Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
File: 1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json)
Hash identifier: p+h6qKYd0odss76BadN0oEvKyHp+n+pfoyjD7VIZGZQ=
Subject key identifier: 62:66:7F:D7:5F:AD:92:F2:2C:F1:A5:24:32:0D:0D:A3:2F:0F:31:92
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F43285848F926908B5A2A4E57942B9B80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 143.223.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:90:8b:5a:2a:4e:57:94:2b:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=62cdb421-3abf-4788-9b90-580447bb6bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:c5:bf:80:63:03:c4:47:0c:c2:9e:54:ea:
e0:4e:1a:aa:95:dd:56:f5:96:a2:d0:00:fb:45:e7:
09:58:fc:68:2e:b8:74:68:32:10:d4:2c:d2:de:0c:
07:4e:f7:95:b9:b4:58:b7:c6:b9:ec:f7:57:44:90:
d8:2f:06:dc:28:f0:60:47:13:06:a2:4a:cc:d8:e6:
10:f2:6f:f1:4f:0c:cc:ea:65:c9:c4:b1:40:16:92:
94:e1:a9:06:5a:1f:7b:8b:14:0e:98:91:3c:17:f3:
13:f8:c2:9a:ce:99:61:95:7a:27:d4:c9:46:95:1d:
d0:38:2d:32:cc:7e:89:ee:84:20:32:2a:e9:cc:ab:
2d:fa:ce:c4:36:48:f9:0d:d9:a8:8d:83:95:75:c8:
41:05:49:bb:52:2e:ec:0c:e6:07:25:12:14:b7:21:
49:54:82:50:70:70:41:09:18:57:d9:41:b1:eb:1f:
30:c0:3c:f8:28:81:ea:bf:88:78:98:d1:05:af:3b:
bf:8d:62:e0:ec:29:19:08:af:a7:65:68:14:3c:da:
b3:25:53:5b:cb:84:7d:f1:c1:e6:eb:cc:51:7b:28:
2b:2a:c0:f7:8b:9a:02:8c:b3:dd:2b:a0:77:b8:df:
8c:51:d2:d2:e3:8e:20:9b:b3:a6:a3:a0:0c:05:f1:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:7F:D7:5F:AD:92:F2:2C:F1:A5:24:32:0D:0D:A3:2F:0F:31:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:5e:c1:9f:97:32:83:7f:77:97:5a:aa:8f:01:80:c8:91:d4:
98:e6:e1:f4:39:81:b7:40:82:64:e0:75:8a:0d:4d:53:11:78:
40:ea:ad:99:f8:43:1a:2c:fb:c5:d1:a3:c1:8a:7d:6d:ec:ac:
91:40:c7:d5:59:a6:bf:29:f4:3a:65:47:41:3e:1b:cf:7c:7a:
95:4f:98:3e:b5:2d:57:17:dd:78:68:2c:e4:a7:f3:72:17:b1:
8d:72:18:23:7c:29:32:31:7a:d5:c5:27:9d:af:89:bb:18:71:
23:5c:8a:ae:b9:b4:eb:6c:0e:9d:c7:e9:3d:cd:f8:ac:f9:6f:
13:02:63:0f:ff:ed:26:67:8a:3e:0a:f8:f0:38:0f:90:5e:e3:
6b:2e:63:b5:e7:10:53:72:ca:a1:d6:73:5d:86:34:28:a2:2e:
25:c1:a6:90:1e:6b:9b:da:c6:df:be:10:b6:10:ed:52:14:db:
96:b1:d6:e9:ce:ff:88:79:97:f1:13:f3:07:5c:39:eb:a9:df:
52:be:b2:e3:2c:a4:e6:71:66:d9:bd:40:81:db:9a:10:c2:d5:
78:31:8a:f0:93:16:6f:36:8e:0c:0a:7f:74:5c:54:8f:fd:e0:
99:4e:f8:38:3b:a3:48:5a:96:81:bd:64:22:43:3b:c5:41:dc:
0a:53:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:03 2025 by rpki-client