Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa
File: d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa (raw, json)
Hash identifier: AzbajP+XAWD2Sk0NFsDf2Wq4OfVWZ0ynT6gMcszzILw=
Subject key identifier: FB:5D:20:AB:6E:72:A8:43:01:D4:E6:70:CA:FA:9A:FB:DF:41:5C:78
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BD50737529390863280C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.193.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d5:07:37:52:93:90:86:32:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=35cfd7f3-1967-4bb3-b9bc-f4fc3ce6acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:26:7c:4e:5e:36:ed:99:b0:fc:b2:f2:98:
aa:ca:12:d5:45:60:96:5b:4a:bd:50:6c:09:46:2e:
bd:7e:f8:cb:a9:17:7f:fd:61:8a:be:3e:a2:ed:d6:
84:7b:96:cb:da:30:2e:b0:78:02:1e:2f:63:27:95:
62:90:cc:c8:ba:29:66:0a:78:0c:6a:65:3d:9c:e8:
79:de:d4:cc:f2:be:a7:8a:c3:fe:c0:35:a2:bf:66:
eb:bf:6b:3b:12:1f:68:4f:d3:c9:14:d6:87:65:a1:
cf:85:1b:61:72:04:ce:83:5a:71:0a:e0:38:15:ea:
66:e2:04:8a:4f:4e:2f:af:6d:b7:c3:a8:ad:93:32:
20:b8:75:cc:5e:cd:d6:df:9b:8b:0f:dc:d9:58:56:
f1:40:97:1e:52:2f:86:fe:f1:c8:17:f9:15:fb:4f:
02:04:13:d7:07:27:08:ba:2d:09:7c:ba:a5:36:45:
0c:63:29:72:50:37:4e:f3:d4:78:b1:f7:6c:55:f7:
17:b8:2e:ea:df:42:d9:35:32:ab:17:d2:b6:ec:94:
e1:cb:f6:9e:a6:92:95:7d:11:aa:83:86:c3:a1:ef:
f0:9f:0e:04:28:61:90:38:79:29:d9:67:89:14:a3:
e7:96:2d:68:fa:66:95:af:90:74:1b:28:0c:d5:be:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:20:AB:6E:72:A8:43:01:D4:E6:70:CA:FA:9A:FB:DF:41:5C:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.193.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:58:8d:bf:04:ad:89:4b:a5:11:91:90:bb:f3:87:6e:0a:ee:
fa:66:f5:de:0d:7f:9f:c7:82:bf:fd:63:e3:4f:45:99:ca:fc:
3a:fc:e9:d4:2b:ac:30:e1:09:0a:18:b4:8d:98:34:28:d8:05:
22:33:cc:38:88:1e:aa:6a:05:45:48:69:32:5a:e0:dc:ad:cf:
67:57:e5:1b:76:89:44:04:75:9f:1f:df:70:1f:4c:a1:20:ca:
d9:b7:d8:46:58:8c:1a:d5:9b:55:8a:9d:62:96:8b:a2:2b:d2:
a2:dc:8b:86:06:d6:4b:5c:b4:95:f2:2e:dc:8a:9c:1f:4f:62:
28:04:7e:3f:cb:27:14:7c:5e:b8:a2:47:a9:76:9b:59:d4:ce:
8b:3b:57:e2:32:2e:8d:8e:52:8a:86:a4:11:4d:57:65:3d:3f:
fa:fc:00:13:e6:71:18:26:d3:93:05:cf:1f:d2:86:ec:9e:b7:
27:a2:3e:c0:f3:ae:91:ca:5f:fa:0c:ab:4b:85:5b:96:29:52:
84:ff:24:b6:bd:b2:33:07:ce:ca:60:05:fc:99:e8:75:a8:4a:
55:a9:f4:e1:d3:5b:5f:1c:22:a7:3a:b4:e9:a2:57:85:ad:70:
99:42:b3:e6:da:74:78:0d:ff:33:9a:07:ff:07:5b:47:0c:c9:
2d:af:b7:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9UHN1KTkIYygMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MzVjZmQ3ZjMtMTk2Ny00YmIzLWI5YmMtZjRmYzNjZTZhY2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qcmfE5eNu2ZsPyy8piqyhLVRWCWW0q9UGwJ
Ri69fvjLqRd//WGKvj6i7daEe5bL2jAusHgCHi9jJ5VikMzIuilmCngMamU9nOh5
3tTM8r6nisP+wDWiv2brv2s7Eh9oT9PJFNaHZaHPhRthcgTOg1pxCuA4Fepm4gSK
T04vr223w6itkzIguHXMXs3W35uLD9zZWFbxQJceUi+G/vHIF/kV+08CBBPXBycI
ui0JfLqlNkUMYylyUDdO89R4sfdsVfcXuC7q30LZNTKrF9K27JThy/aeppKVfRGq
g4bDoe/wnw4EKGGQOHkp2WeJFKPnli1o+maVr5B0GygM1b7nXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtdIKtucqhDAdTmcMr6mvvfQVx4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDc5MDMzYWUtMDg2MS0z
MWM2LWJjMzctY2E3ZWRhOWM0YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8GAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFYjb8ErYlLpRGRkLvzh24K7vpm9d4Nf5/Hgr/9Y+NPRZnK/Dr86dQr
rDDhCQoYtI2YNCjYBSIzzDiIHqpqBUVIaTJa4Nytz2dX5Rt2iUQEdZ8f33AfTKEg
ytm32EZYjBrVm1WKnWKWi6Ir0qLci4YG1ktctJXyLtyKnB9PYigEfj/LJxR8Xrii
R6l2m1nUzos7V+IyLo2OUoqGpBFNV2U9P/r8ABPmcRgm05MFzx/ShuyetyeiPsDz
rpHKX/oMq0uFW5YpUoT/JLa9sjMHzspgBfyZ6HWoSlWp9OHTW18cIqc6tOmiV4Wt
cJlCs+badHgN/zOaB/8HW0cMyS2vt6w=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:39 2025 by rpki-client