Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/e7c6dcc3-91fe-3681-b954-8923a394610d.roa
File: e7c6dcc3-91fe-3681-b954-8923a394610d.roa (raw, json)
Hash identifier: vFenk5upZAXov7d2E4vjZ6N2VE3dXxhiihNaeEDqeOc=
Subject key identifier: AA:84:2B:75:61:3C:45:BF:C4:7A:E7:24:6F:83:42:0C:4A:65:33:80
Certificate issuer: /CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
Certificate serial: 010D0C9F432858493C09317C75AECE17D399A020
Authority key identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/e7c6dcc3-91fe-3681-b954-8923a394610d.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 195.85.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:31:7c:75:ae:ce:17:d3:99:a0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=9f861be3-776a-495f-8f51-970ae36b253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:23:85:a7:14:86:79:2c:89:61:98:46:41:
ab:11:69:d0:63:bb:09:0b:91:70:7a:bf:11:84:39:
c8:1d:5d:a5:40:12:f9:ea:6f:b0:0d:06:8d:77:cd:
d9:a9:62:bb:12:c6:8a:87:cb:6b:07:7b:02:64:ef:
e5:63:7c:44:6e:11:be:6c:dc:6f:1b:9a:2d:68:17:
63:2a:fe:c8:98:9c:68:9c:43:a6:11:a7:18:a6:f3:
dc:71:37:5b:7b:ae:ea:0a:81:4f:05:03:1c:a2:c0:
75:78:d9:58:8e:4d:9d:ba:f5:fb:f5:5d:46:dc:9f:
c1:02:36:06:28:83:73:d6:49:02:14:f3:5b:75:b2:
a5:96:78:10:a7:ba:8c:8c:dc:30:5b:cc:ac:16:96:
17:ab:bd:d1:bc:58:cf:5a:01:35:af:ad:dd:6e:7e:
6a:6b:6b:77:55:b5:81:cf:6f:dc:9f:a0:e7:ea:74:
df:e1:f3:2e:69:85:e5:70:9e:e0:f3:36:2e:a2:b3:
ad:78:3c:c7:a9:8f:ed:e2:8d:e6:11:33:54:7d:f7:
ab:bb:60:c3:3c:0a:ff:6f:b3:f8:37:cb:09:c5:19:
1f:e4:a3:a1:82:0a:32:e7:af:da:1e:f9:23:03:a1:
82:61:d7:19:25:5b:38:f5:6c:be:30:02:d3:8f:df:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:2B:75:61:3C:45:BF:C4:7A:E7:24:6F:83:42:0C:4A:65:33:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/e7c6dcc3-91fe-3681-b954-8923a394610d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl
X509v3 Authority Key Identifier:
keyid:45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:41:61:d6:92:24:2c:03:73:30:eb:94:00:3b:e2:fe:e1:3f:
ab:80:e6:2d:29:3b:ec:97:17:1a:dd:74:48:88:59:2e:50:a0:
1a:23:06:d8:8a:26:47:30:4b:b5:12:73:75:5f:1a:8f:24:e2:
0a:82:1d:6e:0b:43:51:f9:1f:8a:52:c9:bc:59:32:a2:d7:c0:
1f:a2:7a:4b:71:71:e4:9b:07:7a:c8:bf:33:17:94:40:18:02:
dd:ea:ff:c9:f3:54:59:58:b6:66:25:b4:89:45:2b:ac:e1:44:
d9:8f:13:cc:1a:74:ae:0e:3b:fe:0b:f5:d7:0d:7b:57:e7:af:
73:54:f3:9f:41:9d:da:fa:5c:d0:3b:bd:02:8a:77:00:ad:67:
66:30:7c:1f:c7:fb:7f:b2:47:d1:f0:46:eb:8d:be:9b:51:34:
f8:09:c7:a9:15:9c:d0:3c:37:1a:55:a8:17:bc:38:34:7a:e2:
73:d1:2b:c0:81:93:f4:f9:76:7a:6e:2c:57:dd:cd:f1:7e:0f:
bc:83:c4:34:b4:a7:06:79:73:58:a3:bf:23:61:90:1a:fd:85:
15:72:3d:9a:2a:58:98:9a:d7:4f:1d:c5:2a:67:56:e5:9a:fe:
61:fa:0b:b0:cd:c4:e7:0a:e5:d7:08:4f:2b:b5:05:95:02:c6:
74:f6:20:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTF8da7OF9OZoCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2ZmM1MzMtZjQ2Yy00NzRlLTk0ODAtNTZjM2IwZmIx
OTM4MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
OWY4NjFiZTMtNzc2YS00OTVmLThmNTEtOTcwYWUzNmIyNTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+gjhacUhnksiWGYRkGrEWnQY7sJC5Fwer8R
hDnIHV2lQBL56m+wDQaNd83ZqWK7EsaKh8trB3sCZO/lY3xEbhG+bNxvG5otaBdj
Kv7ImJxonEOmEacYpvPccTdbe67qCoFPBQMcosB1eNlYjk2duvX79V1G3J/BAjYG
KINz1kkCFPNbdbKllngQp7qMjNwwW8ysFpYXq73RvFjPWgE1r63dbn5qa2t3VbWB
z2/cn6Dn6nTf4fMuaYXlcJ7g8zYuorOteDzHqY/t4o3mETNUfferu2DDPAr/b7P4
N8sJxRkf5KOhggoy56/aHvkjA6GCYdcZJVs49Wy+MALTj9/KGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqEK3VhPEW/xHrnJG+DQgxKZTOAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYzZm
YzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMzYjBmYjE5MzgvZTdjNmRjYzMtOTFmZS0z
NjgxLWI5NTQtODkyM2EzOTQ2MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWM2ZmM1MzMtZjQ2Yy00NzRlLTk0
ODAtNTZjM2IwZmIxOTM4LzFjNmZjNTMzLWY0NmMtNDc0ZS05NDgwLTU2YzNiMGZi
MTkzOC5jcmwwHwYDVR0jBBgwFoAURUjG6PjtGRVJKl4s5b7+XhEuteUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xYzZmYzUzMy1mNDZjLTQ3NGUtOTQ4MC01NmMz
YjBmYjE5MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9BYdaSJCwDczDrlAA74v7hP6uA5i0pO+yXFxrddEiIWS5QoBojBtiK
JkcwS7USc3VfGo8k4gqCHW4LQ1H5H4pSybxZMqLXwB+iektxceSbB3rIvzMXlEAY
At3q/8nzVFlYtmYltIlFK6zhRNmPE8wadK4OO/4L9dcNe1fnr3NU859Bndr6XNA7
vQKKdwCtZ2YwfB/H+3+yR9HwRuuNvptRNPgJx6kVnNA8NxpVqBe8ODR64nPRK8CB
k/T5dnpuLFfdzfF+D7yDxDS0pwZ5c1ijvyNhkBr9hRVyPZoqWJia108dxSpnVuWa
/mH6C7DNxOcK5dcITyu1BZUCxnT2IPo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:38 2025 by rpki-client