Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa
File: be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa (raw, json)
Hash identifier: CNwaBhjU6H9GkXwQmE5sit6AYsv0W6noo6ohLUdofyQ=
Subject key identifier: 76:5A:52:26:C3:A8:D3:AA:F8:65:A7:6F:4E:2D:6A:74:CE:23:99:63
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F4328584818D6584AC39159B4F27D6600
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa
Signing time: Wed 04 Dec 2024 17:38:10 +0000
ROA not before: Wed 04 Dec 2024 17:38:10 +0000
ROA not after: Tue 04 Mar 2025 17:38:10 +0000
asID: 14618
IP address blocks: 143.223.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:d6:58:4a:c3:91:59:b4:f2:7d:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 17:38:10 2024 GMT
Not After : Mar 4 17:38:10 2025 GMT
Subject: CN=34a5a3a1-5ce7-48b6-b619-93ccdf6dc93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:0c:c3:f3:c6:48:b3:a2:bc:49:db:16:35:
66:e9:23:df:f0:db:52:e1:52:4e:f5:c1:c0:d5:13:
32:06:15:b9:88:c9:f0:00:6b:ca:ef:fb:e8:ae:fe:
df:4c:10:00:93:14:9e:3f:7f:51:8a:46:67:7e:a1:
c9:70:55:ab:4b:d8:58:8b:3b:40:09:2e:0c:7c:61:
5e:14:b5:92:05:a9:94:f4:c6:1d:83:f3:b7:6e:2d:
ab:4d:44:d9:13:bf:88:29:09:ea:38:9d:31:15:a4:
6f:9e:e0:01:82:b5:93:f1:59:02:63:9d:06:60:38:
bd:b1:c3:4f:92:0e:05:1e:20:26:ab:56:58:28:ce:
5c:88:d2:c9:bf:1e:04:16:17:cb:25:fc:19:e5:1b:
b3:22:81:20:e4:61:c6:68:21:ca:3b:eb:45:90:7e:
ba:24:2d:c3:7e:15:d5:f2:88:17:79:33:5c:55:1d:
f5:de:8f:aa:6c:6b:e3:e9:75:b4:e8:e4:53:dd:a5:
7e:f0:34:51:96:5b:3e:1c:0b:e3:4a:16:af:b9:4a:
dc:2e:af:0e:ef:1e:5a:1d:66:ae:9c:80:a3:c9:3e:
33:5b:4d:60:e9:c3:81:91:2e:9f:44:fd:d7:dc:7c:
b6:b9:5b:30:51:5e:1b:72:2a:98:ff:b4:2c:1d:3a:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5A:52:26:C3:A8:D3:AA:F8:65:A7:6F:4E:2D:6A:74:CE:23:99:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/be867349-d0dd-3bef-8ce0-de2d161aa2e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:29:28:ac:78:53:21:29:ec:09:21:e4:26:06:16:86:d5:fc:
54:81:f0:67:e0:11:44:32:b2:5b:22:4a:6c:3a:ff:e8:20:96:
04:3a:04:ba:cd:f3:36:45:2a:9b:1e:b6:67:bb:5e:49:cc:54:
29:8f:1c:15:6f:7b:30:11:46:4d:85:36:7a:64:55:e4:34:5a:
a0:b3:05:05:b3:80:6c:b4:ce:ff:8c:15:24:8d:0b:7b:4b:81:
9c:6a:1e:97:6d:86:ba:2b:ee:91:1e:80:1f:c6:73:38:37:82:
78:17:51:84:5f:86:67:be:b3:0f:86:88:1f:d8:27:3a:11:57:
ae:77:4c:19:dd:cb:b3:01:ca:40:d3:b8:0a:c6:46:69:af:64:
bb:0f:d7:e4:27:18:24:f7:d6:c8:89:1f:01:ec:3d:c6:c8:fc:
94:3b:0e:de:c9:30:df:8e:6e:3d:9e:9f:d5:8f:40:2d:9b:73:
97:e3:aa:4f:09:88:d9:20:57:87:b9:3e:20:55:52:cb:93:91:
b1:68:61:e2:0b:9b:2b:8f:6f:71:83:fc:55:cb:c6:d6:47:4c:
10:eb:b6:68:79:bb:76:28:82:0b:12:7b:92:27:fd:b8:8b:4c:
34:26:c1:5b:cb:50:8d:8e:51:81:54:4a:60:1e:cc:54:3d:cb:
5a:25:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:04 2025 by rpki-client