Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99a2df31-c34a-37e9-a2d7-725021ad848a.roa
File: 99a2df31-c34a-37e9-a2d7-725021ad848a.roa (raw, json)
Hash identifier: jNO0c9Uw8QmwCeQX/W6pn056Sz5Lq2jhwIxNq0ThlPE=
Subject key identifier: CF:A3:E1:EC:DE:22:5B:01:0D:B8:61:00:C8:FD:6F:C5:7A:C4:B7:8B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BAE2BA55975BBEEA18CE8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99a2df31-c34a-37e9-a2d7-725021ad848a.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.247.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ae:2b:a5:59:75:bb:ee:a1:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=f7b33448-9bd4-496a-aff5-017484429b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:94:ee:ae:14:81:4d:aa:0c:a7:c2:1a:a1:
4d:88:1b:be:f5:37:47:5a:1f:95:63:3e:91:b9:6a:
67:bc:75:0b:8d:a6:12:92:c7:e1:66:a8:50:c2:c3:
69:f4:74:2c:95:43:2b:12:17:50:28:08:a8:77:f8:
de:ad:9a:a2:35:a2:a4:b6:78:73:d7:45:92:61:05:
a0:bb:17:11:57:65:ce:ff:64:5f:9d:c4:37:74:07:
0c:2c:d5:fc:c6:6b:52:3c:ee:2e:ad:bf:36:5e:96:
80:ac:c6:1d:6f:41:0b:c0:77:ef:09:fb:6e:a4:05:
26:0c:f7:b5:fd:4b:9f:79:c9:a4:c7:d9:72:84:9a:
63:4f:33:02:da:45:65:6a:bf:3c:b8:6c:12:96:36:
73:a0:8b:07:ef:7e:2c:54:5d:18:03:d4:6f:31:bd:
6c:59:62:70:9d:49:c6:9e:e8:48:02:c6:48:fb:f4:
6f:03:a4:d8:6f:c0:dd:cb:f4:23:e4:7f:6c:36:6f:
dd:86:bc:5b:4f:f2:89:69:18:da:9d:aa:92:33:67:
54:91:76:93:1d:af:59:87:be:8f:2c:58:a7:69:71:
1c:fb:60:76:7f:33:bb:37:3d:f2:5d:27:c6:1c:2b:
bf:f5:bc:ef:76:6f:0b:2d:19:50:c3:51:cd:79:39:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:E1:EC:DE:22:5B:01:0D:B8:61:00:C8:FD:6F:C5:7A:C4:B7:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99a2df31-c34a-37e9-a2d7-725021ad848a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.247.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:65:44:97:75:7a:d8:98:05:c2:c3:87:e0:cb:7b:45:52:b0:
52:4b:dc:d9:5a:97:57:04:92:37:f6:a7:14:29:7b:ad:fe:86:
4e:4f:f1:c6:41:0a:60:b6:e9:46:93:d6:b5:50:5f:61:9d:6d:
51:8b:c9:42:4e:b5:8d:77:ab:6c:a2:07:b3:d5:a0:0a:2c:98:
6b:25:06:7c:97:fc:08:0a:81:1f:81:73:ec:91:bd:8f:21:a1:
ea:37:aa:2f:63:1c:90:80:50:a8:f8:c0:4b:d3:b9:31:cb:16:
e6:d8:d3:62:ad:61:47:e4:0a:60:5c:a6:b6:23:2f:f4:17:12:
77:2d:50:e8:98:0a:e8:66:8c:1b:77:5d:2d:27:3c:e2:49:22:
f5:a3:42:5f:2a:36:98:ab:8f:02:d8:40:1c:2e:66:82:47:3f:
2a:ba:5d:de:4f:db:95:a6:51:27:00:f7:fb:eb:57:44:eb:cb:
c9:cd:b9:48:e5:7e:cf:d6:ac:e2:35:99:97:a5:2b:c2:3a:87:
3f:6a:93:7d:c2:cd:70:13:0c:49:47:18:46:18:19:50:b7:12:
a8:4b:b3:0e:c6:d1:b0:24:c2:fa:eb:e4:8b:10:a7:0e:bc:53:
92:15:76:6c:b2:12:74:ca:be:80:51:87:40:40:c4:34:52:2c:
2f:a6:03:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS64rpVl1u+6hjOgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZjdiMzM0NDgtOWJkNC00OTZhLWFmZjUtMDE3NDg0NDI5YjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplaU7q4UgU2qDKfCGqFNiBu+9TdHWh+VYz6R
uWpnvHULjaYSksfhZqhQwsNp9HQslUMrEhdQKAiod/jerZqiNaKktnhz10WSYQWg
uxcRV2XO/2RfncQ3dAcMLNX8xmtSPO4urb82XpaArMYdb0ELwHfvCftupAUmDPe1
/Uufecmkx9lyhJpjTzMC2kVlar88uGwSljZzoIsH734sVF0YA9RvMb1sWWJwnUnG
nuhIAsZI+/RvA6TYb8Ddy/Qj5H9sNm/dhrxbT/KJaRjanaqSM2dUkXaTHa9Zh76P
LFinaXEc+2B2fzO7Nz3yXSfGHCu/9bzvdm8LLRlQw1HNeTk6twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+j4ezeIlsBDbhhAMj9b8V6xLeLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTlhMmRmMzEtYzM0YS0z
N2U5LWEyZDctNzI1MDIxYWQ4NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFlRJd1etiYBcLDh+DLe0VSsFJL3Nlal1cEkjf2pxQpe63+hk5P8cZB
CmC26UaT1rVQX2GdbVGLyUJOtY13q2yiB7PVoAosmGslBnyX/AgKgR+Bc+yRvY8h
oeo3qi9jHJCAUKj4wEvTuTHLFubY02KtYUfkCmBcprYjL/QXEnctUOiYCuhmjBt3
XS0nPOJJIvWjQl8qNpirjwLYQBwuZoJHPyq6Xd5P25WmUScA9/vrV0Try8nNuUjl
fs/WrOI1mZelK8I6hz9qk33CzXATDElHGEYYGVC3EqhLsw7G0bAkwvrr5IsQpw68
U5IVdmyyEnTKvoBRh0BAxDRSLC+mAxk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:07 2025 by rpki-client