Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
File: 1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json)
Hash identifier: 6eKaOyDE/JqoUgOyDCIiWhNfZq6CM264tdqi8WbuU70=
Subject key identifier: 52:34:B1:C0:56:31:45:2A:1D:C0:11:F6:F2:B6:59:37:7D:21:CF:BC
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584818C75E4AE727A40AC41ED800
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
Signing time: Wed 04 Dec 2024 17:07:59 +0000
ROA not before: Wed 04 Dec 2024 17:07:59 +0000
ROA not after: Tue 04 Mar 2025 17:07:59 +0000
asID: 14618
IP address blocks: 143.223.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:c7:5e:4a:e7:27:a4:0a:c4:1e:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 17:07:59 2024 GMT
Not After : Mar 4 17:07:59 2025 GMT
Subject: CN=1563a0b5-b6c6-4f42-98fb-1a73a80e8d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:d0:aa:23:86:c0:92:5d:81:7a:8c:10:5d:
f4:69:89:e5:0c:27:07:8f:c8:94:2f:25:b7:98:f4:
e4:57:01:dc:b2:ee:29:17:aa:31:1b:c0:45:9d:0c:
c8:9b:fe:45:dd:9a:15:63:24:e3:e0:a1:7a:8b:65:
a1:d3:8c:ee:49:e2:26:8c:2b:fe:ad:02:bb:11:6f:
0f:18:ae:2b:b0:9d:c6:f3:41:ba:ba:97:2f:f4:2b:
ab:3a:ad:cc:8b:f7:ee:f7:20:8f:41:99:72:5f:fb:
60:f8:fd:f0:fc:11:54:68:7e:05:de:20:df:8e:0a:
3e:e8:c6:22:15:c7:b8:8c:e5:59:05:45:63:7d:4f:
4e:2a:00:a5:1f:9a:82:64:38:7f:8b:c8:45:87:bf:
7f:3b:7f:e5:31:12:79:af:e5:7d:e1:56:af:a5:a6:
e2:2f:c7:3e:71:f0:45:37:a8:53:5a:c5:d9:e8:66:
90:21:e0:dc:7a:52:81:1c:01:11:58:25:c7:53:4b:
89:e1:ac:d7:41:14:cd:a6:10:ec:91:af:dc:00:6c:
40:8b:20:21:f5:b4:0c:32:19:cd:2c:78:5a:36:45:
d2:c1:03:d4:df:66:05:18:27:94:d2:8b:05:e5:48:
3a:7d:18:ee:4f:e1:1a:ad:57:49:9a:62:e7:cb:76:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:B1:C0:56:31:45:2A:1D:C0:11:F6:F2:B6:59:37:7D:21:CF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:60:2a:1e:9b:1d:17:8b:d8:10:00:06:fc:74:0c:77:fc:c5:
cc:13:6f:77:2b:67:16:d0:d8:8b:74:99:3e:1d:1c:1c:ef:4c:
fb:71:1f:3f:2f:69:78:2a:ca:d8:fb:fc:78:16:1d:60:f5:d2:
a6:95:49:ab:e6:d6:1a:ff:70:f8:41:d8:95:76:ab:aa:56:e3:
fc:98:9f:b9:11:4f:6c:da:77:40:f7:21:ee:38:76:63:f2:22:
d0:8a:d3:e2:6d:60:27:b9:dd:f5:a6:ea:21:ce:c8:77:50:b1:
36:96:81:e9:ca:a6:9d:f5:75:21:27:90:72:26:c8:f0:19:80:
db:46:d5:b2:4d:f5:fc:8e:97:d3:ad:17:4b:5b:b5:fa:50:3e:
18:dc:c1:2c:0c:9f:7e:b8:a0:3f:72:7e:95:2a:60:33:67:68:
06:de:89:0f:da:b4:90:ba:44:7d:45:26:d9:f3:a9:c0:52:c5:
25:59:c2:32:b6:bf:c4:e5:c1:a7:45:fc:6a:b9:8b:ec:4c:6e:
07:c3:ff:b4:0c:cb:ee:38:5f:7c:d6:06:25:05:fa:17:37:bb:
57:d9:18:96:45:69:7a:df:c1:42:76:2b:f3:e4:e1:7b:95:ea:
35:cc:4a:d5:56:de:26:68:ea:d5:03:aa:00:98:02:43:1f:6b:
15:00:96:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgYx15K5yekCsQe2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI0MTIwNDE3MDc1OVoXDTI1MDMwNDE3MDc1OVowLzEtMCsGA1UEAxMk
MTU2M2EwYjUtYjZjNi00ZjQyLTk4ZmItMWE3M2E4MGU4ZDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MTQqiOGwJJdgXqMEF30aYnlDCcHj8iULyW3
mPTkVwHcsu4pF6oxG8BFnQzIm/5F3ZoVYyTj4KF6i2Wh04zuSeImjCv+rQK7EW8P
GK4rsJ3G80G6upcv9CurOq3Mi/fu9yCPQZlyX/tg+P3w/BFUaH4F3iDfjgo+6MYi
Fce4jOVZBUVjfU9OKgClH5qCZDh/i8hFh79/O3/lMRJ5r+V94VavpabiL8c+cfBF
N6hTWsXZ6GaQIeDcelKBHAERWCXHU0uJ4azXQRTNphDska/cAGxAiyAh9bQMMhnN
LHhaNkXSwQPU32YFGCeU0osF5Ug6fRjuT+EarVdJmmLny3Y73QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFI0scBWMUUqHcAR9vK2WTd9Ic+8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWFhMDkyODEtZDY0OS0z
MWM2LWJlMjAtNjMwNWE2YTMxMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClgKh6bHReL2BAABvx0DHf8xcwTb3crZxbQ2It0mT4dHBzvTPtxHz8v
aXgqytj7/HgWHWD10qaVSavm1hr/cPhB2JV2q6pW4/yYn7kRT2zad0D3Ie44dmPy
ItCK0+JtYCe53fWm6iHOyHdQsTaWgenKpp31dSEnkHImyPAZgNtG1bJN9fyOl9Ot
F0tbtfpQPhjcwSwMn364oD9yfpUqYDNnaAbeiQ/atJC6RH1FJtnzqcBSxSVZwjK2
v8TlwadF/Gq5i+xMbgfD/7QMy+44X3zWBiUF+hc3u1fZGJZFaXrfwUJ2K/Pk4XuV
6jXMStVW3iZo6tUDqgCYAkMfaxUAln4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:25 2025 by rpki-client