Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa
File: ba543447-8c4d-3150-9872-2f0e3ae1b000.roa (raw, json)
Hash identifier: tZhL1+8s6Jxi3mfdoUVy4/nTWQwZQGC9SN6aW0wwsrk=
Subject key identifier: F4:B1:6A:1A:7A:58:68:8B:7B:0E:5B:27:68:25:A8:33:5F:10:AD:66
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C582305DEEF017BCCEF060E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 19527
IP address blocks: 34.1.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:30:5d:ee:f0:17:bc:ce:f0:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=fff3eefe-5b15-4bdc-8a12-0f58a2aa5e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:43:bc:b2:14:fd:cd:84:1d:8b:e0:55:96:44:
a2:7d:46:c7:ef:70:93:48:ec:84:6d:b6:f9:3c:e5:
8b:2e:c8:0f:0e:c0:4f:aa:b6:7c:0c:d4:ae:fa:d3:
af:98:5a:1e:82:75:09:b7:8f:28:ba:f0:ad:0d:83:
bb:7c:f5:8e:15:47:ce:1c:17:bd:d1:6e:7f:8c:13:
6e:25:a8:ac:68:fe:43:3a:ae:ee:75:7c:4e:b2:18:
d9:36:e8:be:71:18:04:63:48:95:04:94:d7:5b:68:
0b:67:6c:b6:f2:ac:da:f6:4f:8c:49:4c:bf:a6:ea:
61:db:a7:df:12:6d:d2:5e:4f:f0:a6:e2:27:2c:73:
00:d8:f4:79:63:c5:44:ba:03:a1:83:84:c0:b4:01:
4d:8f:37:74:52:9f:4a:cf:7a:45:9d:32:24:c6:63:
e2:9f:b1:ec:39:ba:c1:ad:f5:08:8c:dd:ff:bc:1e:
f7:bc:4e:b5:6c:0f:30:91:78:29:b7:a4:16:57:b5:
2d:77:d6:70:b7:83:1b:bd:f5:f4:cd:cb:9c:5b:1d:
d4:3d:1b:5f:85:e5:ce:af:d1:d1:9e:6f:93:8b:6c:
3d:b9:32:0c:68:da:c7:ae:eb:65:50:64:7c:aa:2d:
b2:29:71:02:92:d1:bb:69:91:52:f9:04:e8:84:ca:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:6A:1A:7A:58:68:8B:7B:0E:5B:27:68:25:A8:33:5F:10:AD:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba543447-8c4d-3150-9872-2f0e3ae1b000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.1.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:d1:cc:bf:88:0f:49:2e:42:a6:60:ca:db:1a:8e:4d:35:84:
7e:5b:f5:91:8a:2d:78:5c:f9:c1:f8:c9:58:49:f3:d6:8e:a7:
4a:a2:ce:4b:64:f0:7f:f3:e7:be:b3:a8:03:ee:fe:70:b3:43:
d5:9c:dc:67:73:34:2e:53:74:9d:28:01:82:ca:9f:a7:19:7f:
02:47:77:46:83:8a:a3:9d:de:2d:e6:46:72:59:3d:c1:0b:15:
03:07:57:d8:f6:1a:ed:a9:52:27:6e:42:7a:20:6f:af:5f:c5:
1d:de:64:3c:83:1a:6b:3c:3d:e4:b8:bd:4b:91:7f:18:d9:be:
85:cc:ab:84:a3:a8:18:c4:7b:fb:d6:bb:d5:d3:94:d3:f1:78:
af:7f:ae:77:e1:7a:12:97:8e:6e:81:7b:b4:62:56:b8:7f:6b:
b6:1d:c3:2c:49:6d:b2:d0:e9:51:02:a9:c5:76:54:8f:35:66:
78:c1:6d:f1:08:1a:db:5e:22:db:be:a3:a8:16:45:d6:75:f4:
a3:57:6c:bb:bc:ff:b7:d7:dd:6c:10:9b:5c:6f:17:5b:d8:02:
61:13:a5:56:45:2d:6a:27:84:22:9f:70:0c:47:97:21:a9:18:
43:cc:9f:58:93:4c:e9:9f:a2:08:a9:e0:ba:3c:29:42:8b:fc:
54:33:06:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjBd7vAXvM7wYOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmZmM2VlZmUtNWIxNS00YmRjLThhMTItMGY1OGEyYWE1ZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0O8shT9zYQdi+BVlkSifUbH73CTSOyEbbb5
POWLLsgPDsBPqrZ8DNSu+tOvmFoegnUJt48ouvCtDYO7fPWOFUfOHBe90W5/jBNu
JaisaP5DOq7udXxOshjZNui+cRgEY0iVBJTXW2gLZ2y28qza9k+MSUy/puph26ff
Em3SXk/wpuInLHMA2PR5Y8VEugOhg4TAtAFNjzd0Up9Kz3pFnTIkxmPin7HsObrB
rfUIjN3/vB73vE61bA8wkXgpt6QWV7Utd9Zwt4MbvfX0zcucWx3UPRtfheXOr9HR
nm+Ti2w9uTIMaNrHrutlUGR8qi2yKXECktG7aZFS+QTohMpHyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSxahp6WGiLew5bJ2glqDNfEK1mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE1NDM0NDctOGM0ZC0z
MTUwLTk4NzItMmYwZTNhZTFiMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDRzL+ID0kuQqZgytsajk01hH5b9ZGKLXhc+cH4yVhJ89aOp0qizktk
8H/z576zqAPu/nCzQ9Wc3GdzNC5TdJ0oAYLKn6cZfwJHd0aDiqOd3i3mRnJZPcEL
FQMHV9j2Gu2pUiduQnogb69fxR3eZDyDGms8PeS4vUuRfxjZvoXMq4SjqBjEe/vW
u9XTlNPxeK9/rnfhehKXjm6Be7RiVrh/a7YdwyxJbbLQ6VECqcV2VI81ZnjBbfEI
GtteItu+o6gWRdZ19KNXbLu8/7fX3WwQm1xvF1vYAmETpVZFLWonhCKfcAxHlyGp
GEPMn1iTTOmfogip4Lo8KUKL/FQzBo0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:49 2025 by rpki-client