Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File: 2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier: u99uyzu7MvFOG2Of9Yf2HoS4DkWXF77TtK3XetaUMAs=
Subject key identifier: F9:A1:04:83:3A:31:70:30:C9:AE:AE:76:E4:88:B0:08:F6:D5:8B:C2
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F4328584900214AD5EE9FEE3BD0694600
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 143.220.144.0/23 maxlen: 23
143.220.146.0/23 maxlen: 23
143.220.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4a:d5:ee:9f:ee:3b:d0:69:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=cf57df97-aaf4-485a-8b99-f48ed3004b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:da:1a:a9:7c:5c:4d:35:a5:c7:4e:51:b1:
60:a9:ff:82:b5:c9:82:58:76:20:8a:c8:f6:a3:c4:
2c:12:c4:03:ac:6b:e9:3b:20:8e:0c:c6:d2:68:94:
10:ea:1a:c4:26:8b:55:ac:62:da:ae:bf:8c:b2:45:
00:20:cf:c0:75:25:c1:25:b8:b0:4a:c3:5b:e6:04:
17:1f:33:49:c1:57:14:b3:e2:ee:af:3c:9c:af:d4:
23:1d:71:54:f5:98:59:20:ad:1c:88:13:e8:fe:12:
8c:23:2a:00:4e:0c:a2:08:31:d3:dc:b4:72:2a:7e:
7c:09:98:a5:f7:3e:b8:65:ac:a8:9a:cf:24:f7:46:
bd:33:6f:34:50:28:0b:e2:e7:12:99:81:8f:ce:8b:
94:05:6e:1a:f7:49:09:02:8e:d2:e7:48:1d:8d:3c:
a3:9e:7f:3b:5d:70:4a:ee:7b:39:3c:a5:28:df:91:
dc:3f:c7:77:25:40:dd:ab:07:8d:d8:13:40:f0:dc:
b5:fb:8d:d6:bc:99:e2:ca:37:8f:2e:f4:83:ac:1d:
51:bc:79:fb:89:4d:f9:fc:25:cf:6f:dd:c0:55:2d:
7b:5e:6f:50:83:85:18:8e:8c:48:27:db:c2:b6:94:
f4:12:b7:49:fc:6a:bc:64:13:61:34:50:79:b0:61:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:04:83:3A:31:70:30:C9:AE:AE:76:E4:88:B0:08:F6:D5:8B:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.144.0-143.220.149.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:89:33:5f:fa:83:e6:29:04:0a:18:96:25:86:f2:cc:a6:55:
cc:ef:18:ff:19:9f:00:ab:01:60:22:ba:d3:03:8d:69:c0:32:
95:b6:b7:6a:53:87:76:07:26:2d:b9:92:b3:68:e0:9a:94:5b:
c4:a9:a3:f9:64:09:43:96:ce:72:bf:fb:e7:13:ef:7b:d2:bd:
2f:79:a6:fb:3f:b9:8b:dc:79:09:d7:91:4b:6b:1f:3e:cf:c1:
21:1f:ec:a1:9d:b0:cc:0b:93:30:04:18:11:f9:af:50:9d:51:
de:0d:96:5a:1e:0d:99:e3:0d:80:01:c2:10:ee:0a:02:9f:27:
4b:99:98:5e:2d:38:e9:c5:a5:72:86:6d:c2:b5:07:d7:d3:71:
59:06:8d:b3:1e:2a:87:94:83:c8:45:0e:0b:1e:00:a5:24:d7:
3b:f6:b3:a0:d6:ce:b8:89:53:cb:34:cf:a7:e5:1e:97:2e:52:
ad:a8:17:9f:1d:14:f2:58:86:a9:01:a8:d4:2e:7a:44:00:ee:
9a:81:88:9f:2d:d0:6f:ee:79:a9:f6:97:52:23:7d:e7:9d:d1:
f6:44:fd:d2:26:91:69:93:7c:44:f2:3b:0b:98:f9:4c:2d:17:
58:d7:dc:88:23:2a:c0:3f:d6:9e:26:3e:58:12:6e:c3:89:ca:
2e:63:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:10 2025 by rpki-client