Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
File: cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json)
Hash identifier: gFKcLyAV85XSLPdMLnph8cy3aoY/I9cpIopzXju6AeA=
Subject key identifier: 2C:71:60:84:24:E5:02:62:D5:70:3B:FC:4F:6A:A7:69:07:27:53:1E
Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial: 010D0C9F43285848F92693FA15170CDAAB958140
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 143.220.128.0/23 maxlen: 23
143.220.130.0/23 maxlen: 23
143.220.132.0/23 maxlen: 23
143.220.134.0/23 maxlen: 23
143.220.136.0/23 maxlen: 23
143.220.138.0/23 maxlen: 23
143.220.140.0/23 maxlen: 23
143.220.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:93:fa:15:17:0c:da:ab:95:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=3930d4f0-fb9c-480e-99f7-ee5525cd39ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:01:39:c0:b0:98:fb:e0:b8:21:19:95:2d:
3b:b9:cb:43:a6:a6:6a:7c:e1:eb:d4:aa:ab:27:ee:
0d:9a:fb:f5:d3:ce:5c:2a:b1:3f:a4:19:6c:2b:ce:
e7:40:4f:a4:d9:05:b8:f8:6b:93:fd:26:85:ff:e2:
ff:9b:47:03:45:33:d0:e3:3c:59:30:02:0f:2d:fa:
2e:fb:17:0c:4d:6a:bd:bc:c2:f6:a3:e4:61:55:ec:
5a:d2:6c:a2:b5:98:87:d5:7e:c3:7d:69:1c:c8:6e:
77:c5:b6:c3:05:52:a4:d6:33:b3:85:f1:bd:e0:a6:
6a:e8:ba:4e:c3:1d:1e:ac:7b:8f:85:04:eb:12:2c:
ea:7d:8c:34:6d:4d:4c:83:bd:f0:cd:ad:43:f4:14:
c9:f3:31:d9:a7:ca:44:32:43:0f:67:35:08:d8:70:
e8:54:cf:ee:da:8f:44:22:12:a4:04:69:0e:1a:33:
e9:95:5b:af:03:f7:29:f9:29:4d:3d:af:98:85:d1:
7f:ba:40:57:4e:76:17:52:24:42:04:fe:31:93:b3:
45:19:36:81:7e:94:3a:d0:63:0b:0d:fa:9d:1b:1e:
b5:77:f2:79:e9:d2:68:cf:1b:a5:43:15:c6:15:ca:
00:29:14:17:4b:c0:5b:33:4f:4b:3e:31:d6:68:3f:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:60:84:24:E5:02:62:D5:70:3B:FC:4F:6A:A7:69:07:27:53:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
X509v3 Authority Key Identifier:
keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
sbgp-ipAddrBlock: critical
IPv4:
143.220.128.0-143.220.142.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:3d:83:e1:c2:53:11:70:17:9a:1e:3b:94:dd:9d:11:63:a3:
c5:f4:90:62:9d:36:14:3b:29:bc:3c:92:39:65:9a:d6:33:41:
a6:30:25:2c:b4:01:92:96:f3:d6:f9:6a:4a:fd:0a:3d:45:09:
b5:d1:dd:77:d3:2b:16:d2:5e:67:05:2f:66:7e:48:c6:67:ee:
d7:16:9f:ec:95:fd:06:07:28:54:13:cd:f0:b0:24:30:2f:75:
3a:b2:b0:15:9d:77:dc:f0:74:03:03:cb:d1:7e:79:24:af:44:
01:13:f9:a8:a7:ce:bc:32:e5:e6:2e:82:7a:7c:75:74:3a:5b:
f7:d7:37:c9:8c:5a:6a:d8:fa:58:67:60:ef:6c:5c:c2:e7:0b:
29:ce:ee:c5:63:74:a8:ff:4d:c9:1a:ab:de:d5:35:f6:d2:d0:
af:73:79:07:16:1a:a2:40:cb:7d:23:ff:d4:a3:90:c2:8a:28:
05:81:be:1d:9e:dc:65:9d:a9:89:d7:54:ee:77:8d:6a:dd:b1:
21:93:38:fc:c9:07:c2:1c:ba:03:dd:d0:56:8c:e5:66:d1:9d:
0f:fc:2e:85:be:bd:22:e6:36:0a:e4:0f:bc:ba:d4:9c:ff:4f:
70:4f:46:15:ec:d7:4e:a4:8b:b1:13:9d:47:97:32:a6:6c:01:
46:7a:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:10 2025 by rpki-client