Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8342f89a-e1bd-3e75-a9cc-c7a42659af30.roa
File: 8342f89a-e1bd-3e75-a9cc-c7a42659af30.roa (raw, json)
Hash identifier: y9iq6tQPoVVnYWH9tJ8k3kOoeKwqiwmcM0Bt0R0eHlo=
Subject key identifier: E6:A3:B8:32:58:49:B5:6B:3E:5E:5C:BA:DC:C7:22:F1:4B:D8:68:F0
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C1C13426D026FA89154C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8342f89a-e1bd-3e75-a9cc-c7a42659af30.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.81.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1c:13:42:6d:02:6f:a8:91:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=2a0bcaff-badd-4cef-b0b1-e671d9f05c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:3b:76:a0:eb:91:b6:37:24:fc:dc:26:d8:
50:d5:94:9b:b6:4f:ce:ad:b5:5e:44:9f:d0:6d:3f:
7e:dc:4c:84:ba:ce:9c:39:36:7a:23:d0:a1:06:78:
b4:d6:96:db:c7:bd:88:05:f4:a5:56:7b:47:d8:db:
8f:73:85:3a:08:f2:1a:b9:09:74:c1:f2:cb:a5:af:
80:ac:e3:82:85:fc:9c:d2:a0:d1:f3:50:e6:5b:2b:
2b:a9:b8:88:65:b3:96:74:e1:fb:75:5d:fd:95:05:
e4:3e:45:3f:7c:b7:86:0a:f0:89:35:f3:9e:d6:7f:
58:8f:93:ed:02:ff:72:1d:e0:46:46:50:bc:ad:4c:
66:cc:ce:17:8e:db:42:b1:5e:e5:7b:8d:77:d2:b6:
50:b3:97:42:0b:b4:99:9a:16:a8:20:9c:67:85:fb:
bf:31:84:07:77:8b:e6:65:aa:1b:7f:9c:20:63:9f:
00:1f:2c:d0:83:cc:f5:56:78:33:d6:04:d1:c5:e6:
1f:e4:91:a8:77:35:3d:48:54:df:37:1b:a4:ac:7f:
7d:ec:6f:2b:c1:75:be:ef:a8:68:e5:01:83:0a:6e:
c6:9e:a7:f6:96:f8:aa:94:be:43:a1:41:f7:b4:bc:
37:06:b6:2f:05:f9:3f:38:7e:92:2a:d2:25:ed:43:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:B8:32:58:49:B5:6B:3E:5E:5C:BA:DC:C7:22:F1:4B:D8:68:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8342f89a-e1bd-3e75-a9cc-c7a42659af30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.81.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:cc:c4:89:d7:83:8e:4e:b6:21:50:b0:5f:3a:96:79:c9:d1:
32:79:1d:b8:85:43:a5:28:14:64:0e:05:94:39:c2:ed:d6:ed:
38:95:4f:a7:0e:47:27:b7:f4:6d:76:99:95:df:33:9c:94:f8:
0f:a7:a4:ad:58:a6:ba:42:f4:cb:8d:3b:39:3e:71:66:21:2b:
83:c4:92:b1:22:e3:15:9f:d8:2d:69:e5:a8:4b:2e:bc:9d:5d:
79:d8:7b:0d:06:aa:b5:d7:19:c9:89:fc:da:7f:9c:17:53:b8:
4f:7b:53:0f:d9:62:e9:74:2a:5a:5b:d8:3b:b1:4d:52:fb:83:
31:1e:00:60:a1:d1:65:26:44:4f:82:78:2e:08:6b:6a:3d:70:
39:79:c7:42:da:3c:d5:54:17:67:3a:2c:07:7b:74:e1:0a:88:
8d:cf:3c:33:26:c8:68:f0:5c:09:e5:53:63:df:7b:9e:97:17:
dd:d8:b1:3b:30:9a:eb:f6:d5:26:c6:1c:7c:c1:aa:7e:5e:f7:
77:87:99:65:60:30:ec:c5:14:e3:ac:1b:1d:64:cf:b9:09:bd:
60:38:a6:84:8a:14:4b:71:03:46:72:d3:6b:31:0d:37:d8:83:
c3:cf:91:91:46:9f:25:f6:25:7b:bd:e8:3b:8a:d9:34:bd:82:
da:05:c9:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBwTQm0Cb6iRVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MmEwYmNhZmYtYmFkZC00Y2VmLWIwYjEtZTY3MWQ5ZjA1YzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIU7dqDrkbY3JPzcJthQ1ZSbtk/OrbVeRJ/Q
bT9+3EyEus6cOTZ6I9ChBni01pbbx72IBfSlVntH2NuPc4U6CPIauQl0wfLLpa+A
rOOChfyc0qDR81DmWysrqbiIZbOWdOH7dV39lQXkPkU/fLeGCvCJNfOe1n9Yj5Pt
Av9yHeBGRlC8rUxmzM4XjttCsV7le4130rZQs5dCC7SZmhaoIJxnhfu/MYQHd4vm
Zaobf5wgY58AHyzQg8z1Vngz1gTRxeYf5JGodzU9SFTfNxukrH997G8rwXW+76ho
5QGDCm7Gnqf2lviqlL5DoUH3tLw3BrYvBfk/OH6SKtIl7UMQTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOajuDJYSbVrPl5cutzHIvFL2GjwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODM0MmY4OWEtZTFiZC0z
ZTc1LWE5Y2MtYzdhNDI2NTlhZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnMxInXg45OtiFQsF86lnnJ0TJ5HbiFQ6UoFGQOBZQ5wu3W7TiVT6cO
Rye39G12mZXfM5yU+A+npK1YprpC9MuNOzk+cWYhK4PEkrEi4xWf2C1p5ahLLryd
XXnYew0GqrXXGcmJ/Np/nBdTuE97Uw/ZYul0Klpb2DuxTVL7gzEeAGCh0WUmRE+C
eC4Ia2o9cDl5x0LaPNVUF2c6LAd7dOEKiI3PPDMmyGjwXAnlU2Pfe56XF93YsTsw
muv21SbGHHzBqn5e93eHmWVgMOzFFOOsGx1kz7kJvWA4poSKFEtxA0Zy02sxDTfY
g8PPkZFGnyX2JXu96DuK2TS9gtoFyUs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:07:55 2025 by rpki-client