Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File: 2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier: FJ96Aj7nPmwzBdzUpiSM8NEoHcqsEB+IfSM+ZUWP/Fc=
Subject key identifier: 48:17:A2:D9:8C:14:D7:40:62:D4:1B:3C:69:EE:CF:57:17:E9:E2:75
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F432858481F6521417F3A5D700BA33200
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 143.220.144.0/23 maxlen: 23
143.220.146.0/23 maxlen: 23
143.220.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:21:41:7f:3a:5d:70:0b:a3:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=3b426cb0-e0eb-4c87-8ce4-b66f593138ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:84:ec:07:8f:69:8a:18:d3:a8:0b:bd:96:
ad:3d:3a:0c:2d:d6:f8:36:ca:90:ef:14:63:f6:a1:
be:5d:60:ce:38:e5:85:6a:10:f0:a1:09:63:35:4f:
f8:07:41:c2:13:b8:1e:54:f6:43:14:52:1f:ab:02:
a4:8a:f7:3a:1c:f6:00:69:7c:99:37:5e:d1:9c:9e:
6e:79:93:47:b4:3d:a8:80:c0:51:54:4c:0f:8e:54:
1f:57:60:64:30:20:89:0e:97:1a:f2:86:ad:38:d7:
ac:a8:e8:cb:85:68:64:01:5f:6d:5a:35:c9:53:12:
54:f9:fc:89:99:ea:e7:f5:9c:cb:87:23:65:ac:03:
f7:7c:13:b9:08:c1:e3:cc:23:a8:10:d2:e9:7d:68:
9d:35:26:2f:48:66:cf:60:c7:46:68:4b:05:ba:09:
78:2c:dd:ad:12:ba:4e:b8:5c:bf:c3:ad:54:d9:ec:
06:c7:cd:ba:23:9d:33:5a:35:87:b0:7d:cb:c6:fa:
3a:36:c2:34:45:87:4a:a4:0c:17:cd:9e:4f:87:3b:
fa:d4:58:67:47:02:c3:5c:f3:81:50:d2:d3:b2:e5:
a6:87:f1:00:a6:33:a0:ba:0c:1f:11:35:3e:f8:5a:
b7:e9:e5:6d:9b:de:89:c0:e9:6c:b9:ce:c4:1c:90:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:17:A2:D9:8C:14:D7:40:62:D4:1B:3C:69:EE:CF:57:17:E9:E2:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.144.0-143.220.149.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:32:52:a7:85:9a:87:19:49:41:c1:da:ea:74:9a:3a:5a:61:
6a:ce:92:09:d4:74:6c:48:83:1e:b9:54:54:16:c1:1d:26:a9:
2e:6c:00:fe:a3:a6:e5:5e:f1:2e:6f:42:a4:b5:33:0b:56:35:
80:a4:82:f1:1d:e3:85:3b:cf:da:f6:d2:ee:01:be:d6:c0:5e:
f0:08:bb:65:94:3c:67:ba:49:de:8f:9c:1f:d4:e4:19:1a:34:
88:99:3f:58:39:af:63:f5:60:8f:46:40:1c:12:44:32:79:27:
1f:8a:3e:cd:78:e0:97:c0:f0:6b:29:2a:f0:bc:74:61:c4:99:
2e:c8:33:2e:07:81:e7:33:3f:b5:03:54:eb:e4:4c:f5:c5:43:
92:a6:a8:03:07:60:6c:d4:4f:40:fa:0a:68:1b:6b:ca:11:d5:
85:9e:11:45:a0:b2:4c:de:f0:0b:6d:71:fd:28:c6:31:65:2f:
16:3c:29:e9:26:24:7d:6a:97:98:81:c8:2f:9d:ad:ed:08:79:
fb:a6:25:d9:ce:1f:75:12:d8:21:d9:48:74:bb:2e:90:d0:f4:
b9:05:5b:99:ed:a2:75:22:4d:37:ce:a1:bc:bb:67:8b:81:54:
de:29:f7:ba:ee:c3:18:8d:5f:3f:75:b4:ae:69:9e:4b:04:e3:
16:23:8c:1f
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgfZSFBfzpdcAujMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3
ODliMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
M2I0MjZjYjAtZTBlYi00Yzg3LThjZTQtYjY2ZjU5MzEzOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcCE7AePaYoY06gLvZatPToMLdb4NsqQ7xRj
9qG+XWDOOOWFahDwoQljNU/4B0HCE7geVPZDFFIfqwKkivc6HPYAaXyZN17RnJ5u
eZNHtD2ogMBRVEwPjlQfV2BkMCCJDpca8oatONesqOjLhWhkAV9tWjXJUxJU+fyJ
mern9ZzLhyNlrAP3fBO5CMHjzCOoENLpfWidNSYvSGbPYMdGaEsFugl4LN2tErpO
uFy/w61U2ewGx826I50zWjWHsH3Lxvo6NsI0RYdKpAwXzZ5Phzv61FhnRwLDXPOB
UNLTsuWmh/EApjOgugwfETU++Fq36eVtm96JwOlsuc7EHJBm/wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEgXotmMFNdAYtQbPGnuz1cX6eJ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj
MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvMmM4OTk3NTYtYWQxZi0z
NzM0LTk3N2MtNjVlYWVmMmJiYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw
Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy
Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex
ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD
BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAaDJSp4WahxlJQcHa6nSaOlphas6SCdR0bEiDHrlUVBbB
HSapLmwA/qOm5V7xLm9CpLUzC1Y1gKSC8R3jhTvP2vbS7gG+1sBe8Ai7ZZQ8Z7pJ
3o+cH9TkGRo0iJk/WDmvY/Vgj0ZAHBJEMnknH4o+zXjgl8Dwaykq8Lx0YcSZLsgz
LgeB5zM/tQNU6+RM9cVDkqaoAwdgbNRPQPoKaBtryhHVhZ4RRaCyTN7wC21x/SjG
MWUvFjwp6SYkfWqXmIHIL52t7Qh5+6Yl2c4fdRLYIdlIdLsukND0uQVbme2idSJN
N86hvLtni4FU3in3uu7DGI1fP3W0rmmeSwTjFiOMHw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:21 2025 by rpki-client