Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1ca7eed-71fc-3cb4-bebf-53618853b4ed.roa
File: c1ca7eed-71fc-3cb4-bebf-53618853b4ed.roa (raw, json)
Hash identifier: m9pbJQYveE1riFH5ikhGh1OuR6qQlETGbM8iGXZhnfQ=
Subject key identifier: 54:6C:BB:70:5B:67:44:C0:1A:3A:4B:46:9D:BA:63:90:77:5F:6F:0E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C581743F55BD48F78403ED00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1ca7eed-71fc-3cb4-bebf-53618853b4ed.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 34.108.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:74:3f:55:bd:48:f7:84:03:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2b0f7c22-34c6-4e9a-835e-28347f3edfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:1c:e3:03:cd:33:79:f3:04:c1:f5:28:05:
ef:9f:13:e7:5d:12:79:37:57:f4:7b:ca:7f:ee:ae:
56:74:96:97:2e:d0:cd:34:26:88:40:2d:0c:a0:09:
80:0a:e6:12:ec:68:ff:6d:07:af:62:32:27:8c:f0:
b9:e3:e6:3a:ef:73:e3:bf:22:5f:2c:0f:ac:0f:cc:
38:0c:1d:b2:8e:36:2d:a8:da:9f:e4:fd:5c:fe:c1:
fa:48:63:10:22:df:ac:cc:f1:57:b7:b1:a4:8f:e7:
9c:92:32:76:3d:ac:5d:47:67:36:51:b5:ce:cc:3b:
70:da:b7:a8:72:e6:73:e7:0c:3c:28:9b:ae:3c:10:
59:f3:35:19:bc:30:0c:6a:bb:cf:21:5a:e7:dd:49:
f2:d8:93:39:23:d2:b5:64:44:5c:25:2f:17:13:3f:
f9:ad:cb:ce:cd:d8:56:93:79:ff:a8:28:19:c3:1d:
b3:cf:b2:f2:c4:79:57:49:31:3a:73:5a:9e:18:9e:
b1:c4:a9:53:ba:f9:54:f4:40:46:19:b4:32:7b:c2:
9b:c4:39:6a:ce:2f:7c:c6:bf:51:66:5e:d4:af:19:
50:08:df:9c:8e:8f:65:f7:69:76:c6:b3:9a:6e:6b:
ce:d5:b6:56:62:c1:b9:25:14:11:58:3d:df:53:c5:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:BB:70:5B:67:44:C0:1A:3A:4B:46:9D:BA:63:90:77:5F:6F:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1ca7eed-71fc-3cb4-bebf-53618853b4ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.108.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:29:f3:2b:47:2f:fe:97:a4:da:d5:55:54:94:6a:7c:1b:58:
1b:09:0b:ce:8a:aa:c6:0e:79:ab:f1:04:e7:0e:0c:18:b4:92:
68:14:df:a9:0f:f8:a1:0c:99:9a:dd:05:cc:be:56:c3:ca:c3:
ab:7e:1c:ff:e2:4e:33:c0:12:29:2a:cc:4d:1e:93:39:72:a9:
f4:47:63:16:07:dd:de:f4:87:55:c6:55:76:4f:f9:3b:e0:42:
57:f5:49:00:84:95:cb:c0:c7:5d:87:62:fe:98:e9:ed:63:40:
f3:5a:d5:e8:86:7d:98:4e:d9:d3:06:9e:80:5b:f7:75:db:af:
00:04:a6:99:73:32:80:ff:bf:35:07:49:3e:4f:79:2d:f4:bc:
47:30:29:3a:86:23:01:e5:5e:e5:b8:75:cd:54:cd:27:f6:d4:
38:ee:30:60:3d:62:18:98:43:eb:35:a7:29:a4:62:e5:0c:69:
bd:2b:12:87:8c:4f:cd:47:ec:78:46:83:4b:35:50:43:b6:15:
05:f7:a5:ef:ae:93:4c:63:86:23:ed:22:82:bc:cb:c0:11:b4:
72:8c:45:c9:83:48:1a:4b:e1:29:da:b1:02:89:f8:2c:aa:d9:
91:d6:9d:b5:eb:ce:70:ba:d2:3b:71:71:18:d3:6f:bb:e4:6a:
0b:b0:1e:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXQ/Vb1I94QD7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmIwZjdjMjItMzRjNi00ZTlhLTgzNWUtMjgzNDdmM2VkZmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B0c4wPNM3nzBMH1KAXvnxPnXRJ5N1f0e8p/
7q5WdJaXLtDNNCaIQC0MoAmACuYS7Gj/bQevYjInjPC54+Y673PjvyJfLA+sD8w4
DB2yjjYtqNqf5P1c/sH6SGMQIt+szPFXt7Gkj+eckjJ2PaxdR2c2UbXOzDtw2reo
cuZz5ww8KJuuPBBZ8zUZvDAMarvPIVrn3Uny2JM5I9K1ZERcJS8XEz/5rcvOzdhW
k3n/qCgZwx2zz7LyxHlXSTE6c1qeGJ6xxKlTuvlU9EBGGbQye8KbxDlqzi98xr9R
Zl7UrxlQCN+cjo9l92l2xrOabmvO1bZWYsG5JRQRWD3fU8WYHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFRsu3BbZ0TAGjpLRp26Y5B3X28OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzFjYTdlZWQtNzFmYy0z
Y2I0LWJlYmYtNTM2MTg4NTNiNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkp8ytHL/6XpNrVVVSUanwbWBsJC86KqsYOeavxBOcODBi0kmgU36kP
+KEMmZrdBcy+VsPKw6t+HP/iTjPAEikqzE0ekzlyqfRHYxYH3d70h1XGVXZP+Tvg
Qlf1SQCElcvAx12HYv6Y6e1jQPNa1eiGfZhO2dMGnoBb93XbrwAEpplzMoD/vzUH
ST5PeS30vEcwKTqGIwHlXuW4dc1UzSf21DjuMGA9YhiYQ+s1pymkYuUMab0rEoeM
T81H7HhGg0s1UEO2FQX3pe+uk0xjhiPtIoK8y8ARtHKMRcmDSBpL4SnasQKJ+Cyq
2ZHWnbXrznC60jtxcRjTb7vkaguwHjw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:04 2025 by rpki-client