Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
File: 6b98da56-6d05-3af9-8826-f7a70da179a0.roa (raw, json)
Hash identifier: CwLvHL0HHau2lGNO0x67AJxAMw0/nbsnMTw4F2UHum8=
Subject key identifier: 0E:E3:A9:92:75:02:CD:70:65:99:AD:F9:C0:13:51:11:2F:BA:D2:C7
Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial: 010D0C9F43285848E2D11B7DAFB5C0C98A419980
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 195.85.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:1b:7d:af:b5:c0:c9:8a:41:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=11d1083d-d4a5-4478-8cd1-c99b7cae1d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:b3:e2:9f:f6:45:83:d2:bc:4c:69:eb:3c:
88:6d:19:24:16:98:a6:55:82:a3:08:43:b5:08:eb:
0b:18:91:1d:66:98:07:30:e2:20:8f:b4:e9:d2:8e:
2e:65:80:e8:f2:30:54:4d:b9:e6:97:dd:f3:0f:06:
b2:a0:a8:38:34:e0:12:09:77:bb:0e:23:c7:22:e9:
39:61:18:d1:43:f3:7d:98:c2:b1:fb:2a:a7:a0:02:
d2:32:29:e1:e4:50:64:18:f4:05:4d:2d:a7:56:5b:
ac:c7:83:89:52:99:e1:69:48:d8:31:d0:b5:eb:fb:
ab:73:2b:88:80:68:bb:e3:fc:b6:d7:19:53:d8:66:
be:db:7f:97:96:b8:56:52:d4:cf:d4:d1:d3:35:f2:
5f:ac:5d:96:9b:08:c9:dd:c1:ad:cb:f4:f7:1b:b8:
11:90:12:5b:fa:72:b6:82:d4:27:0e:d1:55:88:b4:
b2:2d:6f:b3:d3:fa:fa:16:3d:dc:e0:94:e1:a6:01:
cb:00:03:b7:d5:da:5d:2d:0e:f0:a0:91:f8:57:bb:
bb:46:64:83:0c:b6:48:b7:7a:3b:a8:e0:e3:b3:a0:
db:be:d3:b5:13:ee:07:7c:e5:3e:e5:36:30:7d:dd:
dd:b7:cc:25:86:89:7f:b2:f5:90:61:e0:d8:2f:92:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:A9:92:75:02:CD:70:65:99:AD:F9:C0:13:51:11:2F:BA:D2:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
X509v3 Authority Key Identifier:
keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:54:14:6f:4c:23:84:51:14:b3:ef:1f:e0:b6:17:b6:48:cd:
57:b5:70:03:b0:90:d0:e9:e8:e3:67:9b:26:d6:1d:fd:84:18:
41:85:a1:b6:8d:d9:e3:fe:40:30:ee:57:ea:cb:06:04:2a:bf:
28:50:50:e7:64:3c:4f:8c:0d:2d:fa:fb:89:ee:41:22:e6:71:
37:6b:2c:f9:1f:c4:22:90:f3:88:0c:95:31:50:23:7a:6f:c6:
ca:94:e7:ea:31:f3:9a:da:cb:66:2c:8d:37:e2:6e:52:33:81:
6a:0c:76:09:bd:e0:4f:c7:ce:7c:d5:8e:00:b7:d4:38:e8:5d:
69:90:c0:bc:82:e3:e0:b5:c2:b3:5e:9c:e4:6b:42:c7:05:5e:
9c:bf:3d:8e:fc:b7:d8:79:ca:2e:9b:82:9e:ed:2f:0b:07:32:
5b:4f:81:f7:c3:fb:83:4f:04:29:86:42:39:f3:c8:d9:49:b4:
99:63:85:6e:24:22:38:8b:46:e8:2d:1e:75:48:8b:d0:b9:a6:
86:23:8d:e4:72:d9:7b:de:d2:f8:2f:5d:ff:d7:14:67:36:3d:
ff:e3:cc:08:b5:b9:c3:e4:bb:db:75:d5:ab:4b:cc:90:bf:5d:
28:63:ef:bf:27:29:55:df:2f:af:c7:00:6d:f2:c3:eb:d5:ba:
9b:9c:ea:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Rt9r7XAyYpBmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFh
MjU4MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MTFkMTA4M2QtZDRhNS00NDc4LThjZDEtYzk5YjdjYWUxZDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3+z4p/2RYPSvExp6zyIbRkkFpimVYKjCEO1
COsLGJEdZpgHMOIgj7Tp0o4uZYDo8jBUTbnml93zDwayoKg4NOASCXe7DiPHIuk5
YRjRQ/N9mMKx+yqnoALSMinh5FBkGPQFTS2nVlusx4OJUpnhaUjYMdC16/urcyuI
gGi74/y21xlT2Ga+23+XlrhWUtTP1NHTNfJfrF2WmwjJ3cGty/T3G7gRkBJb+nK2
gtQnDtFViLSyLW+z0/r6Fj3c4JThpgHLAAO31dpdLQ7woJH4V7u7RmSDDLZIt3o7
qODjs6DbvtO1E+4HfOU+5TYwfd3dt8wlhol/svWQYeDYL5LuWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7jqZJ1As1wZZmt+cATUREvutLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5
ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvNmI5OGRhNTYtNmQwNS0z
YWY5LTg4MjYtZjdhNzBkYTE3OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2YyOWVlN2UtZWExMi00MGU1LWE2
OGUtM2QwMDJjNmFhMjU4L2NmMjllZTdlLWVhMTItNDBlNS1hNjhlLTNkMDAyYzZh
YTI1OC5jcmwwHwYDVR0jBBgwFoAUnjVyGUrjpjOocfCJHCgFY27TmmkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAw
MmM2YWEyNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1UkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpUFG9MI4RRFLPvH+C2F7ZIzVe1cAOwkNDp6ONnmybWHf2EGEGFobaN
2eP+QDDuV+rLBgQqvyhQUOdkPE+MDS36+4nuQSLmcTdrLPkfxCKQ84gMlTFQI3pv
xsqU5+ox85ray2YsjTfiblIzgWoMdgm94E/HznzVjgC31DjoXWmQwLyC4+C1wrNe
nORrQscFXpy/PY78t9h5yi6bgp7tLwsHMltPgffD+4NPBCmGQjnzyNlJtJljhW4k
IjiLRugtHnVIi9C5poYjjeRy2Xve0vgvXf/XFGc2Pf/jzAi1ucPku9t11atLzJC/
XShj778nKVXfL6/HAG3yw+vVupuc6nY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:58 2025 by rpki-client