Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa
File: def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json)
Hash identifier: fsWb+sUowvIDUr/jTcUc8iZHLNCIVn5ippbE+5ZgZls=
Subject key identifier: 96:14:91:7A:B1:C3:62:AF:74:3E:1D:7A:C8:7B:3E:4A:D0:38:3B:BA
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F432858481F65212F0C2DFE6B49C76900
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 143.220.144.0/23 maxlen: 23
143.220.146.0/23 maxlen: 23
143.220.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:21:2f:0c:2d:fe:6b:49:c7:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=c33ac91b-b328-40e0-b340-b048cf974fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:19:76:90:13:8e:78:40:75:d0:e2:25:7e:
1d:3f:fa:bb:71:56:36:d2:3c:31:e2:4f:c1:68:b8:
4d:84:29:20:38:f9:6f:f8:8a:c7:b3:ce:e2:b9:d9:
e6:52:93:5b:51:d3:07:6d:a1:ca:bb:62:60:b4:89:
a2:d3:de:8f:d7:ea:f0:6e:41:28:80:b3:5a:43:a2:
b1:48:19:86:ef:63:e2:45:42:a3:02:36:12:63:72:
8d:c0:17:fe:a5:ae:59:1e:22:16:35:aa:9b:be:9b:
73:f1:5d:a0:cb:d1:1a:74:3f:e3:b0:07:1a:d8:31:
54:d9:ae:97:da:f8:ee:3a:3f:c3:83:75:2f:7e:07:
8a:bc:51:0d:d1:71:5d:cd:b0:2d:32:68:2a:d4:91:
c1:a3:c8:08:43:70:eb:08:ee:ac:23:e4:88:de:21:
59:d0:c2:06:81:3d:a2:c8:d2:7c:6c:6e:8c:e3:5f:
12:03:e7:68:03:eb:ab:0f:b9:3f:d4:23:4b:85:7a:
15:26:4d:a4:67:04:f1:ac:7b:c5:4e:2e:ff:03:dd:
45:72:9f:3d:5d:27:56:5c:08:ae:5e:c9:bd:ea:40:
c2:ff:c6:72:7d:b7:ff:67:6a:44:ef:b2:85:82:5e:
ce:93:96:80:42:b8:f6:bb:b3:c7:59:12:74:c2:0b:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:91:7A:B1:C3:62:AF:74:3E:1D:7A:C8:7B:3E:4A:D0:38:3B:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.144.0-143.220.149.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:33:eb:6e:47:fc:d5:28:94:b3:2b:64:dd:ae:68:ff:ef:40:
31:07:fe:5b:d3:d5:9d:3b:20:59:c6:b4:4e:d1:ff:f2:61:7e:
07:09:8f:43:15:36:2b:a9:f0:e5:76:c3:42:d6:40:5d:f3:9c:
2a:eb:77:63:c1:33:4f:19:83:fe:ac:65:b7:3b:95:ba:36:5e:
af:6c:d2:76:09:16:ef:5d:9a:29:c6:28:6e:7c:1a:87:1f:89:
83:bd:43:84:ee:52:e5:3c:3f:b0:e3:95:9c:32:8b:96:4d:57:
20:a3:1f:8f:c7:aa:a4:65:5e:88:25:81:75:51:74:62:f1:35:
a1:f9:61:89:94:ff:27:27:62:f2:3c:17:44:e6:dd:30:74:ef:
1a:b9:70:33:65:f7:d3:24:d7:4c:0c:e6:1d:50:24:41:af:47:
19:8a:a7:08:8c:8f:38:29:ec:c0:27:1a:ec:fc:81:23:94:57:
1a:5d:c8:ab:42:af:9e:de:14:6a:26:ef:26:df:f2:ad:46:19:
83:71:82:9c:c4:ee:ae:ff:2b:1d:0b:84:f7:e0:83:a3:f5:5d:
28:9b:40:4e:b1:09:22:aa:ea:05:e6:8e:ce:ec:ce:6b:19:c9:
6b:aa:e2:5a:e9:5f:62:18:ac:ae:7c:98:1e:b6:b5:66:38:44:
0e:83:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:05 2025 by rpki-client