Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
File: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (raw, json)
Hash identifier: XXE4+I+0eO42dmUC8ur6Hwk15/xsCA9ij1+QSsgHFOQ=
Subject key identifier: DE:28:4D:24:0D:D3:0D:3A:09:D7:9F:6A:B8:97:44:A7:D4:06:72:91
Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial: 010D0C9F4328584858A04F4755B9B6025E6FA780
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 36329
IP address blocks: 155.254.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:4f:47:55:b9:b6:02:5e:6f:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=571df46c-d1cc-4c29-9e18-f8251c36aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:f9:19:da:30:e4:18:3f:4c:b9:b5:ec:ff:
98:9f:db:9d:8f:10:ae:38:78:eb:c6:a6:38:16:e1:
0d:e1:9d:47:39:3c:5e:1c:ab:ef:41:ba:05:cd:e2:
5a:be:2b:e9:46:af:ce:e4:92:a6:cf:a0:37:5d:fc:
4b:70:92:5e:5a:2e:99:d2:e1:6a:f0:8a:75:96:ec:
68:a0:31:65:87:37:2d:89:db:51:4a:9b:26:41:d7:
bd:84:e5:7b:ac:66:03:8a:29:b4:35:93:76:37:8b:
b1:5f:20:5a:88:8d:0c:56:9a:7d:8c:2e:a1:e9:04:
11:19:2d:8c:a4:f3:70:a5:9b:7b:f2:40:30:fa:e2:
d6:38:69:52:0a:8a:d5:7f:e3:cb:96:c1:76:e2:d0:
09:04:ff:d5:44:81:47:8c:08:63:98:68:49:0c:d4:
49:a6:c0:be:37:51:fe:30:3c:a1:e0:34:c2:c8:cf:
4f:6e:6e:a3:4a:ac:f0:8c:ca:fe:24:a0:1d:43:47:
23:12:a8:c1:c3:f7:68:97:c1:2d:92:47:fe:29:cc:
eb:4e:57:f7:e3:58:e6:17:94:ce:eb:33:ff:d8:23:
f8:d1:a0:98:b5:32:8d:85:70:1d:cd:2a:e8:ee:a9:
d4:08:41:c6:15:95:04:de:3e:d6:e2:e2:b9:c6:21:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:4D:24:0D:D3:0D:3A:09:D7:9F:6A:B8:97:44:A7:D4:06:72:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
X509v3 Authority Key Identifier:
keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
sbgp-ipAddrBlock: critical
IPv4:
155.254.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:50:ff:4a:53:e5:1d:96:2e:65:71:8d:e4:10:83:a4:9b:0a:
86:4a:58:21:c2:31:1a:50:f1:64:e7:0e:10:a1:dc:92:d3:08:
51:ad:7b:1a:dc:6d:c9:e9:26:a5:56:62:68:bb:c0:5b:d0:1b:
10:34:85:67:55:ba:8d:2a:b9:d9:90:55:b2:6b:ee:e6:48:1f:
e4:36:d3:5c:b0:60:31:89:ff:a0:aa:fc:57:91:34:fb:90:82:
34:15:87:00:60:c7:6e:a8:e6:4b:91:ff:0c:90:65:8f:61:f5:
ac:78:77:16:23:07:a1:a5:a9:62:dc:d1:f0:6d:cf:c3:aa:b6:
f7:72:8b:6c:26:36:04:ff:68:a6:7e:36:0c:94:d4:58:1e:0b:
ed:3f:22:e2:30:c9:ac:07:6b:f3:eb:80:73:ee:41:6a:ea:f3:
27:64:02:88:87:54:b2:37:27:6d:69:e5:41:b4:d8:d5:53:16:
20:07:49:b6:c0:f5:52:1e:7a:1e:dc:40:60:b5:b7:58:97:28:
6e:4f:85:87:87:db:90:be:93:b1:34:2f:c0:62:66:20:4b:3e:
90:76:85:bb:31:2e:b5:85:0b:f0:d9:d0:76:b7:c5:0e:8c:a5:
80:09:b1:81:d5:5e:11:2a:8f:b7:b8:cd:d6:88:3d:26:55:0b:
14:33:9c:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoE9HVbm2Al5vp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0
OTQwMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
NTcxZGY0NmMtZDFjYy00YzI5LTllMTgtZjgyNTFjMzZhYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkez5Gdow5Bg/TLm17P+Yn9udjxCuOHjrxqY4
FuEN4Z1HOTxeHKvvQboFzeJavivpRq/O5JKmz6A3XfxLcJJeWi6Z0uFq8Ip1luxo
oDFlhzctidtRSpsmQde9hOV7rGYDiim0NZN2N4uxXyBaiI0MVpp9jC6h6QQRGS2M
pPNwpZt78kAw+uLWOGlSCorVf+PLlsF24tAJBP/VRIFHjAhjmGhJDNRJpsC+N1H+
MDyh4DTCyM9Pbm6jSqzwjMr+JKAdQ0cjEqjBw/dol8Etkkf+KczrTlf341jmF5TO
6zP/2CP40aCYtTKNhXAdzSro7qnUCEHGFZUE3j7W4uK5xiEDvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4oTSQN0w06CdefariXRKfUBnKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy
OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvOTVkZDUyNDItM2I1Yy0z
NzZmLTgxZDUtOGVkZTFjMjI3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0
ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1
NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0
ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5Q/0pT5R2WLmVxjeQQg6SbCoZKWCHCMRpQ8WTnDhCh3JLTCFGtexrc
bcnpJqVWYmi7wFvQGxA0hWdVuo0qudmQVbJr7uZIH+Q201ywYDGJ/6Cq/FeRNPuQ
gjQVhwBgx26o5kuR/wyQZY9h9ax4dxYjB6GlqWLc0fBtz8Oqtvdyi2wmNgT/aKZ+
NgyU1FgeC+0/IuIwyawHa/PrgHPuQWrq8ydkAoiHVLI3J21p5UG02NVTFiAHSbbA
9VIeeh7cQGC1t1iXKG5PhYeH25C+k7E0L8BiZiBLPpB2hbsxLrWFC/DZ0Ha3xQ6M
pYAJsYHVXhEqj7e4zdaIPSZVCxQznDE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:11 2025 by rpki-client