Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa
File: 64fdcd71-4528-3a43-9865-7e6dc9f08599.roa (raw, json)
Hash identifier: QNKfKHQyMtsNkL9WO79vV7lUocL59N0FgpGtZPQcWXU=
Subject key identifier: 95:72:C1:85:81:3E:3D:18:FE:89:A1:ED:0A:2A:2B:ED:EE:9B:46:7F
Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial: 010D0C9F432858494F93EBE51B177639C5997B40
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa
Signing time: Wed 26 Mar 2025 01:00:40 +0000
ROA not before: Wed 26 Mar 2025 01:00:40 +0000
ROA not after: Tue 24 Jun 2025 01:00:40 +0000
asID: 398465
IP address blocks: 95.143.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:93:eb:e5:1b:17:76:39:c5:99:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Validity
Not Before: Mar 26 01:00:40 2025 GMT
Not After : Jun 24 01:00:40 2025 GMT
Subject: CN=3ccbdad7-eb18-4b45-868e-3fbfa06a0dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:21:ba:bb:c5:76:1e:4f:b1:ae:9c:92:e3:
cb:85:78:44:ab:ff:bd:03:37:03:af:4f:8d:14:e0:
cb:86:f0:8f:34:80:b7:c9:8b:13:ed:81:d5:59:85:
53:58:bf:23:08:d5:c4:a9:f5:15:09:29:e5:c4:e3:
dd:4e:b3:10:a3:20:3b:35:c9:2f:bd:21:38:91:63:
88:92:e8:7e:89:d0:df:3d:39:0f:de:6b:d1:95:09:
ac:15:01:3c:00:4c:84:fe:8c:76:96:a2:33:53:51:
bf:33:cb:5e:42:e7:66:6e:58:22:79:69:2a:11:7a:
29:19:1b:67:60:f2:15:fb:ac:f5:b9:23:2c:2e:45:
9b:6c:6a:3b:0f:9c:28:b3:e8:ae:44:f4:53:cd:23:
0b:d0:a8:47:be:e6:d9:88:1e:2c:07:e0:31:c2:79:
1e:8c:c1:45:1a:d8:b4:c9:4b:fe:7d:c9:17:25:1a:
90:7a:28:e8:b8:84:b3:86:45:8c:1c:1f:19:2c:88:
3f:df:1e:7c:2f:d2:62:f6:f3:74:f2:74:1f:51:77:
94:bd:24:f6:24:94:73:72:66:25:5c:c3:84:e5:25:
1b:5e:60:2d:4b:1b:cd:cc:eb:8c:02:d2:d9:31:ad:
53:cf:60:62:88:3a:66:bb:96:fc:72:43:fc:1f:9a:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:C1:85:81:3E:3D:18:FE:89:A1:ED:0A:2A:2B:ED:EE:9B:46:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/64fdcd71-4528-3a43-9865-7e6dc9f08599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
X509v3 Authority Key Identifier:
keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
sbgp-ipAddrBlock: critical
IPv4:
95.143.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:8a:d7:22:6f:d7:21:1b:de:16:cf:64:eb:ed:89:18:37:a8:
73:fb:c7:2d:54:6b:7a:bb:41:cc:cf:5d:df:13:c6:97:99:cb:
f0:69:86:dc:95:c1:36:db:0c:24:39:22:f0:ce:00:95:43:f2:
62:14:9d:02:52:05:c3:35:8b:c5:79:34:65:7e:7f:35:0b:81:
35:21:db:2c:87:07:38:35:c9:9b:e5:35:97:2c:21:82:8a:e0:
b7:2e:c0:d0:98:05:12:bf:2b:a6:45:b4:bb:6d:e7:e0:de:02:
fd:ff:5d:60:bf:ef:18:57:4c:1a:44:4c:31:f4:54:42:e1:5d:
dc:78:c4:9c:c7:3b:a8:34:2b:4d:59:07:24:87:e2:1c:77:dd:
92:7e:f4:e2:61:d0:a6:08:bc:f3:8b:9f:87:3f:aa:26:16:d0:
63:3e:ad:48:af:fe:43:14:f1:a1:74:15:e4:84:f9:de:8f:62:
a0:1c:de:66:6a:ca:18:4e:a8:50:23:d4:4c:51:8a:15:13:42:
3f:4d:ef:f4:01:f4:a6:74:22:89:15:50:c8:b6:69:57:ea:ba:
52:eb:aa:9b:5f:8f:2a:c0:c3:48:78:81:66:c8:2e:55:f2:79:
c1:90:87:b6:d6:e5:b0:a3:10:2e:b3:0a:dc:9c:74:3c:89:c1:
93:c8:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:47 2025 by rpki-client