Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9367672-f988-306b-a750-cc43436dbe3a.roa
File: f9367672-f988-306b-a750-cc43436dbe3a.roa (raw, json)
Hash identifier: z2H5oxpT2W0JUg6oo44+AhoLrI25t/DTGBQJQ3jE91A=
Subject key identifier: 9B:E7:31:9E:14:6A:97:84:84:AD:13:30:65:7A:84:51:2A:A7:10:52
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C84C10C01D21F194496B6080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9367672-f988-306b-a750-cc43436dbe3a.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 396982
IP address blocks: 35.204.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:10:c0:1d:21:f1:94:49:6b:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=dd7ca158-600c-4e00-a806-cd4b0357a438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:bc:ba:df:2e:b0:df:ce:3e:af:77:c1:84:
25:ad:1f:2a:32:11:4f:6f:13:bd:36:7e:93:3d:c4:
33:35:2f:91:22:19:2b:d3:4e:ea:7f:ab:41:2d:59:
6d:5b:50:bc:5c:ca:7a:42:b4:f6:33:c2:9c:00:c3:
c4:e4:37:65:63:98:f3:73:68:6b:d8:d8:cd:ff:f0:
4b:f3:90:c7:02:4f:3c:3d:80:43:53:91:95:36:3b:
91:4b:ad:83:d0:26:a7:ee:97:79:c2:96:82:ab:b4:
cc:34:12:96:3c:8d:de:48:8b:7a:bc:db:58:b7:31:
8e:f4:81:fc:eb:52:76:76:4a:91:81:d6:5d:46:df:
35:06:cf:fd:68:4e:90:3f:6b:61:b1:66:7c:62:9f:
f3:9d:b1:2f:18:1c:fa:5f:fc:85:0f:68:cc:13:56:
e3:44:f7:69:69:b3:46:21:28:49:6e:de:84:17:58:
e0:39:3a:c8:3e:a0:b5:2d:11:18:70:23:f7:cd:20:
31:d8:6b:61:dc:0e:24:4d:d1:31:6c:0f:9b:8c:42:
d4:3d:a7:b9:3f:79:5e:7f:87:00:8d:24:da:c2:2b:
f5:70:c5:c1:ac:53:c2:8d:9e:12:df:61:bd:70:74:
39:bc:dd:f9:9f:37:eb:8f:cd:70:59:e6:a9:b6:07:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:31:9E:14:6A:97:84:84:AD:13:30:65:7A:84:51:2A:A7:10:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9367672-f988-306b-a750-cc43436dbe3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.204.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:64:35:d3:7f:b7:fd:ba:4e:66:04:1c:8f:d0:18:9d:b6:23:
97:d9:26:d6:75:af:f0:3a:a4:a6:2a:93:15:c0:a3:24:c7:32:
4a:b1:8e:95:d0:55:21:ef:f2:8a:36:d1:b2:b2:9b:f5:b9:cb:
ac:32:c1:68:c2:32:f3:6f:9e:f8:27:95:69:65:02:6a:a6:b8:
11:cd:12:ae:e1:2b:5e:86:34:78:8b:c9:57:93:18:92:c1:77:
93:bb:f8:70:58:c8:b4:72:a3:7a:92:a4:60:12:48:43:fa:c5:
9f:83:93:f8:84:31:05:b1:e6:cd:2f:06:56:48:23:e3:e1:51:
d6:0c:25:65:cf:44:04:27:57:49:4f:5c:b8:29:40:37:d2:21:
ad:bf:ab:36:6f:ba:d3:93:65:90:2b:c8:7e:b0:8d:1b:86:aa:
2e:cf:1d:3a:44:da:e0:75:12:68:82:38:dc:38:2c:5f:7e:fd:
23:cb:e6:d8:20:a1:9a:34:15:a7:7f:30:34:ca:e8:e1:58:d6:
d6:71:44:4e:cd:78:14:4b:97:d0:3f:55:2f:5d:0e:3c:e2:6a:
f6:c9:85:86:1e:44:39:63:68:64:e5:da:31:9d:ca:46:03:a4:
9e:83:5f:c7:32:fe:e9:9e:b0:d5:68:47:95:8c:0f:f7:e9:ae:
64:c5:8d:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBDAHSHxlElrYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZGQ3Y2ExNTgtNjAwYy00ZTAwLWE4MDYtY2Q0YjAzNTdhNDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJm8ut8usN/OPq93wYQlrR8qMhFPbxO9Nn6T
PcQzNS+RIhkr007qf6tBLVltW1C8XMp6QrT2M8KcAMPE5DdlY5jzc2hr2NjN//BL
85DHAk88PYBDU5GVNjuRS62D0Can7pd5wpaCq7TMNBKWPI3eSIt6vNtYtzGO9IH8
61J2dkqRgdZdRt81Bs/9aE6QP2thsWZ8Yp/znbEvGBz6X/yFD2jME1bjRPdpabNG
IShJbt6EF1jgOTrIPqC1LREYcCP3zSAx2Gth3A4kTdExbA+bjELUPae5P3lef4cA
jSTawiv1cMXBrFPCjZ4S32G9cHQ5vN35nzfrj81wWeaptgeDnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvnMZ4UapeEhK0TMGV6hFEqpxBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjkzNjc2NzItZjk4OC0z
MDZiLWE3NTAtY2M0MzQzNmRiZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhkNdN/t/26TmYEHI/QGJ22I5fZJtZ1r/A6pKYqkxXAoyTHMkqxjpXQ
VSHv8oo20bKym/W5y6wywWjCMvNvnvgnlWllAmqmuBHNEq7hK16GNHiLyVeTGJLB
d5O7+HBYyLRyo3qSpGASSEP6xZ+Dk/iEMQWx5s0vBlZII+PhUdYMJWXPRAQnV0lP
XLgpQDfSIa2/qzZvutOTZZAryH6wjRuGqi7PHTpE2uB1EmiCONw4LF9+/SPL5tgg
oZo0Fad/MDTK6OFY1tZxRE7NeBRLl9A/VS9dDjziavbJhYYeRDljaGTl2jGdykYD
pJ6DX8cy/umesNVoR5WMD/fprmTFjYc=
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:32:26 2025 by rpki-client