NySCpwkRfK9ZJWLqgWkzxkFfTpfl/FweCr
TJq2t28Bt610oSbYEpKDrPUFxoDvKclrcfe6/yz8Zq/eJa5RJ3PXLmIjksqVFxng
4JFfjwIABdyJuYozzLEuJ34z9Z/Bp8878sOeQTJ9gQw9ziIPkWZcOkO8rcVyJfC+
7SPl0A69zZ+4G84LfQ7zx3+xk8qEJ238aEmKag1p6LJDBZm6XiEdMGqRY4r1P3pc
jsiG4VEB4tL++XPcsdHNpUUsKaE1otFx/w6hw7NLDlQGSlRP6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHKrSUhau73nH8zLxM5nzcfP/wzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzdhOTUyYzItZmE5NS0z
ZmUwLWE3MGYtMTY4ZTMwMmQ0NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCADOteShr92jz6DtUUOtmXz+M0Zh+6v8o5fOJA10cdvoJNkQ0i0V0f
DWhG/AAk4a2OY9kU6TbHs3GMxiXxf3TM3AOdqiY4wF2jsQanXyPw7kzkKdIbpchQ
1vkJsSiC85Jh0TVcL+9LdvFofavw+KO4BPtJFectO9e+hg8S/T83SYp1r3BspsCb
ohr7xk/aG/gJLokYpmifLOBmV7ykdCgQ8J/HdXC+joZWVXC32wpi35v9+RiWX4jV
D5z4vd0/mCculE5upzGkaRERrB9bFzomy6r5cXZkC2xU0d+Vpide9vkmfp1A07Vz
0MBPh50+X1foA/CuJcUPxi6/6yMEE14=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:01 2025 by rpki-client