Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
File: 3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa (raw, json)
Hash identifier: XvAysJZ6Sbf37goeQ3dJ5yGP1LLkEDYeQ1Yx9yNVEio=
Subject key identifier: F7:6C:B2:EF:B2:53:9C:0C:5C:B6:3B:C6:E0:E6:DA:94:99:2C:97:C1
Certificate issuer: /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial: 010D0C9F432858486695B80B9C1F3CA99F66E300
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 143.116.78.0/23 maxlen: 23
143.116.78.0/24 maxlen: 24
143.116.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b8:0b:9c:1f:3c:a9:9f:66:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=d117af3a-e907-41d0-8ab3-115a31dae9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:5e:07:27:e4:e3:c8:12:d5:2f:f5:69:82:
e8:75:7a:35:dd:9e:5c:a5:62:83:04:02:9c:63:76:
91:65:8a:c8:6b:c3:7d:40:7d:4b:2d:e2:08:32:45:
1b:b3:90:ab:46:4e:23:02:ab:a8:3d:d6:77:75:ad:
7f:39:4c:d6:e1:d0:91:1e:4f:02:37:3e:c2:85:75:
63:dc:66:68:84:31:3a:d4:14:0c:90:96:0a:d8:23:
5a:74:5d:d1:f5:62:57:1b:c6:c3:98:c8:5e:ed:98:
c1:a1:c3:22:77:b3:e2:b3:b6:48:e7:64:7c:6e:07:
08:73:7f:d8:a9:75:86:80:47:7f:18:f2:4d:da:6c:
53:f8:f5:ac:d6:7c:e3:ce:63:09:75:ac:71:ea:59:
31:da:22:47:1a:da:92:d4:df:5b:47:43:8f:2a:e5:
3c:c8:46:79:45:e4:ab:73:61:7a:07:6f:fb:7f:f9:
e1:c2:6b:61:4d:48:48:8d:46:62:f2:d9:6b:56:a8:
26:26:97:0e:9b:6a:90:d4:9b:57:ba:c5:65:a4:d1:
a9:cd:c2:8c:c7:2b:30:75:05:32:ec:94:7d:ab:a4:
3e:17:3d:3a:c7:6f:0b:22:69:25:3b:90:1b:d0:1b:
f2:3c:87:a5:44:f6:13:46:9f:43:ff:28:b1:b6:98:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:B2:EF:B2:53:9C:0C:5C:B6:3B:C6:E0:E6:DA:94:99:2C:97:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/3864b364-0fd7-3c0a-a91a-8f5d234767a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
X509v3 Authority Key Identifier:
keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
sbgp-ipAddrBlock: critical
IPv4:
143.116.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f8:da:78:4a:f9:56:68:f0:2c:0f:e5:49:a9:cc:85:05:82:
9f:66:59:2a:40:1a:78:3e:aa:c4:9d:70:3c:cd:e8:30:c1:7c:
d9:57:20:0b:ee:52:fb:10:7e:37:21:6e:d7:dc:64:c5:36:ce:
0b:6e:37:49:07:2b:ab:28:97:e8:42:ab:ae:79:fb:24:40:a9:
bf:4b:ed:67:34:e4:c5:2e:32:5e:9b:8f:1c:60:19:e3:67:97:
6e:b6:01:4f:76:d2:a0:b8:06:ca:74:72:f5:c0:ff:2a:a6:3b:
6d:ec:51:a6:f8:69:e1:e2:1a:f5:65:fa:d2:e2:20:8f:bc:75:
94:20:c8:62:e1:e8:64:6f:89:23:63:e5:6d:27:01:4c:f5:eb:
8e:0b:85:a1:60:9c:cd:3e:e8:53:87:46:39:fd:64:f1:60:9c:
40:fc:a2:bd:0d:29:7c:d6:8f:fd:50:4d:a9:78:2e:a0:ec:e6:
f9:10:a0:7d:cf:9a:b2:3f:c9:6b:67:90:00:5c:07:8a:7e:f4:
d7:ec:7a:a0:63:30:30:ce:d6:ca:de:19:ad:79:8c:f6:0c:f1:
4f:89:18:f3:45:cd:ba:32:af:36:4b:69:63:07:9b:63:1e:54:
f7:d0:fb:16:31:54:ad:86:13:7f:e2:4a:f1:39:5b:1d:92:e7:
ba:09:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:47 2025 by rpki-client