Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
File: 09e21013-7b4b-34c1-82cf-d3a46658b996.roa (raw, json)
Hash identifier: zp/yJkf8+/QzdAsqpdXOY7VBSSKykpJHqOriLcYfYxE=
Subject key identifier: 45:D2:AA:F8:8C:EA:C2:2E:6F:D5:CD:B7:B1:95:10:A0:87:2F:6A:DF
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584818D2BADB889407DC194E9D60
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
Signing time: Wed 04 Dec 2024 17:30:53 +0000
ROA not before: Wed 04 Dec 2024 17:30:53 +0000
ROA not after: Tue 04 Mar 2025 17:30:53 +0000
asID: 16509
IP address blocks: 143.223.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:d2:ba:db:88:94:07:dc:19:4e:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 17:30:53 2024 GMT
Not After : Mar 4 17:30:53 2025 GMT
Subject: CN=2eba5623-18c6-4992-a15e-28119fc8edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:66:3a:e8:4b:99:e9:3d:7e:dd:e3:f1:1f:
0e:d9:02:60:30:5c:af:e7:c8:0a:94:14:61:02:0e:
d2:4a:d1:a4:d1:11:f6:d7:5a:aa:cb:5e:17:05:95:
a4:48:d9:66:85:6f:fe:1e:ce:d1:37:b1:84:c2:e5:
a1:d2:fd:ba:e7:34:5d:96:7b:6c:75:3d:49:ff:17:
a2:a3:ac:26:6b:e9:81:94:00:56:20:24:9d:39:b7:
22:dc:82:b4:a8:cc:87:92:19:93:e1:5c:41:f4:41:
a5:33:44:7b:0f:e6:12:04:f1:d6:fa:6a:39:a1:42:
42:11:88:54:41:d5:4b:75:b2:d8:b7:0a:0f:66:9e:
fc:bf:2f:e7:c6:90:9a:bb:28:31:96:e8:40:82:63:
59:ed:5e:32:86:a5:9e:17:7a:aa:cf:89:c7:c0:4e:
33:c2:2d:15:96:82:60:51:3f:73:9b:cf:74:86:ce:
03:f9:36:68:35:92:24:3b:36:6b:3a:a6:57:b1:5d:
cd:74:5a:4c:fe:48:28:fa:d8:1b:19:47:3a:3b:cc:
db:9b:3b:e7:7d:8c:dd:94:03:81:10:8a:ee:e5:20:
16:a1:e5:ba:4d:5a:31:7e:01:3c:d8:3d:74:0f:ea:
c2:d6:0d:9c:24:e2:63:26:56:36:b8:16:9f:1f:01:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:AA:F8:8C:EA:C2:2E:6F:D5:CD:B7:B1:95:10:A0:87:2F:6A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09e21013-7b4b-34c1-82cf-d3a46658b996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ee:af:11:cd:8e:df:23:b0:18:2d:7c:2a:b1:23:63:f1:0f:
7a:07:fb:04:c6:c9:ef:e8:6e:91:96:ac:b8:20:8e:90:f3:a5:
76:a2:fe:b0:95:74:9e:22:cf:95:29:7e:b2:7a:50:8b:4f:5a:
18:b4:ac:b7:1d:d6:c0:cc:8e:9b:de:99:82:6d:b2:49:e8:bf:
c9:bc:e2:ad:dd:96:65:37:0a:c8:fb:8a:7d:a6:86:b0:0c:85:
5b:c3:79:44:d7:12:1b:70:34:1f:c3:a2:ea:7f:8d:e0:9c:c7:
8a:52:d4:51:66:0c:69:96:aa:9e:e5:33:18:c1:a5:e0:8e:26:
0d:03:c9:74:e8:a7:1e:0e:30:7b:6b:58:fa:f7:5c:87:c4:1f:
b9:10:26:36:8e:a8:24:60:75:5f:16:69:6f:1d:af:6f:cd:7e:
cd:d8:f9:a0:a0:0e:17:52:58:94:50:f2:06:f8:f0:1c:82:8e:
68:9c:81:07:6d:66:1e:96:a8:e3:7b:9a:02:bb:a8:99:89:3d:
d4:a6:72:15:03:a9:76:9e:a1:df:b1:fb:ff:3f:dc:75:4a:9e:
25:53:66:cc:d7:1e:ba:83:d1:d6:04:0d:ea:a0:8e:a7:de:e3:
eb:9a:72:79:53:6c:0f:c5:2b:48:04:7d:a6:50:4f:03:86:13:
c5:b5:3f:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgY0rrbiJQH3BlOnWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI0MTIwNDE3MzA1M1oXDTI1MDMwNDE3MzA1M1owLzEtMCsGA1UEAxMk
MmViYTU2MjMtMThjNi00OTkyLWExNWUtMjgxMTlmYzhlZGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPJmOuhLmek9ft3j8R8O2QJgMFyv58gKlBRh
Ag7SStGk0RH211qqy14XBZWkSNlmhW/+Hs7RN7GEwuWh0v265zRdlntsdT1J/xei
o6wma+mBlABWICSdObci3IK0qMyHkhmT4VxB9EGlM0R7D+YSBPHW+mo5oUJCEYhU
QdVLdbLYtwoPZp78vy/nxpCauygxluhAgmNZ7V4yhqWeF3qqz4nHwE4zwi0VloJg
UT9zm890hs4D+TZoNZIkOzZrOqZXsV3NdFpM/kgo+tgbGUc6O8zbmzvnfYzdlAOB
EIru5SAWoeW6TVoxfgE82D10D+rC1g2cJOJjJlY2uBafHwFPAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXSqviM6sIub9XNt7GVEKCHL2rfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDllMjEwMTMtN2I0Yi0z
NGMxLTgyY2YtZDNhNDY2NThiOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFburxHNjt8jsBgtfCqxI2PxD3oH+wTGye/obpGWrLggjpDzpXai/rCV
dJ4iz5UpfrJ6UItPWhi0rLcd1sDMjpvemYJtsknov8m84q3dlmU3Csj7in2mhrAM
hVvDeUTXEhtwNB/Doup/jeCcx4pS1FFmDGmWqp7lMxjBpeCOJg0DyXTopx4OMHtr
WPr3XIfEH7kQJjaOqCRgdV8WaW8dr2/Nfs3Y+aCgDhdSWJRQ8gb48ByCjmicgQdt
Zh6WqON7mgK7qJmJPdSmchUDqXaeod+x+/8/3HVKniVTZszXHrqD0dYEDeqgjqfe
4+uacnlTbA/FK0gEfaZQTwOGE8W1P18=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:39 2025 by rpki-client