Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98e2b70f-b300-3f65-84aa-e705e1385ca6.roa
File: 98e2b70f-b300-3f65-84aa-e705e1385ca6.roa (raw, json)
Hash identifier: pgMGzTQJdbdHCu48WErlaw/ZPy9BpJGmbvwgfeWv4d8=
Subject key identifier: 7B:F6:BB:66:93:7F:BF:B7:95:AC:4C:8B:A9:DC:B3:FC:6F:1E:79:75
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BCC2C2B4B52A73F742680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98e2b70f-b300-3f65-84aa-e705e1385ca6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.164.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:cc:2c:2b:4b:52:a7:3f:74:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=5552d54d-c557-4c7b-afd9-a2c85bc7c055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:6e:27:0c:e4:5b:18:d3:52:3a:78:68:f0:
4f:14:1b:96:a5:ab:a2:d6:8b:4a:4c:ef:ee:ec:a2:
74:bd:98:57:91:19:11:51:0b:8c:9c:87:a9:9e:72:
09:41:fd:57:72:19:23:93:93:35:89:26:4b:5a:72:
0a:bf:1c:3e:01:61:c1:9a:fc:3e:c5:83:c0:62:d0:
ee:61:6e:6b:b2:ee:ed:08:8b:5a:ce:5f:8c:7d:3c:
11:0a:63:a6:41:de:0f:63:ce:03:ec:07:2b:6f:98:
26:2f:7e:25:37:e4:80:45:1d:9e:9a:d6:d2:5d:42:
18:2d:a4:3d:77:65:2c:59:10:24:1e:53:50:91:c9:
15:98:9a:b7:f8:55:fd:42:ad:b5:61:e1:65:2b:8c:
78:ed:c5:83:44:26:81:54:5f:80:c4:dd:47:12:d6:
62:ea:fe:5b:21:b5:82:c6:16:f1:82:08:8e:04:b1:
37:49:d0:2e:b6:c0:84:b1:f9:29:bb:9f:a8:0c:23:
be:f4:c3:e5:1e:a0:63:85:d3:dc:60:12:d6:70:00:
11:85:f3:b6:16:ec:e7:13:db:99:be:26:16:65:26:
20:54:ab:01:ac:39:03:21:6f:8c:a6:61:b9:ca:d5:
db:d4:26:19:fd:8e:71:8f:9b:ba:0e:fb:5c:e1:89:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:BB:66:93:7F:BF:B7:95:AC:4C:8B:A9:DC:B3:FC:6F:1E:79:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98e2b70f-b300-3f65-84aa-e705e1385ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.164.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:bb:56:3d:ba:eb:4b:4c:da:36:7b:dc:0d:eb:e1:0b:50:8c:
c4:4a:cd:94:81:6b:d2:1e:1d:c1:33:c8:4b:f8:1d:96:a4:23:
a5:f4:be:4b:f8:94:05:8a:5c:79:d2:ab:6b:be:30:7c:b5:50:
bb:3a:99:40:f6:4a:06:0a:28:2d:94:6f:25:7f:3c:c3:43:82:
84:98:5f:43:b2:e2:f4:91:8c:71:08:89:b9:ed:f8:d7:2b:8e:
38:62:01:93:df:d0:f8:ee:f6:31:71:e6:5b:8c:63:60:18:58:
a9:6e:a7:2b:55:bc:d5:b1:11:66:c9:15:8f:3d:a6:8f:88:36:
c9:8e:f5:92:9c:98:e5:5b:3b:fa:68:3f:cb:9a:95:c6:80:a7:
2c:d6:49:1d:7f:e4:1c:af:af:9e:cc:ac:10:fc:61:aa:9a:80:
7b:df:cf:7d:d5:7c:29:22:00:d3:5f:3e:75:aa:b6:39:61:18:
1c:e7:ed:8f:6a:9d:34:32:b3:fb:76:5d:b5:fa:79:04:6e:79:
14:1a:ad:55:78:41:6a:2a:3a:ac:7c:2e:e3:e5:07:20:7d:67:
0b:5d:fa:25:47:6d:61:bb:c7:33:b2:3d:a2:e4:f7:ae:d7:ea:
9d:28:46:1c:39:f8:78:28:18:0b:c1:4c:a9:5a:84:23:9d:f6:
e8:c7:e3:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8wsK0tSpz90JoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NTU1MmQ1NGQtYzU1Ny00YzdiLWFmZDktYTJjODViYzdjMDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOhuJwzkWxjTUjp4aPBPFBuWpaui1otKTO/u
7KJ0vZhXkRkRUQuMnIepnnIJQf1Xchkjk5M1iSZLWnIKvxw+AWHBmvw+xYPAYtDu
YW5rsu7tCItazl+MfTwRCmOmQd4PY84D7Acrb5gmL34lN+SARR2emtbSXUIYLaQ9
d2UsWRAkHlNQkckVmJq3+FX9Qq21YeFlK4x47cWDRCaBVF+AxN1HEtZi6v5bIbWC
xhbxggiOBLE3SdAutsCEsfkpu5+oDCO+9MPlHqBjhdPcYBLWcAARhfO2FuznE9uZ
viYWZSYgVKsBrDkDIW+MpmG5ytXb1CYZ/Y5xj5u6Dvtc4Ylz9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHv2u2aTf7+3laxMi6ncs/xvHnl1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThlMmI3MGYtYjMwMC0z
ZjY1LTg0YWEtZTcwNWUxMzg1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+7Vj2660tM2jZ73A3r4QtQjMRKzZSBa9IeHcEzyEv4HZakI6X0vkv4
lAWKXHnSq2u+MHy1ULs6mUD2SgYKKC2UbyV/PMNDgoSYX0Oy4vSRjHEIibnt+Ncr
jjhiAZPf0Pju9jFx5luMY2AYWKlupytVvNWxEWbJFY89po+INsmO9ZKcmOVbO/po
P8ualcaApyzWSR1/5Byvr57MrBD8YaqagHvfz33VfCkiANNfPnWqtjlhGBzn7Y9q
nTQys/t2XbX6eQRueRQarVV4QWoqOqx8LuPlByB9Zwtd+iVHbWG7xzOyPaLk967X
6p0oRhw5+HgoGAvBTKlahCOd9ujH4z0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:36 2025 by rpki-client