Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0750b44-73ca-3469-a478-324abfbef3d9.roa
File: e0750b44-73ca-3469-a478-324abfbef3d9.roa (raw, json)
Hash identifier: NLtI5Ppq+Z0FnViaDZlqf0MWMyIGnhRg1Gk/62PJ8yw=
Subject key identifier: 06:80:4C:C1:0B:03:00:B3:6A:DA:21:03:99:CD:8A:6C:53:3B:48:E1
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F43285848F92692C517856717C1EEBC80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0750b44-73ca-3469-a478-324abfbef3d9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 23280
IP address blocks: 143.223.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:92:c5:17:85:67:17:c1:ee:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=fff0e02c-111d-4229-94db-0c911aebf8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:f6:47:e8:2c:30:c5:5d:06:ef:b9:c5:0e:
bf:d2:a5:2f:cb:49:b0:64:fa:d5:ed:93:5e:ce:d6:
88:eb:96:db:17:2c:3d:b7:48:82:a1:32:50:4c:b4:
ab:35:bb:af:63:33:55:86:a3:4d:31:c1:e7:29:dd:
e7:d0:3d:70:2d:04:e2:00:fa:11:ed:b2:ab:7a:1c:
3d:f3:80:3a:4f:cb:b9:92:8b:40:9f:8c:43:34:02:
89:67:f0:e7:4c:d5:5c:12:35:87:8a:fd:51:f2:57:
ad:f1:d1:cf:3a:2d:c8:f6:c1:07:12:ee:40:88:f5:
10:09:f0:d7:56:bb:be:45:f8:bb:43:cf:52:a2:9f:
54:f1:03:4c:20:15:12:ee:f5:f2:8b:e3:14:6c:83:
5d:29:29:22:52:8b:9b:22:cd:61:29:52:56:ab:a6:
eb:fa:44:16:bc:25:9f:bd:32:eb:19:4d:b7:0f:02:
58:d5:fa:ec:33:0d:38:3d:4d:11:0f:c9:39:28:fe:
14:42:f4:5c:dd:f1:df:1e:2f:2f:ce:de:aa:19:34:
70:17:76:8f:a5:9c:ad:02:c3:35:73:fc:ab:b9:9d:
74:b9:2d:72:06:4b:00:91:ff:0b:15:23:ca:45:33:
1d:91:81:42:e6:1c:83:24:d0:46:60:9c:a7:d3:5d:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:4C:C1:0B:03:00:B3:6A:DA:21:03:99:CD:8A:6C:53:3B:48:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/e0750b44-73ca-3469-a478-324abfbef3d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f0:52:25:5e:e3:28:ac:2c:56:cd:51:01:40:01:e2:37:06:
9b:61:05:d7:53:89:d2:29:28:67:a5:4a:7a:1a:f8:5a:d4:eb:
99:c5:c6:4d:9d:64:26:90:ba:d3:b7:49:33:87:30:c1:68:e1:
b2:63:4c:7f:41:6f:b8:59:0f:5e:8d:81:1a:6d:c7:53:e1:7c:
7e:85:82:6f:e2:0f:c4:7b:77:d5:f5:62:fe:25:da:1f:e1:82:
68:16:1e:5f:f8:62:00:be:e6:40:06:89:5c:c7:98:20:e0:af:
4a:08:83:bd:9b:8d:a3:cc:a0:00:65:f9:d0:4a:fd:b4:1b:2a:
d5:ae:7e:dd:a6:5d:ab:65:0a:5a:40:63:10:76:29:9c:7a:9f:
4a:f9:26:d9:9d:de:4c:8f:b4:c9:38:7e:78:29:eb:2a:1c:22:
12:e9:0c:1d:a8:90:e8:60:06:d9:83:27:2e:7f:f3:d2:fb:59:
93:b3:3b:fe:29:e1:a8:77:e5:d0:27:47:94:9e:ab:2e:16:a1:
30:f3:40:38:2a:a9:5b:33:15:48:10:6f:0c:54:9b:2f:aa:31:
0a:19:45:67:3e:7c:a0:f5:eb:21:a0:9d:8b:5a:93:f9:4e:6c:
28:88:bf:e2:3d:ae:32:8c:97:61:c3:e8:5d:df:38:08:1c:04:
b0:d1:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:27:18 2025 by rpki-client