Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
File: 5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa (raw, json)
Hash identifier: IT5fLh4nAn5KwP3NNY4KhNTfLHBqaNYGzWQ6XXF5dmA=
Subject key identifier: C2:4F:E1:B7:02:27:29:FF:73:43:29:D8:06:8A:99:1F:D1:64:D4:58
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584818D5901907FD66962685E3C0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
Signing time: Wed 04 Dec 2024 17:36:35 +0000
ROA not before: Wed 04 Dec 2024 17:36:35 +0000
ROA not after: Tue 04 Mar 2025 17:36:35 +0000
asID: 14618
IP address blocks: 143.223.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:d5:90:19:07:fd:66:96:26:85:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 17:36:35 2024 GMT
Not After : Mar 4 17:36:35 2025 GMT
Subject: CN=f003be1f-1832-4537-9d05-9829ce40d3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:c0:e8:5e:7e:1c:c0:d8:31:99:6f:69:42:
15:ab:84:a6:13:cc:99:e3:d8:e8:7a:2f:18:9e:e8:
32:12:73:81:42:a1:f5:2a:e3:d9:39:b8:f2:49:e7:
5b:00:df:5a:03:02:03:46:26:5b:a5:99:f2:97:27:
5e:35:36:96:09:70:7f:db:7b:73:4f:89:99:f7:2c:
0f:5f:f3:ac:40:a3:89:22:83:bc:24:6c:20:0f:5c:
24:84:86:b7:fb:33:3e:e7:58:c0:e9:10:03:4d:22:
d7:83:6a:0d:1c:ed:66:ee:6c:80:29:36:9c:fc:58:
92:3b:5c:85:cf:3d:77:82:ff:07:aa:73:34:70:02:
c0:ab:43:69:dd:78:8e:40:a9:80:97:ca:f9:e0:41:
17:b2:38:17:22:76:91:3f:8e:d5:60:4f:02:79:94:
d7:8d:c2:ee:5a:a6:7f:be:de:45:c9:c2:14:0d:24:
3e:f8:3c:e2:ee:4d:73:6a:dc:26:b2:02:40:0d:fa:
2d:a1:9c:74:75:c9:c5:2d:66:9c:00:52:fd:1c:17:
ba:24:07:ee:07:28:86:26:1f:5e:91:d2:21:04:96:
82:d4:fa:2a:14:dc:a6:dd:9c:22:90:36:b2:04:4e:
d8:8f:c9:14:3f:b2:b4:81:f9:58:bd:29:7d:e7:7d:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:E1:B7:02:27:29:FF:73:43:29:D8:06:8A:99:1F:D1:64:D4:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:01:2e:82:fc:c4:05:37:37:b6:3c:3c:69:33:33:ab:00:c5:
62:52:0b:f2:4b:1d:50:5e:6c:cd:db:33:a0:66:ea:47:98:af:
d6:c3:51:08:a9:be:7e:eb:64:a9:21:51:39:d6:24:e8:06:27:
f3:4c:04:9f:d4:03:bb:ff:e1:ef:d2:55:30:db:06:60:b4:e7:
97:19:4d:f8:56:0b:28:b7:5f:18:f0:dd:c0:e6:ee:54:9b:f5:
90:c7:7c:3b:32:c6:80:9b:02:1c:03:40:a1:3d:f4:53:5a:12:
2b:24:7f:1f:1e:be:af:12:bf:54:44:34:20:71:9e:6a:1a:a0:
f5:be:26:61:79:38:0e:da:86:23:18:55:25:0b:d4:b4:16:de:
3a:ac:9b:24:2a:08:68:92:b1:17:3e:ef:d2:04:68:d3:ed:1a:
a0:e2:35:1f:b7:be:b4:d0:b5:b1:8c:53:ef:33:e4:20:be:0c:
3a:5d:cb:b4:28:44:36:2d:b7:a9:bd:02:76:0f:d8:36:f1:5c:
c7:42:c6:15:db:24:ad:b6:f5:d1:92:9b:91:a0:34:7e:5f:6d:
fd:9a:45:d4:80:15:d6:6a:aa:ea:f7:e4:f8:dd:9a:d5:48:d6:
95:f0:3b:44:74:64:c9:f1:c9:29:55:fe:b8:64:4e:0b:57:d9:
a8:9e:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:41 2025 by rpki-client