Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/97a66db2-b584-3a4c-b9c0-3d377344494b.roa
File: 97a66db2-b584-3a4c-b9c0-3d377344494b.roa (raw, json)
Hash identifier: BNacgGkG1xa7SyXV/kcr/xO8bvjO/GDGp4Lo+dxV48s=
Subject key identifier: 0A:C5:73:D2:44:D8:42:55:FD:49:8A:C8:1E:C6:64:F6:2D:C7:0E:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584891EDDFCD4CD9EDE643018A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/97a66db2-b584-3a4c-b9c0-3d377344494b.roa
Signing time: Fri 17 Jan 2025 02:38:23 +0000
ROA not before: Fri 17 Jan 2025 02:38:23 +0000
ROA not after: Thu 17 Apr 2025 01:38:23 +0000
asID: 396982
IP address blocks: 34.13.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:ed:df:cd:4c:d9:ed:e6:43:01:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Jan 17 02:38:23 2025 GMT
Not After : Apr 17 01:38:23 2025 GMT
Subject: CN=7c08b0d6-e097-4323-9376-c55b7e9afdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:cf:8d:09:c3:3c:20:5c:bb:8a:5e:87:a8:
aa:70:de:b8:fe:d5:e7:e1:a8:00:e9:97:30:32:34:
39:b2:7a:37:6b:53:e0:61:c4:e3:c4:a5:8f:94:30:
ae:65:16:b8:43:f1:5e:4b:1c:7f:13:42:f6:aa:9e:
1f:89:b8:f7:26:af:30:a3:bf:db:dc:3d:45:8d:7e:
80:f0:13:2f:78:80:8b:b9:5a:0b:97:5b:d9:de:cf:
cf:6d:96:ab:65:dc:4e:a1:57:82:8a:fa:1d:ac:ca:
19:22:44:20:e0:32:59:9b:ce:54:3f:a7:fe:4e:4c:
15:02:14:23:c3:0f:2e:ad:47:24:d9:98:ca:51:7e:
0f:a5:4c:8c:7b:f4:f5:0c:83:15:b3:fc:8e:15:20:
e7:17:51:43:20:77:46:b8:38:70:16:0d:6d:9a:49:
2b:2c:50:3f:d1:b6:12:78:4c:eb:45:44:50:73:3b:
65:44:1a:53:06:2d:92:09:36:8b:cc:e5:c8:73:e2:
5e:c9:a6:e2:8b:2b:4c:d6:6f:35:a1:17:b7:2a:44:
3e:ba:94:ac:c7:e5:7a:a6:b4:11:19:ce:d7:64:3a:
36:38:bc:a9:8a:b0:3b:ca:40:f0:4d:ea:2d:65:03:
aa:b1:8e:87:71:af:e4:79:ae:c2:a8:6c:99:8e:f0:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:73:D2:44:D8:42:55:FD:49:8A:C8:1E:C6:64:F6:2D:C7:0E:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/97a66db2-b584-3a4c-b9c0-3d377344494b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.13.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:bb:77:52:49:db:80:a1:d9:56:b4:90:53:74:11:b2:b5:06:
3b:3c:be:a5:a8:b9:9f:57:ec:63:7b:9c:67:97:d7:16:6a:ae:
65:22:aa:66:c5:64:b5:d2:73:21:60:18:e2:17:26:e9:57:32:
77:33:40:6d:3a:d8:71:6d:c3:ad:17:7f:a7:3e:d2:d9:98:ad:
41:76:ef:f1:29:ee:3b:0d:18:66:3a:93:53:a3:38:f2:83:7e:
b1:73:1f:2c:e2:36:3e:87:34:5b:2b:dd:79:2f:60:74:04:d1:
c0:99:07:ec:09:91:7d:a6:2c:ae:95:56:3a:2c:70:97:41:85:
9d:e4:ec:ee:6e:62:c4:07:f8:f2:ab:54:2f:31:69:f8:dc:0c:
ab:a9:f6:b8:ca:d9:c2:87:de:63:c3:bf:65:8e:15:e0:93:57:
74:c5:d5:27:45:41:88:67:64:4e:18:0e:22:2f:a9:e1:23:9b:
48:49:a6:9f:1c:e3:d6:bb:54:1c:aa:b5:bd:bb:3c:56:42:f5:
d5:5d:7f:ca:2e:31:df:ee:90:5e:21:57:6e:8a:7a:54:07:31:
03:48:ef:bc:29:b8:4a:b6:25:d8:46:57:93:44:bd:79:4c:be:
63:f0:41:5d:2f:63:df:81:16:bd:ae:b1:96:12:40:17:2c:87:
59:1e:30:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR7d/NTNnt5kMBioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDExNzAyMzgyM1oXDTI1MDQxNzAxMzgyM1owLzEtMCsGA1UEAxMk
N2MwOGIwZDYtZTA5Ny00MzIzLTkzNzYtYzU1YjdlOWFmZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlTPjQnDPCBcu4peh6iqcN64/tXn4agA6Zcw
MjQ5sno3a1PgYcTjxKWPlDCuZRa4Q/FeSxx/E0L2qp4fibj3Jq8wo7/b3D1FjX6A
8BMveICLuVoLl1vZ3s/PbZarZdxOoVeCivodrMoZIkQg4DJZm85UP6f+TkwVAhQj
ww8urUck2ZjKUX4PpUyMe/T1DIMVs/yOFSDnF1FDIHdGuDhwFg1tmkkrLFA/0bYS
eEzrRURQcztlRBpTBi2SCTaLzOXIc+JeyabiiytM1m81oRe3KkQ+upSsx+V6prQR
Gc7XZDo2OLypirA7ykDwTeotZQOqsY6Hca/kea7CqGyZjvA8TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArFc9JE2EJV/UmKyB7GZPYtxw74MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTdhNjZkYjItYjU4NC0z
YTRjLWI5YzAtM2QzNzczNDQ0OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIg1oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC7d1JJ24Ch2Va0kFN0EbK1Bjs8vqWouZ9X7GN7nGeX1xZqrmUiqmbF
ZLXScyFgGOIXJulXMnczQG062HFtw60Xf6c+0tmYrUF27/Ep7jsNGGY6k1OjOPKD
frFzHyziNj6HNFsr3XkvYHQE0cCZB+wJkX2mLK6VVjoscJdBhZ3k7O5uYsQH+PKr
VC8xafjcDKup9rjK2cKH3mPDv2WOFeCTV3TF1SdFQYhnZE4YDiIvqeEjm0hJpp8c
49a7VByqtb27PFZC9dVdf8ouMd/ukF4hV26KelQHMQNI77wpuEq2JdhGV5NEvXlM
vmPwQV0vY9+BFr2usZYSQBcsh1keMM4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:09 2025 by rpki-client