Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa
File: f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa (raw, json)
Hash identifier: NkmoGhZgPUVPpBPrS5yNNNfZOsw0eyCB+/C11rxkGpo=
Subject key identifier: 52:86:20:1C:5F:26:BA:D6:C4:91:0F:EE:5E:2E:36:F1:B3:92:6E:07
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84BCA8CE214FD0C79F957DC
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 34.123.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ca:8c:e2:14:fd:0c:79:f9:57:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=ab96545b-d422-466d-a485-9c5b4dc0aaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:61:4c:0c:84:65:2a:3a:d9:dc:33:d5:aa:
b5:3c:f2:8a:39:42:78:61:4a:f8:88:9b:57:ea:57:
15:e0:a5:b0:91:75:80:8c:38:f3:2d:02:45:a7:37:
5e:6e:2c:b1:36:5f:f8:07:a7:50:c2:00:92:ea:a8:
d7:83:25:9d:bf:6f:ad:c4:b0:a2:5c:ba:25:e9:d3:
0c:f0:d0:2d:94:60:2c:fd:ab:fc:4a:f7:2e:9b:31:
92:9e:cd:61:f7:a6:9c:bf:f4:23:34:56:cc:0c:71:
35:63:2b:f5:61:44:45:ab:08:c0:33:d1:c0:05:77:
dc:20:33:90:f0:ff:5d:ec:2b:d5:df:ad:a5:3a:3c:
f3:aa:96:50:32:3e:ca:b8:26:0f:f0:14:be:21:b5:
57:36:9c:71:c1:30:3e:d2:b5:f9:a6:b3:55:7a:e0:
87:8c:a1:cd:72:b5:fe:f2:38:6a:d3:fe:5c:fd:8c:
02:27:14:f2:71:21:20:e4:0c:b9:bf:2a:c8:21:e2:
c7:d4:5e:21:01:2e:26:b6:2c:bd:c2:00:e2:df:91:
cd:88:24:05:1b:0f:8d:d2:2f:83:2c:dc:e1:2d:dd:
e2:24:57:6b:17:93:98:44:03:8a:c2:dd:e3:58:db:
6c:e4:41:6b:30:91:8d:4d:65:3e:bd:d0:13:22:cb:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:20:1C:5F:26:BA:D6:C4:91:0F:EE:5E:2E:36:F1:B3:92:6E:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4d1a1b4-7c0f-3bfa-bb3c-3481394fdcf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.123.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:5e:1a:4e:36:9a:2a:d4:f2:80:94:ba:8f:dd:5d:a2:92:71:
d7:45:ee:ed:3f:a0:d4:09:ad:44:dd:aa:1d:b3:c5:b3:1c:c4:
c7:2a:32:4a:f2:ad:d6:72:e0:05:10:fb:20:0e:a1:f4:98:34:
1b:9f:5a:16:e6:c7:3b:f5:0b:bf:3d:28:01:86:6b:94:44:8d:
2e:32:72:3a:96:22:1e:19:6d:1b:c1:64:f5:e4:93:b7:19:14:
40:4e:cf:c9:60:ca:66:bb:99:f1:64:20:79:50:14:95:80:7d:
76:56:a1:4e:e8:2f:c0:9a:4b:eb:54:bf:1c:39:81:49:3d:1b:
e0:bb:fa:94:28:cf:78:d3:58:b7:d2:f0:f4:55:38:62:30:e0:
45:57:f9:24:aa:7d:31:91:bf:35:eb:09:5e:20:4c:cc:dc:6d:
18:90:18:48:9f:52:e3:c0:c6:d8:94:00:09:4d:27:6f:77:ce:
98:11:ee:5c:3d:d9:9a:ed:1a:01:09:dc:c7:f4:41:52:e2:25:
fa:35:07:a9:58:7f:8b:76:ad:38:e1:c3:b3:f3:3a:39:c1:b2:
ab:02:75:03:8e:c5:e5:43:10:5b:80:c4:0c:2b:d5:92:11:5e:
d4:d2:46:3e:49:a4:1f:82:84:c9:63:01:47:73:ba:5a:16:05:
f1:6e:39:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8qM4hT9DHn5V9wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YWI5NjU0NWItZDQyMi00NjZkLWE0ODUtOWM1YjRkYzBhYWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9FhTAyEZSo62dwz1aq1PPKKOUJ4YUr4iJtX
6lcV4KWwkXWAjDjzLQJFpzdebiyxNl/4B6dQwgCS6qjXgyWdv2+txLCiXLol6dMM
8NAtlGAs/av8SvcumzGSns1h96acv/QjNFbMDHE1Yyv1YURFqwjAM9HABXfcIDOQ
8P9d7CvV362lOjzzqpZQMj7KuCYP8BS+IbVXNpxxwTA+0rX5prNVeuCHjKHNcrX+
8jhq0/5c/YwCJxTycSEg5Ay5vyrIIeLH1F4hAS4mtiy9wgDi35HNiCQFGw+N0i+D
LNzhLd3iJFdrF5OYRAOKwt3jWNts5EFrMJGNTWU+vdATIsvhsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKGIBxfJrrWxJEP7l4uNvGzkm4HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjRkMWExYjQtN2MwZi0z
YmZhLWJiM2MtMzQ4MTM5NGZkY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACReGk42mirU8oCUuo/dXaKScddF7u0/oNQJrUTdqh2zxbMcxMcqMkry
rdZy4AUQ+yAOofSYNBufWhbmxzv1C789KAGGa5REjS4ycjqWIh4ZbRvBZPXkk7cZ
FEBOz8lgyma7mfFkIHlQFJWAfXZWoU7oL8CaS+tUvxw5gUk9G+C7+pQoz3jTWLfS
8PRVOGIw4EVX+SSqfTGRvzXrCV4gTMzcbRiQGEifUuPAxtiUAAlNJ293zpgR7lw9
2ZrtGgEJ3Mf0QVLiJfo1B6lYf4t2rTjhw7PzOjnBsqsCdQOOxeVDEFuAxAwr1ZIR
XtTSRj5JpB+ChMljAUdzuloWBfFuOeg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:10 2025 by rpki-client