Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b67d6b42-6856-3f28-90d0-c22939a33056.roa
File: b67d6b42-6856-3f28-90d0-c22939a33056.roa (raw, json)
Hash identifier: a+/wlamTiMf6zxBpYlz9P5Hxk+LQJGrYIBffeLG0saA=
Subject key identifier: B1:6B:0E:03:09:B3:09:91:C2:45:56:A0:82:52:63:93:B6:3D:78:70
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F432858492CD7A9B3791BB86FA3BD0900
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b67d6b42-6856-3f28-90d0-c22939a33056.roa
Signing time: Thu 13 Mar 2025 14:23:56 +0000
ROA not before: Thu 13 Mar 2025 14:23:56 +0000
ROA not after: Wed 11 Jun 2025 14:23:56 +0000
asID: 14618
IP address blocks: 144.36.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:d7:a9:b3:79:1b:b8:6f:a3:bd:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Mar 13 14:23:56 2025 GMT
Not After : Jun 11 14:23:56 2025 GMT
Subject: CN=56fa6e84-8de7-49b0-bf16-1df9be3c14bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:44:09:68:3b:16:94:72:64:28:18:c8:96:
ef:ff:90:92:5a:86:83:97:21:60:87:40:52:43:a8:
80:16:1d:51:68:32:15:91:c8:41:ad:5b:64:1c:d2:
30:d3:f4:91:37:f2:0b:49:86:49:53:9c:84:5d:a6:
fc:57:99:2d:e9:e1:d7:02:7f:4c:80:87:68:3b:68:
cf:5a:11:ea:09:9e:7c:53:60:19:e9:d2:be:19:24:
68:42:78:6e:99:36:3f:bb:cd:a2:00:b4:7b:7a:03:
66:77:6b:18:4a:e3:93:58:9b:da:f7:ab:a1:8d:d2:
4b:f9:9f:b7:80:5a:63:58:21:95:3e:23:12:65:c6:
bc:d4:d2:ff:39:b5:55:28:4e:df:c8:1f:1d:42:85:
62:1f:46:69:8b:9d:ce:20:53:6a:f0:86:c3:4c:f2:
ab:ed:28:21:c8:63:93:67:93:77:9e:7d:fc:3c:17:
bd:08:b3:e8:af:37:df:ba:09:fb:a6:2a:02:b3:2b:
9d:31:0b:a6:93:64:8f:1e:de:ae:cd:3d:25:ed:b1:
50:4e:61:f2:55:ac:58:87:5f:cb:0a:ed:11:d9:1b:
b2:f1:e2:b0:9a:da:2c:88:82:fc:e4:83:7d:c6:49:
64:6e:b8:31:5e:ff:d1:e5:00:06:6b:9e:18:69:aa:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:0E:03:09:B3:09:91:C2:45:56:A0:82:52:63:93:B6:3D:78:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b67d6b42-6856-3f28-90d0-c22939a33056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:99:3e:cc:90:d8:3e:cc:60:d3:12:91:d9:f3:7c:89:c3:9a:
f3:49:c5:46:40:7c:80:a4:b1:bd:85:0e:0e:87:a6:bb:6b:c7:
f3:ea:26:9f:5f:dd:0b:5c:37:28:15:b7:db:fb:5c:11:c0:67:
e7:94:73:eb:8b:f8:5c:27:aa:89:3f:52:9b:1c:5c:14:ef:51:
dd:ad:1a:a5:d5:81:3e:c5:f6:15:19:b8:c1:2a:ac:dd:00:4a:
d8:0b:cb:b1:98:7b:6b:fb:84:58:77:5a:d6:2b:c0:b8:a8:af:
40:65:79:a9:fd:e2:8a:61:7f:76:e0:e7:47:10:e0:03:43:49:
04:a3:31:82:14:ba:e5:0d:45:59:ca:60:0e:73:f2:b5:a5:30:
65:96:a2:99:38:16:aa:c1:61:6c:7c:b6:aa:0a:b0:f0:45:d4:
ec:29:0a:e5:e4:07:82:2d:b9:f4:7a:68:62:b5:59:fa:ec:85:
f1:2c:c5:bb:ca:b2:18:89:23:ad:f8:72:01:49:6c:04:f5:62:
b5:c4:d4:3c:fe:f7:18:d6:8c:3b:74:8b:72:75:59:af:07:6d:
ed:b7:bc:35:79:c5:9e:85:a7:b8:4b:bc:47:33:7a:0b:57:6f:
3b:28:0c:ac:42:db:80:0c:54:34:fa:b1:c9:be:48:36:26:0e:
5b:cb:36:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEks16mzeRu4b6O9CQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI1MDMxMzE0MjM1NloXDTI1MDYxMTE0MjM1NlowLzEtMCsGA1UEAxMk
NTZmYTZlODQtOGRlNy00OWIwLWJmMTYtMWRmOWJlM2MxNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtapECWg7FpRyZCgYyJbv/5CSWoaDlyFgh0BS
Q6iAFh1RaDIVkchBrVtkHNIw0/SRN/ILSYZJU5yEXab8V5kt6eHXAn9MgIdoO2jP
WhHqCZ58U2AZ6dK+GSRoQnhumTY/u82iALR7egNmd2sYSuOTWJva96uhjdJL+Z+3
gFpjWCGVPiMSZca81NL/ObVVKE7fyB8dQoViH0Zpi53OIFNq8IbDTPKr7SghyGOT
Z5N3nn38PBe9CLPorzffugn7pioCsyudMQumk2SPHt6uzT0l7bFQTmHyVaxYh1/L
Cu0R2Ruy8eKwmtosiIL85IN9xklkbrgxXv/R5QAGa54Yaap1lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFrDgMJswmRwkVWoIJSY5O2PXhwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYjY3ZDZiNDItNjg1Ni0z
ZjI4LTkwZDAtYzIyOTM5YTMzMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByZPsyQ2D7MYNMSkdnzfInDmvNJxUZAfICksb2FDg6Hprtrx/PqJp9f
3QtcNygVt9v7XBHAZ+eUc+uL+Fwnqok/UpscXBTvUd2tGqXVgT7F9hUZuMEqrN0A
StgLy7GYe2v7hFh3WtYrwLior0Blean94ophf3bg50cQ4ANDSQSjMYIUuuUNRVnK
YA5z8rWlMGWWopk4FqrBYWx8tqoKsPBF1OwpCuXkB4ItufR6aGK1WfrshfEsxbvK
shiJI634cgFJbAT1YrXE1Dz+9xjWjDt0i3J1Wa8Hbe23vDV5xZ6Fp7hLvEczegtX
bzsoDKxC24AMVDT6scm+SDYmDlvLNtk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:16 2025 by rpki-client