Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa
File: 0d5c86c2-6106-3417-af37-0063e2ac2681.roa (raw, json)
Hash identifier: h0ldKHRlWfhN3XPF4BP4oqu1t9HbRwze6gt8KVar7F0=
Subject key identifier: 09:6F:69:03:D6:3A:50:9E:41:A1:13:3E:86:EC:DC:BE:2E:87:4C:37
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F43285848196629F26940064F40EEE740
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa
Signing time: Wed 04 Dec 2024 22:27:57 +0000
ROA not before: Wed 04 Dec 2024 22:27:57 +0000
ROA not after: Tue 04 Mar 2025 22:27:57 +0000
asID: 23280
IP address blocks: 143.223.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:66:29:f2:69:40:06:4f:40:ee:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 22:27:57 2024 GMT
Not After : Mar 4 22:27:57 2025 GMT
Subject: CN=5219527a-c055-421e-9745-e47e8e97839d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:92:c9:40:74:4f:27:1e:46:6c:ed:c6:ef:
5d:7c:d3:49:66:23:c8:55:16:f2:b7:d7:fc:12:53:
99:c1:b3:b2:9f:84:8d:fa:fb:88:a1:c1:78:ed:07:
8d:1d:3d:b2:9f:75:b4:7e:9d:cc:f3:88:1d:7a:b1:
e4:bc:0a:8f:01:10:a6:5a:05:40:3c:ba:38:8a:82:
6d:8e:43:b5:d3:c9:a5:8d:9a:ad:92:7b:a5:e4:6e:
d3:c7:32:bd:ea:80:57:80:26:b6:43:71:43:5c:c5:
7a:6c:bd:61:6d:81:de:c5:d5:78:bc:c4:0c:51:a2:
4d:fe:9a:77:d2:f7:cb:85:d8:84:8c:18:52:ad:4f:
c9:28:99:3d:c7:a0:7b:05:5a:ae:72:94:1a:0e:cc:
3f:31:82:f5:aa:ee:83:b8:70:f1:9e:9a:54:0f:26:
c1:11:a7:8d:28:16:7f:ed:d7:7c:63:65:08:4c:b7:
85:3d:35:99:87:56:2d:2d:60:28:fb:a1:50:f4:d4:
f7:59:15:be:83:d2:1c:1a:5b:b3:57:16:5a:a5:e9:
c4:a8:4d:73:74:b6:da:d0:7b:2f:cf:90:a5:04:90:
70:7b:24:16:23:a5:de:16:40:2a:9e:04:d6:3b:e9:
ee:64:73:19:eb:26:bf:27:42:12:62:ae:87:94:86:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:69:03:D6:3A:50:9E:41:A1:13:3E:86:EC:DC:BE:2E:87:4C:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/0d5c86c2-6106-3417-af37-0063e2ac2681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:21:20:c7:a8:03:1b:b9:aa:52:55:82:c5:72:cd:b2:d1:e3:
cd:73:63:72:be:fd:5d:64:d2:46:c1:c8:bd:d9:f8:e4:6b:10:
5f:16:5f:6e:f1:c0:cf:92:6d:2b:3f:fd:f3:4d:a8:54:b6:a9:
39:c8:c6:d0:da:25:75:90:0a:99:f5:c1:0f:c4:06:23:27:19:
36:a7:1a:35:f8:88:f8:06:3d:24:35:26:31:2b:f9:2a:2d:c3:
d8:fb:0b:44:e8:31:51:56:7e:58:fb:01:9b:2b:bc:02:09:01:
8b:f9:ee:38:c6:65:e8:b8:50:02:13:7a:34:b8:fc:67:ae:01:
a7:f0:0d:83:1c:ec:64:03:1c:9d:03:5a:0f:f9:6f:be:1a:d6:
de:b4:14:17:24:6d:87:6a:eb:c0:a5:23:23:16:49:78:7c:64:
75:fd:21:35:d5:29:41:ad:4b:20:da:c9:74:1d:42:4d:a3:66:
9f:66:e6:d5:ca:06:7d:a1:00:34:2b:93:24:1e:64:ab:2d:38:
10:f6:3a:98:08:b7:bc:b3:9d:1d:0a:fd:1c:a9:2a:df:e2:7e:
05:3d:9d:b1:06:6d:e8:49:b4:ac:4f:34:df:e4:1f:9c:c5:c1:
e6:3d:14:8f:c7:f3:bf:ff:78:e5:c3:f1:f2:05:f8:39:bb:1d:
51:88:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:12 2025 by rpki-client