Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb95c95-da7b-3631-9999-6af6ce53b95a.roa
File: 4bb95c95-da7b-3631-9999-6af6ce53b95a.roa (raw, json)
Hash identifier: afTRAEojq62zR6poOUOO5Un/Gk2PunoAKzf2haCiGL8=
Subject key identifier: C4:09:FD:4C:96:08:07:CB:E1:2E:86:79:77:37:57:B0:4A:C8:51:3C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BFFD76964E3E6D17ADF40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb95c95-da7b-3631-9999-6af6ce53b95a.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.246.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ff:d7:69:64:e3:e6:d1:7a:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=70919e41-7c5a-4410-a966-4d52b55aab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:16:61:f8:fa:e1:6f:f4:b6:eb:bc:c4:93:
eb:0f:de:8f:77:2b:3a:a2:fa:e8:3d:19:64:f7:9b:
75:4c:7c:45:41:07:34:a6:b8:c9:49:ba:aa:74:b9:
a1:91:85:4b:e8:32:1b:b6:14:e6:ac:fc:9d:62:74:
b6:5a:1d:c5:53:70:5a:1b:48:06:4d:1a:4f:4b:86:
4a:3f:96:de:cf:01:a4:e7:87:17:c8:8e:0a:15:dd:
48:8b:28:56:0a:72:79:e4:55:0c:11:4d:89:9f:9f:
93:89:e0:eb:38:20:96:10:10:be:6d:70:b1:7a:46:
53:ca:78:b7:1d:3f:be:85:5c:7e:e2:7e:23:30:ae:
e6:cc:1d:9a:8a:94:5c:97:a8:f4:68:6b:e5:2b:06:
42:ae:e8:44:bb:c4:4f:a4:35:2d:ef:58:97:ae:42:
6a:5a:af:ee:3d:cf:e8:c0:4f:01:e6:cf:0f:03:88:
75:43:a6:b4:00:cb:73:dc:8a:cc:61:53:94:e7:72:
aa:62:b6:06:d2:84:39:42:39:19:3d:4a:03:37:bd:
78:08:75:30:97:a6:16:36:f6:83:04:56:55:aa:4f:
f5:cc:54:9d:a0:fb:c4:78:33:11:22:c3:b1:d9:a3:
de:57:9c:d4:63:c2:9b:4d:dd:a5:dd:bd:30:ab:d4:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:FD:4C:96:08:07:CB:E1:2E:86:79:77:37:57:B0:4A:C8:51:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4bb95c95-da7b-3631-9999-6af6ce53b95a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.246.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:f8:ea:de:fa:04:aa:3d:94:03:2f:a7:b5:21:3f:6f:ee:a4:
65:4a:84:35:93:db:c9:42:54:83:a3:38:ca:65:47:c6:a9:c8:
91:c6:60:cf:7a:2f:7e:98:f1:af:d9:27:ba:cd:26:9b:7b:2d:
50:a2:15:0c:6e:c1:c5:c3:e4:ed:70:ab:2c:0e:05:5b:28:aa:
51:b3:d8:c7:a4:e2:6d:11:2a:74:79:ba:1b:fd:b4:4b:9b:cd:
2e:e8:13:f3:db:63:17:57:aa:f8:2a:14:2b:fd:11:c2:49:14:
10:bd:36:e9:f9:01:6c:a1:d6:cf:24:ac:e0:a1:47:a4:a2:e7:
d0:ba:6a:5b:f4:2a:79:d1:50:17:c2:0a:68:59:a8:e8:a1:0f:
34:1c:31:f7:30:83:47:37:42:92:c4:86:35:0f:fa:6b:e1:23:
ae:88:a4:c9:aa:6f:1f:60:78:5b:68:98:b1:6f:07:67:7f:f4:
27:d9:d6:e9:c7:3d:75:33:bf:b5:48:65:a1:33:32:fa:50:68:
04:aa:0c:62:7f:db:b8:c8:f4:e9:3d:50:ce:f2:e4:09:08:57:
0d:a1:aa:ed:46:e4:1a:cf:c9:0a:23:15:24:46:6b:2b:6e:74:
bf:52:22:b0:e4:c8:6a:c2:cb:05:a2:f5:63:39:1c:36:cd:41:
44:32:aa:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS//XaWTj5tF630AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NzA5MTllNDEtN2M1YS00NDEwLWE5NjYtNGQ1MmI1NWFhYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop0WYfj64W/0tuu8xJPrD96Pdys6ovroPRlk
95t1THxFQQc0prjJSbqqdLmhkYVL6DIbthTmrPydYnS2Wh3FU3BaG0gGTRpPS4ZK
P5bezwGk54cXyI4KFd1IiyhWCnJ55FUMEU2Jn5+TieDrOCCWEBC+bXCxekZTyni3
HT++hVx+4n4jMK7mzB2aipRcl6j0aGvlKwZCruhEu8RPpDUt71iXrkJqWq/uPc/o
wE8B5s8PA4h1Q6a0AMtz3IrMYVOU53KqYrYG0oQ5QjkZPUoDN714CHUwl6YWNvaD
BFZVqk/1zFSdoPvEeDMRIsOx2aPeV5zUY8KbTd2l3b0wq9StRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQJ/UyWCAfL4S6GeXc3V7BKyFE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGJiOTVjOTUtZGE3Yi0z
NjMxLTk5OTktNmFmNmNlNTNiOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/YQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI346t76BKo9lAMvp7UhP2/upGVKhDWT28lCVIOjOMplR8apyJHGYM96
L36Y8a/ZJ7rNJpt7LVCiFQxuwcXD5O1wqywOBVsoqlGz2Mek4m0RKnR5uhv9tEub
zS7oE/PbYxdXqvgqFCv9EcJJFBC9Nun5AWyh1s8krOChR6Si59C6alv0KnnRUBfC
CmhZqOihDzQcMfcwg0c3QpLEhjUP+mvhI66IpMmqbx9geFtomLFvB2d/9CfZ1unH
PXUzv7VIZaEzMvpQaASqDGJ/27jI9Ok9UM7y5AkIVw2hqu1G5BrPyQojFSRGaytu
dL9SIrDkyGrCywWi9WM5HDbNQUQyqh0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:43 2025 by rpki-client