Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa
File: e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa (raw, json)
Hash identifier: 3bMKSWMX5Lcszr2PQLPdeUcd1lXenuOaWrdLPCDcqIQ=
Subject key identifier: B3:02:B0:D4:20:78:A2:1A:28:EA:BD:5D:30:8E:4A:20:F6:60:96:B5
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F432858481965366650819641D937F900
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa
Signing time: Wed 04 Dec 2024 22:26:02 +0000
ROA not before: Wed 04 Dec 2024 22:26:02 +0000
ROA not after: Tue 04 Mar 2025 22:26:02 +0000
asID: 23280
IP address blocks: 143.223.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:65:36:66:50:81:96:41:d9:37:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 4 22:26:02 2024 GMT
Not After : Mar 4 22:26:02 2025 GMT
Subject: CN=7cd20d3a-8e73-4659-a337-388f8363fc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:44:f0:3f:12:2c:14:0b:9d:40:4f:f1:ea:
fc:37:35:c2:3e:8a:85:07:a0:a2:a7:08:6f:00:c7:
d6:b9:2f:b0:63:e6:8c:1a:9c:6e:76:f8:33:41:c1:
83:e7:8b:19:b5:cf:db:2f:b9:5d:bb:2e:18:68:43:
cc:86:94:7c:f1:f4:13:fb:b7:a5:bf:16:35:67:4d:
b4:98:4d:c8:8b:db:0e:a9:37:af:94:13:4c:52:c5:
8b:d8:5a:52:e0:6e:1e:21:ce:39:62:aa:57:02:f5:
32:27:64:e5:6a:d1:5d:b2:cc:99:79:2f:10:7f:77:
6a:95:2f:a3:63:19:a2:dc:51:b0:d7:38:53:39:6f:
9b:1c:a2:39:e5:e2:58:c3:2b:4a:15:a6:e4:8c:82:
ca:69:e5:9d:8b:1f:0b:de:fd:42:ca:85:ae:c7:9c:
38:b1:14:9a:1d:a0:36:ce:87:b8:3c:85:9a:89:77:
53:08:c2:f3:52:59:82:6b:87:cb:38:26:d3:58:3d:
db:f8:60:54:3e:a6:c3:1a:6a:97:33:2a:14:67:22:
e5:08:99:04:aa:16:69:42:81:c5:90:90:fe:41:bd:
60:c8:5e:45:02:9d:a4:6f:d2:05:f1:a0:9f:57:c0:
1e:14:04:3c:96:3a:25:b5:fc:2e:70:30:20:08:c1:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:B0:D4:20:78:A2:1A:28:EA:BD:5D:30:8E:4A:20:F6:60:96:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0ad0f93-9bfd-3d6e-a02b-8f1915de2479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a0:01:2d:40:79:2f:d4:d6:08:a2:8d:7f:22:d3:b6:08:90:
34:3b:34:4f:34:35:e6:8a:f4:9c:a9:63:b9:4b:b9:66:3e:e8:
ce:8c:53:c6:07:b5:a2:ce:3b:9b:73:11:ba:f0:95:d7:45:ce:
16:85:c9:49:78:2b:ca:0f:00:bc:3a:24:17:9e:9f:1c:26:75:
a8:58:cf:7b:90:ad:d3:5e:f5:c5:51:ff:fa:60:f7:81:72:cc:
ba:81:6a:45:87:c3:6d:87:1a:88:59:3c:88:93:64:aa:b5:4b:
0c:af:61:8d:b0:87:ef:76:02:dc:35:93:a4:00:1b:b8:ab:88:
7c:3f:d4:1f:00:af:8d:94:95:68:f2:0d:9c:aa:3b:dd:56:f5:
6c:2b:09:f7:df:a8:e2:49:01:a4:71:8b:00:e6:99:33:eb:05:
ae:ae:24:e7:a8:eb:56:51:95:c8:37:b2:6c:d2:cd:92:5f:a1:
3b:ec:ad:f9:cd:a3:a1:73:12:66:57:e2:9c:e5:ba:4f:80:b1:
30:b4:fe:a9:00:47:02:47:e8:22:be:3a:f8:e4:c4:00:f2:71:
66:4c:f4:80:ea:bf:06:e7:4b:70:31:b1:eb:04:50:a6:2c:80:
2d:fd:92:86:09:da:49:1a:e8:d5:49:29:90:d3:47:dd:ed:61:
d2:9f:ca:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZZTZmUIGWQdk3+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI0MTIwNDIyMjYwMloXDTI1MDMwNDIyMjYwMlowLzEtMCsGA1UEAxMk
N2NkMjBkM2EtOGU3My00NjU5LWEzMzctMzg4ZjgzNjNmYzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkspE8D8SLBQLnUBP8er8NzXCPoqFB6Cipwhv
AMfWuS+wY+aMGpxudvgzQcGD54sZtc/bL7lduy4YaEPMhpR88fQT+7elvxY1Z020
mE3Ii9sOqTevlBNMUsWL2FpS4G4eIc45YqpXAvUyJ2TlatFdssyZeS8Qf3dqlS+j
Yxmi3FGw1zhTOW+bHKI55eJYwytKFabkjILKaeWdix8L3v1CyoWux5w4sRSaHaA2
zoe4PIWaiXdTCMLzUlmCa4fLOCbTWD3b+GBUPqbDGmqXMyoUZyLlCJkEqhZpQoHF
kJD+Qb1gyF5FAp2kb9IF8aCfV8AeFAQ8ljoltfwucDAgCMHEDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMCsNQgeKIaKOq9XTCOSiD2YJa1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvZTBhZDBmOTMtOWJmZC0z
ZDZlLWEwMmItOGYxOTE1ZGUyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKgAS1AeS/U1giijX8i07YIkDQ7NE80NeaK9JypY7lLuWY+6M6MU8YH
taLOO5tzEbrwlddFzhaFyUl4K8oPALw6JBeenxwmdahYz3uQrdNe9cVR//pg94Fy
zLqBakWHw22HGohZPIiTZKq1SwyvYY2wh+92Atw1k6QAG7iriHw/1B8Ar42UlWjy
DZyqO91W9WwrCfffqOJJAaRxiwDmmTPrBa6uJOeo61ZRlcg3smzSzZJfoTvsrfnN
o6FzEmZX4pzluk+AsTC0/qkARwJH6CK+OvjkxADycWZM9IDqvwbnS3AxsesEUKYs
gC39koYJ2kka6NVJKZDTR93tYdKfyr8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:04:13 2025 by rpki-client