Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa
File: 9ed460a0-30e5-359a-99af-46da230b9dbc.roa (raw, json)
Hash identifier: O8VH9HgT0XeRxorVeTWvGseyKIXbjNB1IkBQzKkULuk=
Subject key identifier: FE:42:27:A6:87:20:07:B8:4B:D6:1B:57:7D:B8:91:2A:8C:F9:5F:0A
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F432858492CDAF4FF1542828D492EDAC0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa
Signing time: Thu 13 Mar 2025 14:30:34 +0000
ROA not before: Thu 13 Mar 2025 14:30:34 +0000
ROA not after: Wed 11 Jun 2025 14:30:34 +0000
asID: 16509
IP address blocks: 144.36.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:da:f4:ff:15:42:82:8d:49:2e:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Mar 13 14:30:34 2025 GMT
Not After : Jun 11 14:30:34 2025 GMT
Subject: CN=9339b6a0-5763-46fe-b092-94da7c80e8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:1b:2c:d9:4f:c6:d0:a5:6a:f7:9b:6b:8d:
a8:e0:5a:08:93:3c:b5:f7:4b:e7:d3:c3:fc:3d:bc:
db:ca:6b:4d:4b:9b:99:71:a6:9a:11:40:52:ce:8b:
c2:35:76:0e:28:01:8e:9d:92:0e:bc:3b:91:e1:32:
3f:f3:d5:f6:42:46:f4:92:c8:00:b1:2f:07:7c:81:
d0:0e:19:8f:ab:9c:7e:43:ba:e7:b7:51:9a:86:98:
82:f9:60:9d:40:d3:65:f0:39:0d:f6:d8:99:1e:a9:
11:64:57:83:7a:34:dc:7c:87:f6:90:64:22:ae:80:
ca:f0:79:b6:3a:7d:8c:5d:33:d7:44:36:90:29:d1:
bb:b0:5b:20:1b:7b:51:7a:89:17:1e:73:b4:b1:33:
0f:a1:6b:d7:72:a0:d9:53:7d:9a:dd:97:8d:48:ce:
d7:8a:27:d3:18:4a:46:c4:5d:53:84:cf:31:d4:9c:
49:64:5e:81:e6:bf:a8:35:fd:02:c1:71:01:24:89:
72:a6:76:c7:71:e2:e8:bc:c5:4b:72:72:71:70:c6:
50:65:d5:43:c2:09:11:75:6c:3b:c2:40:43:e6:9b:
ed:aa:1c:2a:0d:15:87:73:52:24:50:88:49:6e:d7:
d1:5c:6b:74:af:48:32:72:0c:d4:6f:03:ee:7f:d1:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:42:27:A6:87:20:07:B8:4B:D6:1B:57:7D:B8:91:2A:8C:F9:5F:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:7d:24:c4:7e:64:93:4c:a4:c3:2b:31:65:8f:3e:cc:77:d7:
2a:4f:3c:7f:29:39:90:75:73:d5:f1:2b:ee:66:83:dd:7b:ea:
06:96:48:28:a7:20:e3:d8:96:bd:a9:74:d3:dd:54:3a:b2:30:
2b:a6:50:05:18:b1:23:e5:0b:bc:fb:c4:a0:a7:3c:87:79:65:
f1:ec:54:e2:a7:92:1e:9c:fe:41:bb:97:db:04:b0:02:cc:fa:
13:18:9d:a2:49:9c:cf:d6:3e:bc:21:17:f1:f9:36:7f:87:a9:
82:cc:95:70:6b:e2:bd:27:4b:7f:1b:39:b4:0b:d3:a2:d2:23:
3e:56:96:69:69:0e:c7:55:96:2d:65:93:40:dd:c1:b9:7e:c6:
6a:71:4b:ab:7c:3c:b0:a8:8d:24:0d:9b:8b:b7:3b:d5:da:ad:
b7:ba:10:82:27:19:83:4e:52:0f:ae:2e:4b:46:3e:29:d5:a7:
c0:de:ab:d3:2a:a1:d1:a8:45:90:b4:b7:c7:58:40:7c:26:fd:
5d:33:7e:77:0e:02:85:59:00:5c:d6:b3:1c:ac:3f:67:f3:19:
a8:2b:9e:98:ce:7c:91:0d:db:68:09:84:62:cd:f3:72:ba:f7:
5a:73:08:0d:5e:f7:dd:68:32:d2:b2:0d:a7:86:aa:49:b5:35:
74:1a:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:31 2025 by rpki-client