Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
File: c56e8694-75c1-3f72-8741-dd71e0f83e20.roa (raw, json)
Hash identifier: G6H1bJD7FanxqhUNO2/zyBjaMB5IuoYIh1GQI4B+z7E=
Subject key identifier: A7:73:6A:D1:E6:37:4F:BF:8C:CA:B1:80:09:3F:41:12:5F:5F:04:79
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F43285848F92692DE08802AF52D5402C0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 23280
IP address blocks: 143.223.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:92:de:08:80:2a:f5:2d:54:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=718b4c3d-6fe8-4f00-81c9-4a54968a1f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:13:25:cb:88:33:c5:52:a2:2b:ff:1b:9d:
0d:b5:f2:50:d6:fa:bd:e3:a2:29:8e:f0:cd:bd:d4:
4e:a3:6a:77:a5:50:56:d1:79:18:65:af:24:66:c1:
cf:1f:4d:1c:3f:81:5e:b1:c9:97:b7:66:ef:bc:16:
fc:9c:3c:66:df:b4:e7:65:f0:65:08:76:34:dd:ab:
13:c8:b1:5d:b4:b2:f9:95:d9:35:54:d2:c9:0f:08:
a9:47:a2:eb:f9:c5:de:5a:c0:7e:86:3e:03:4b:9a:
23:f0:c9:16:4c:65:6c:92:42:2d:c5:86:06:d4:4d:
65:5b:58:e0:97:ce:6e:5e:58:e8:26:e6:6a:5e:0f:
3a:e9:58:eb:8c:f3:19:80:26:30:5e:84:5d:ee:93:
b2:5e:a9:a4:d9:34:4f:a9:5d:c9:89:24:51:c8:ee:
6b:4f:4e:16:59:60:3a:55:03:1f:7d:c8:92:c5:1f:
74:cb:7e:f4:4d:35:b1:e7:14:4a:74:55:be:bd:ae:
0f:b2:f2:ba:0b:ec:f9:64:f1:9b:98:75:d8:59:6c:
99:f0:3b:20:4e:56:fa:32:a5:ba:01:19:b5:e5:1a:
3c:33:77:3d:c2:d4:cc:9c:39:90:e3:77:3b:fd:14:
04:6f:f7:37:02:e8:a6:ea:b4:fe:b7:da:5b:11:78:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:6A:D1:E6:37:4F:BF:8C:CA:B1:80:09:3F:41:12:5F:5F:04:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/c56e8694-75c1-3f72-8741-dd71e0f83e20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:fb:37:89:b5:d4:00:7f:e5:33:95:fa:12:30:24:a7:21:27:
cb:04:dc:3a:e4:88:2c:ca:81:8a:e2:27:e1:7a:1e:72:5e:2a:
30:7a:cd:d4:c3:e9:42:7e:b2:60:81:67:0b:b9:96:aa:b8:fc:
73:07:09:72:81:6c:8a:c7:4d:13:57:07:be:36:a9:5d:9a:af:
7b:c6:ca:d6:0d:98:d5:a1:a3:28:ca:37:9e:02:16:38:dd:7e:
a1:b4:f0:31:4a:92:46:40:54:aa:30:d8:d1:b1:c1:18:bd:3f:
48:a8:a2:76:cc:32:ff:51:aa:0a:22:13:20:73:36:37:0b:bd:
99:e6:dd:99:51:75:44:fd:21:d7:12:f0:63:e4:1f:b2:7c:55:
81:b0:8c:f0:fc:97:78:b2:70:9d:46:3a:93:2b:7b:93:b7:50:
23:48:4d:9b:15:a7:d7:0e:ac:60:b7:be:33:ae:cc:04:47:76:
36:68:58:f3:d7:bd:3a:05:f0:23:77:70:d5:54:75:7e:74:c6:
62:ac:71:e8:70:aa:18:cb:b6:d1:66:85:e7:7b:03:04:e7:cb:
73:c7:9f:ec:ac:06:9b:b1:95:e8:23:be:4b:82:1f:d0:c1:09:
71:bd:a6:77:a0:54:f9:98:e5:4f:db:9f:93:db:39:d2:40:5b:
90:d7:cb:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpLeCIAq9S1UAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzE4YjRjM2QtNmZlOC00ZjAwLTgxYzktNGE1NDk2OGExZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeQTJcuIM8VSoiv/G50NtfJQ1vq946IpjvDN
vdROo2p3pVBW0XkYZa8kZsHPH00cP4FescmXt2bvvBb8nDxm37TnZfBlCHY03asT
yLFdtLL5ldk1VNLJDwipR6Lr+cXeWsB+hj4DS5oj8MkWTGVskkItxYYG1E1lW1jg
l85uXljoJuZqXg866VjrjPMZgCYwXoRd7pOyXqmk2TRPqV3JiSRRyO5rT04WWWA6
VQMffciSxR90y370TTWx5xRKdFW+va4PsvK6C+z5ZPGbmHXYWWyZ8DsgTlb6MqW6
ARm15Ro8M3c9wtTMnDmQ43c7/RQEb/c3Auim6rT+t9pbEXjaLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdzatHmN0+/jMqxgAk/QRJfXwR5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYzU2ZTg2OTQtNzVjMS0z
ZjcyLTg3NDEtZGQ3MWUwZjgzZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGH7N4m11AB/5TOV+hIwJKchJ8sE3DrkiCzKgYriJ+F6HnJeKjB6zdTD
6UJ+smCBZwu5lqq4/HMHCXKBbIrHTRNXB742qV2ar3vGytYNmNWhoyjKN54CFjjd
fqG08DFKkkZAVKow2NGxwRi9P0ioonbMMv9RqgoiEyBzNjcLvZnm3ZlRdUT9IdcS
8GPkH7J8VYGwjPD8l3iycJ1GOpMre5O3UCNITZsVp9cOrGC3vjOuzARHdjZoWPPX
vToF8CN3cNVUdX50xmKscehwqhjLttFmhed7AwTny3PHn+ysBpuxlegjvkuCH9DB
CXG9pnegVPmY5U/bn5PbOdJAW5DXy84=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:37:07 2025 by rpki-client