Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa
File: c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa (raw, json)
Hash identifier: DGgV1PPwq5g6g0oj5FHFfN1C36ZQThy1u0+peZLsm0o=
Subject key identifier: 06:65:C9:5A:32:95:BB:2A:4E:20:0B:C7:DC:37:92:DB:AD:30:50:1C
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F43285848467ABB220DCCFD8380355900
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 398156
IP address blocks: 168.220.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bb:22:0d:cc:fd:83:80:35:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=7c4f3502-bab6-4e28-884f-7d5f852d278a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:8f:62:56:3c:0b:37:fb:d9:33:1c:94:85:
a8:6a:83:f4:cc:99:f1:5a:2c:9e:19:fc:f3:f4:1d:
5c:2a:06:ad:96:2e:d8:cb:8a:6e:47:f6:c1:c3:2d:
e3:95:5a:bc:4e:90:77:0e:ec:83:9f:ae:3d:21:d5:
90:a4:d3:8d:b7:7a:66:59:ae:d5:36:c8:ae:a2:a3:
75:06:85:7e:91:36:b2:4c:b6:7c:a9:72:bc:a5:81:
29:12:e2:bc:3a:36:67:b3:a7:5d:7a:4c:2d:b9:07:
4a:bb:09:c1:14:b8:b0:9d:32:f6:9f:a7:eb:8c:3c:
e6:60:8f:fa:95:ae:bb:ea:be:9c:38:2e:8e:74:ce:
22:56:a1:d6:b2:88:e5:c8:94:4d:df:6e:76:37:55:
ba:f1:c2:3c:8b:54:9c:6f:db:2a:d3:f3:b4:eb:1e:
77:b1:b6:92:63:d7:c5:d4:73:68:46:03:47:41:9c:
8e:f7:a6:c5:3e:e0:50:f8:02:dc:f7:32:42:dc:76:
66:a2:6d:60:ce:01:08:3c:40:e1:2a:c2:5d:35:ca:
ca:13:2d:dd:be:cf:11:01:6a:b6:b3:4d:53:2e:49:
b3:4f:62:5f:67:76:9c:3b:38:3f:f6:c6:07:6b:3b:
8c:e1:d7:7c:84:6c:23:81:e1:f9:48:cc:06:db:a6:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:C9:5A:32:95:BB:2A:4E:20:0B:C7:DC:37:92:DB:AD:30:50:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/c8d7ee04-54e1-3ea2-af83-c20af5272bfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:e1:e2:d9:75:b6:6d:4f:5f:13:5c:c9:4a:dd:31:4a:90:47:
6a:d5:8a:d4:4a:c4:63:17:d1:65:4a:8a:48:9e:00:e5:97:de:
df:c9:62:4b:54:f9:aa:e9:2a:4e:85:31:04:5a:05:06:05:5c:
22:82:12:be:07:15:78:ec:14:f5:c7:cd:49:a2:4a:e4:21:9a:
0d:23:7a:50:87:17:c6:11:0c:ca:51:a5:90:28:00:bd:3a:67:
9a:4d:03:a1:41:4a:38:45:e0:eb:c2:4a:fb:dc:86:64:de:f9:
e7:e2:e6:72:1d:5c:9b:8a:de:0f:a7:03:41:34:f1:b0:4f:cb:
ee:98:0e:b6:64:53:d8:07:99:36:63:c4:88:58:62:34:1a:d7:
5a:a8:e9:3a:80:79:2f:ae:0d:b7:0c:a2:59:29:65:59:96:4d:
19:47:fd:ba:49:d0:96:17:fb:8d:10:5e:00:fb:ff:f1:e3:ea:
92:d2:7c:0e:82:27:4d:1e:cb:d3:8c:51:f2:e6:b1:0d:41:53:
52:34:b6:39:54:02:1b:d4:fb:50:89:4d:6c:12:bf:85:6c:22:
2f:ec:e1:ba:0f:cf:8e:a4:36:a3:be:27:0c:a0:40:66:c5:78:
a4:e8:2f:b9:d0:97:e9:25:53:32:91:80:d8:a5:c7:0c:9b:77:
2d:8d:a5:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGersiDcz9g4A1WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
N2M0ZjM1MDItYmFiNi00ZTI4LTg4NGYtN2Q1Zjg1MmQyNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2CPYlY8Czf72TMclIWoaoP0zJnxWiyeGfzz
9B1cKgatli7Yy4puR/bBwy3jlVq8TpB3DuyDn649IdWQpNONt3pmWa7VNsiuoqN1
BoV+kTayTLZ8qXK8pYEpEuK8OjZns6ddekwtuQdKuwnBFLiwnTL2n6frjDzmYI/6
la676r6cOC6OdM4iVqHWsojlyJRN3252N1W68cI8i1Scb9sq0/O06x53sbaSY9fF
1HNoRgNHQZyO96bFPuBQ+ALc9zJC3HZmom1gzgEIPEDhKsJdNcrKEy3dvs8RAWq2
s01TLkmzT2JfZ3acOzg/9sYHazuM4dd8hGwjgeH5SMwG26aNIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZlyVoylbsqTiALx9w3ktutMFAcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYzhkN2VlMDQtNTRlMS0z
ZWEyLWFmODMtYzIwYWY1MjcyYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDh4tl1tm1PXxNcyUrdMUqQR2rVitRKxGMX0WVKikieAOWX3t/JYktU
+arpKk6FMQRaBQYFXCKCEr4HFXjsFPXHzUmiSuQhmg0jelCHF8YRDMpRpZAoAL06
Z5pNA6FBSjhF4OvCSvvchmTe+efi5nIdXJuK3g+nA0E08bBPy+6YDrZkU9gHmTZj
xIhYYjQa11qo6TqAeS+uDbcMolkpZVmWTRlH/bpJ0JYX+40QXgD7//Hj6pLSfA6C
J00ey9OMUfLmsQ1BU1I0tjlUAhvU+1CJTWwSv4VsIi/s4boPz46kNqO+JwygQGbF
eKToL7nQl+klUzKRgNilxwybdy2Npd4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:00 2025 by rpki-client