Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
File: aa7a7287-b1dc-3e23-925f-c1a9de542259.roa (raw, json)
Hash identifier: uUUYpHLFw3lU2daWZGWvuEANUX0nxlSf2ARd9cENzCI=
Subject key identifier: A7:FD:B6:F3:FB:CB:91:93:68:2E:CE:C3:DC:B6:66:9B:F7:9D:E4:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5818977BBDAD56EF7B25000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 11344
IP address blocks: 34.104.39.208/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:77:bb:da:d5:6e:f7:b2:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=859d37e6-4396-42c8-b460-111fa6202fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:7b:a8:d0:17:3c:9a:7e:b3:75:88:6d:a1:
9a:08:71:e8:0f:53:73:9c:0c:2e:4c:3a:e2:64:15:
93:a6:95:df:e3:95:dd:6c:d4:d0:09:92:8e:87:4d:
9a:72:30:9d:e5:b7:2b:08:8a:30:75:df:86:df:5a:
fb:87:e4:a2:06:1d:33:c2:73:b8:a9:9b:1c:8c:c3:
d5:0f:22:f2:e2:28:80:5e:0a:e4:52:8c:e6:1c:b9:
fc:c7:e6:0b:e9:e9:5a:18:c2:19:a9:2c:b3:5f:6a:
91:51:1f:cd:dc:54:e0:74:98:13:fa:cb:fe:9b:9d:
8e:b1:90:5f:7a:1a:b3:7a:a7:e6:d5:69:a8:6a:de:
b1:0e:07:3d:d0:6b:88:c6:f0:59:2c:f6:03:1a:61:
4b:50:a1:15:48:f9:d8:11:02:1a:cf:67:66:12:8c:
e8:81:a2:9d:9b:a5:5e:22:d6:e1:ea:76:2c:56:76:
33:c3:15:0c:9b:db:43:77:f2:9d:b8:87:b1:e7:1c:
70:8f:fa:e2:16:0b:f1:36:ff:47:0a:50:b8:91:2a:
b1:41:91:9c:42:5f:37:62:28:39:ce:31:9e:dd:10:
9a:cd:86:cb:c9:a4:f3:63:16:38:8f:56:40:37:f1:
12:92:e6:d3:7b:1d:d5:f8:d5:28:f7:95:3a:35:21:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:B6:F3:FB:CB:91:93:68:2E:CE:C3:DC:B6:66:9B:F7:9D:E4:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa7a7287-b1dc-3e23-925f-c1a9de542259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.104.39.208/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c8:ad:77:bf:4a:14:23:e6:3d:8f:c4:c3:51:fa:b6:7a:1b:
14:84:3d:13:fa:6e:e1:80:ef:87:67:b0:b2:4b:27:f1:bd:9e:
bf:cf:b7:93:f9:a1:f8:0b:bd:6f:8a:61:5b:88:e4:6b:0e:e2:
15:ea:bc:1c:1c:ec:ce:11:e2:d1:e1:ba:56:7d:66:71:6e:33:
cc:68:ec:df:79:6e:83:c7:a4:d2:03:c3:93:f0:fa:16:73:6c:
ca:ad:0e:b1:ac:1c:c0:64:06:87:00:fc:dd:c5:60:58:60:82:
32:c1:be:17:cc:be:16:6a:7b:1b:90:6c:05:f2:1d:a2:9d:b5:
a8:b6:35:7f:b4:84:c2:89:35:19:eb:f2:00:78:3d:d1:a6:cc:
e6:46:95:c1:50:16:83:97:1b:44:d7:91:c0:38:47:91:2c:09:
01:4a:a4:e7:52:7f:d4:f7:4b:20:02:fc:ef:f4:f9:5a:6b:d3:
ae:8c:f4:de:9d:7c:53:11:6d:ec:b7:d5:a2:8e:78:43:ed:d4:
66:0d:d7:d3:31:20:e7:6e:ea:6d:cd:76:f0:c6:1f:7e:76:2a:
48:44:c1:d8:19:91:7a:80:26:a5:2e:3e:72:be:c6:e9:a5:a2:
be:f2:44:b2:38:8d:83:e4:27:68:01:f4:67:5d:eb:b5:35:cb:
3f:9c:ed:34
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjFgYl3u9rVbveyUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODU5ZDM3ZTYtNDM5Ni00MmM4LWI0NjAtMTExZmE2MjAyZmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyV7qNAXPJp+s3WIbaGaCHHoD1NznAwuTDri
ZBWTppXf45XdbNTQCZKOh02acjCd5bcrCIowdd+G31r7h+SiBh0zwnO4qZscjMPV
DyLy4iiAXgrkUozmHLn8x+YL6elaGMIZqSyzX2qRUR/N3FTgdJgT+sv+m52OsZBf
ehqzeqfm1Wmoat6xDgc90GuIxvBZLPYDGmFLUKEVSPnYEQIaz2dmEozogaKdm6Ve
Itbh6nYsVnYzwxUMm9tDd/KduIex5xxwj/riFgvxNv9HClC4kSqxQZGcQl83Yig5
zjGe3RCazYbLyaTzYxY4j1ZAN/ESkubTex3V+NUo95U6NSETrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKf9tvP7y5GTaC7Ow9y2Zpv3neQ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE3YTcyODctYjFkYy0z
ZTIzLTkyNWYtYzFhOWRlNTQyMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEImgn0DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBXyK13v0oUI+Y9j8TDUfq2ehsUhD0T+m7hgO+HZ7CySyfxvZ6/z7eT
+aH4C71vimFbiORrDuIV6rwcHOzOEeLR4bpWfWZxbjPMaOzfeW6Dx6TSA8OT8PoW
c2zKrQ6xrBzAZAaHAPzdxWBYYIIywb4XzL4WansbkGwF8h2inbWotjV/tITCiTUZ
6/IAeD3RpszmRpXBUBaDlxtE15HAOEeRLAkBSqTnUn/U90sgAvzv9Plaa9OujPTe
nXxTEW3st9WijnhD7dRmDdfTMSDnbuptzXbwxh9+dipIRMHYGZF6gCalLj5yvsbp
paK+8kSyOI2D5CdoAfRnXeu1Ncs/nO00
-----END CERTIFICATE-----
Generated at Thu Apr 10 09:51:46 2025 by rpki-client