Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa
File: baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa (raw, json)
Hash identifier: xo51WA5P2EfGNboSEcna0G+wQ7dQmznaqQfCeNRPfa4=
Subject key identifier: B2:EA:04:C4:D2:34:C5:D0:0F:5F:27:78:00:5B:FF:0B:98:6D:37:FA
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584818D384623B0160011F20CA40
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa
Signing time: Wed 04 Dec 2024 17:32:28 +0000
ROA not before: Wed 04 Dec 2024 17:32:28 +0000
ROA not after: Tue 04 Mar 2025 17:32:28 +0000
asID: 16509
IP address blocks: 143.223.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:d3:84:62:3b:01:60:01:1f:20:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 17:32:28 2024 GMT
Not After : Mar 4 17:32:28 2025 GMT
Subject: CN=71b382fd-37aa-42f1-b530-a1f3ee24fc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:24:ba:10:85:c5:55:d0:f8:b0:d7:6d:07:
b4:79:83:ac:b1:4f:7e:f7:9b:18:2d:09:68:03:e6:
49:b2:76:68:dd:d0:a2:f5:2b:89:ae:bd:0d:58:06:
7e:2c:58:28:1e:f4:fc:e2:d5:67:81:f9:bb:3a:98:
31:27:f3:00:d7:ae:67:c0:58:4f:71:32:e6:36:73:
1d:a9:25:9f:02:7a:e3:ff:be:73:b2:ee:a6:14:ab:
c6:6d:08:41:6b:1d:9e:74:5a:bb:a3:70:b1:93:95:
dc:fd:e3:d6:a6:07:7a:f2:64:3d:c7:f5:7b:98:cd:
a6:81:20:4e:c0:50:de:b8:fc:1e:40:80:ee:b3:7c:
3e:ad:b1:cf:85:36:09:a2:12:ff:a5:a1:8c:54:fe:
67:0c:db:e7:70:a8:49:c9:5a:69:f8:9d:aa:60:a0:
f6:04:0e:61:ca:64:74:45:34:20:ab:a3:7e:bf:91:
34:92:18:42:c4:da:ec:7f:cf:7b:5e:d1:a3:98:f3:
61:0a:ef:eb:38:f7:a4:00:af:ce:af:73:a7:3a:36:
8a:ca:39:b4:27:44:2a:17:95:8e:22:d8:bc:54:2e:
c2:6b:d8:69:a9:d1:30:4d:1f:e2:2c:df:77:b7:03:
34:23:1f:f2:f9:0c:af:ec:a3:ea:fc:3f:80:6a:d9:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:04:C4:D2:34:C5:D0:0F:5F:27:78:00:5B:FF:0B:98:6D:37:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/baf4ae08-3b16-3d91-8894-dbf4f0704e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e4:20:21:69:65:82:ff:65:53:81:bc:1d:cb:31:e5:28:1e:
bb:c1:e1:14:bd:91:92:1d:29:f5:1f:31:fc:f3:ac:7e:a3:67:
8e:46:45:8d:64:9b:c4:fe:3f:e7:b8:eb:2e:a7:42:61:56:5b:
18:43:c3:a7:58:7d:fc:5e:a7:b4:a3:e4:bc:9b:41:61:f7:98:
4c:8c:3f:5b:37:ee:90:6e:90:a3:fd:9d:29:00:09:b4:be:3f:
b7:f1:0a:6f:b6:ef:ee:d4:14:8c:76:ad:ac:49:81:39:09:e2:
80:15:04:c3:d6:5e:9b:de:e8:d5:c6:ad:50:f1:5a:2e:31:2e:
93:81:a5:af:ff:fa:01:26:77:14:a9:4f:57:cb:48:97:5d:d3:
76:32:c4:b7:76:cd:b4:cd:f3:8b:54:4d:77:42:aa:12:49:36:
fb:4d:19:24:fa:cd:a7:55:f7:dd:d1:6d:8c:f6:ec:eb:3c:47:
6c:19:da:1d:e3:ea:75:db:48:d5:f3:ed:09:f5:09:8e:a5:2c:
73:26:0d:2f:45:2c:2a:8c:8c:e0:81:d4:7a:23:3f:b8:5c:05:
8a:1a:f8:82:2d:c5:e7:6c:6a:43:60:47:68:d3:06:ff:36:8d:
cf:71:35:27:1c:1d:9b:60:f4:1e:35:1c:2a:8e:0b:1e:15:67:
aa:b9:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:52 2025 by rpki-client