Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec0d1f5d-30fa-3cc1-bc71-a3d63d3eeab8.roa
File: ec0d1f5d-30fa-3cc1-bc71-a3d63d3eeab8.roa (raw, json)
Hash identifier: DbHZFIqQ9NxrpAeeJvjr2AQyeBej0Qsklw+fV5w/s6Q=
Subject key identifier: 15:DD:80:FB:A8:48:05:1F:0C:C7:6E:ED:90:AE:32:0B:F7:BC:D5:8A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BE051BB1CDF1CDA8F2580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec0d1f5d-30fa-3cc1-bc71-a3d63d3eeab8.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.203.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:e0:51:bb:1c:df:1c:da:8f:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ab3bf95b-9b1c-4552-9d94-d1b24f529b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:7a:e6:d2:ea:a2:2b:08:3b:71:cc:35:47:
88:4f:67:14:cb:91:33:b6:2a:77:fe:bd:18:ea:38:
d9:94:05:92:f1:23:78:04:5d:b8:d1:cc:48:cd:ed:
b3:52:07:37:5b:ba:cc:95:1b:02:8a:0c:5a:c8:3a:
51:99:f3:10:18:94:48:43:9a:35:bc:cf:6a:0e:db:
19:de:0d:f6:73:1e:94:9d:d4:41:c4:0b:31:c4:cb:
97:50:0f:13:be:58:11:b0:dd:f6:ef:8d:eb:65:f2:
7e:b7:f3:ad:ea:7e:d9:d8:84:c2:8b:f8:2b:f5:49:
0f:f3:0b:12:39:39:8f:18:f8:33:ad:ca:de:25:cd:
11:21:dd:0d:ef:f4:c4:bb:f9:58:3f:83:ae:6b:45:
a0:63:4d:00:ad:b5:15:11:a8:96:35:40:34:88:ac:
99:aa:71:e8:3f:f4:fc:bc:3f:37:24:93:7a:cd:81:
bb:19:db:43:d7:01:a4:4c:e3:7b:6a:82:36:44:b7:
f4:6a:05:e6:c0:ed:fe:08:aa:8a:0c:a7:f2:2b:ed:
04:8c:ec:a0:2f:53:71:f5:08:5b:a7:04:f0:7f:89:
01:a1:43:75:7f:45:05:8b:c1:10:b4:9b:4e:f8:4a:
f4:3b:2f:67:54:41:3d:31:10:00:2f:fa:70:c8:0e:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:80:FB:A8:48:05:1F:0C:C7:6E:ED:90:AE:32:0B:F7:BC:D5:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec0d1f5d-30fa-3cc1-bc71-a3d63d3eeab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:46:0d:5f:af:74:30:da:2f:81:a6:55:60:c6:e4:a7:20:58:
2a:6c:70:c8:2a:73:63:6a:4f:1d:d7:c6:c1:aa:d1:aa:9f:4c:
1b:b1:77:48:1f:a5:90:3d:5c:a6:9c:1b:f4:95:5c:7c:07:7e:
89:cf:cf:e4:b5:9d:98:c9:99:df:05:30:d4:f9:06:0b:67:38:
62:aa:06:87:aa:f8:64:f5:85:d9:d3:33:9b:09:2e:9d:06:ef:
35:6c:79:a4:b9:d5:af:4c:2c:56:0e:3b:4f:72:61:51:ae:4f:
2d:b5:69:4e:24:4f:cb:25:39:b6:d2:e9:ba:e3:37:25:26:a3:
ed:17:d4:77:8c:7c:2e:cc:35:db:34:9d:84:ae:b2:63:09:2f:
f2:b1:1f:06:12:8e:29:c8:8d:fa:07:d1:f1:34:8e:f2:85:84:
d9:e6:ec:a1:ca:1d:8d:f8:89:c9:7e:36:4a:85:54:61:f8:36:
14:b8:a1:38:11:e3:f9:0f:cb:b3:9c:88:c3:3d:19:86:3b:0a:
f6:30:94:e3:ac:e4:fb:73:59:90:38:59:04:1b:79:2a:53:f9:
08:98:33:6e:80:e0:2c:51:1c:69:5e:aa:6d:3c:dd:ca:ee:2a:
de:3d:c3:8e:30:f7:65:8a:c2:c9:96:05:4a:c0:b8:4a:14:7e:
14:c5:66:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+BRuxzfHNqPJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YWIzYmY5NWItOWIxYy00NTUyLTlkOTQtZDFiMjRmNTI5YjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgat65tLqoisIO3HMNUeIT2cUy5Eztip3/r0Y
6jjZlAWS8SN4BF240cxIze2zUgc3W7rMlRsCigxayDpRmfMQGJRIQ5o1vM9qDtsZ
3g32cx6UndRBxAsxxMuXUA8TvlgRsN32743rZfJ+t/Ot6n7Z2ITCi/gr9UkP8wsS
OTmPGPgzrcreJc0RId0N7/TEu/lYP4Oua0WgY00ArbUVEaiWNUA0iKyZqnHoP/T8
vD83JJN6zYG7GdtD1wGkTON7aoI2RLf0agXmwO3+CKqKDKfyK+0EjOygL1Nx9Qhb
pwTwf4kBoUN1f0UFi8EQtJtO+Er0Oy9nVEE9MRAAL/pwyA4p+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXdgPuoSAUfDMdu7ZCuMgv3vNWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWMwZDFmNWQtMzBmYS0z
Y2MxLWJjNzEtYTNkNjNkM2VlYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8uQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFGDV+vdDDaL4GmVWDG5KcgWCpscMgqc2NqTx3XxsGq0aqfTBuxd0gf
pZA9XKacG/SVXHwHfonPz+S1nZjJmd8FMNT5BgtnOGKqBoeq+GT1hdnTM5sJLp0G
7zVseaS51a9MLFYOO09yYVGuTy21aU4kT8slObbS6brjNyUmo+0X1HeMfC7MNds0
nYSusmMJL/KxHwYSjinIjfoH0fE0jvKFhNnm7KHKHY34icl+NkqFVGH4NhS4oTgR
4/kPy7OciMM9GYY7CvYwlOOs5PtzWZA4WQQbeSpT+QiYM26A4CxRHGleqm083cru
Kt49w44w92WKwsmWBUrAuEoUfhTFZjM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:52:44 2025 by rpki-client