Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa
File: 098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa (raw, json)
Hash identifier: Usx/VZhTR/Gj9QGf08PhBd77PLo/lJ1xnfe0uLbK9SI=
Subject key identifier: BE:09:0F:3F:23:8F:4D:36:48:B5:46:BE:4B:6B:D2:74:1D:8D:AD:6F
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D5230332B7D822E3A57300
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:23:03:32:b7:d8:22:e3:a5:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=8d9b128a-89b0-4f20-9a49-b15f03469e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:16:0c:43:5b:dd:c8:64:3a:51:5b:81:87:
7a:12:c2:26:e1:0a:84:ce:46:fb:f6:14:a5:f8:2c:
ef:2f:97:f0:3f:5c:87:46:ba:53:7f:5a:e3:49:2e:
70:aa:5b:b0:fd:51:9d:9b:c1:4d:bc:08:30:de:a2:
55:cf:8b:05:00:e4:fc:aa:0a:de:6a:7b:7d:2c:9b:
30:fc:a3:9d:fc:70:16:39:a7:59:be:09:15:22:01:
9a:bc:3c:f4:86:f3:26:13:93:da:bb:4c:95:b1:a9:
f1:a1:df:07:e7:e6:58:7e:b2:de:7a:37:de:f3:93:
72:22:49:d9:50:80:6e:dd:be:af:d9:9d:08:2b:b3:
fa:62:8f:5b:7e:25:07:fb:98:28:e1:ce:bf:c9:3d:
1f:ae:c4:80:df:80:68:30:6b:ed:42:5e:76:29:ca:
d7:85:f2:e8:bb:5a:46:1e:f2:d1:44:e9:cd:1b:2c:
d4:88:7c:c8:9b:dd:64:16:e2:3d:62:d9:2f:7a:6c:
14:ca:52:14:42:79:75:22:0d:79:f3:9c:be:bf:dd:
a5:38:ec:37:aa:0d:92:12:4b:ee:28:99:70:24:97:
b4:8e:c4:2f:8b:49:30:e5:7d:6c:3e:8d:6c:3e:b0:
d4:0d:bd:00:db:5e:4c:68:57:a8:93:36:b8:ad:f0:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:0F:3F:23:8F:4D:36:48:B5:46:BE:4B:6B:D2:74:1D:8D:AD:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/098c0a40-2a83-39e7-88fb-4a0226a2ba06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:e8:12:be:6d:29:7e:91:20:1b:af:20:9e:81:38:92:b2:72:
f9:c6:5e:4f:b8:32:55:60:6c:cb:52:9e:fa:0f:a5:60:5d:32:
e8:bc:4c:d9:33:4a:4f:10:69:36:bc:46:1b:b5:16:16:54:39:
17:98:e9:79:2d:6f:dd:4d:f1:63:6c:d3:d1:26:63:04:a7:90:
6d:0f:fb:f6:80:0e:0a:78:a4:c8:2c:93:c7:8a:35:0d:0c:f4:
9b:40:39:84:6d:fb:60:08:d6:0e:33:2a:68:6d:b1:26:97:cb:
02:3c:54:2b:a8:79:d0:73:c2:ea:21:40:49:93:e0:88:de:fb:
2a:58:31:5a:62:28:29:7f:11:15:f5:4d:a2:50:b4:ac:0f:78:
4b:17:af:59:cb:64:ef:89:01:d5:9f:b1:c1:cc:68:f4:c9:81:
05:f5:b0:1c:b9:bb:49:4d:58:a8:5d:de:1e:91:49:a9:4e:ac:
ea:a3:5d:66:6a:0f:7b:69:95:77:2d:73:2c:10:ce:86:d5:67:
15:d1:78:d3:74:3a:70:02:c3:81:37:c1:3f:f1:fe:f2:7c:aa:
4d:25:6b:49:ba:9c:45:20:f2:34:9f:f9:f5:ae:1f:a0:e8:a6:
e1:c3:66:a9:00:9c:8b:24:84:3e:a0:8a:06:f7:74:10:1e:9d:
cf:a5:4c:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1SMDMrfYIuOlcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
OGQ5YjEyOGEtODliMC00ZjIwLTlhNDktYjE1ZjAzNDY5ZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCgWDENb3chkOlFbgYd6EsIm4QqEzkb79hSl
+CzvL5fwP1yHRrpTf1rjSS5wqluw/VGdm8FNvAgw3qJVz4sFAOT8qgreant9LJsw
/KOd/HAWOadZvgkVIgGavDz0hvMmE5Pau0yVsanxod8H5+ZYfrLeejfe85NyIknZ
UIBu3b6v2Z0IK7P6Yo9bfiUH+5go4c6/yT0frsSA34BoMGvtQl52KcrXhfLou1pG
HvLRROnNGyzUiHzIm91kFuI9YtkvemwUylIUQnl1Ig1585y+v92lOOw3qg2SEkvu
KJlwJJe0jsQvi0kw5X1sPo1sPrDUDb0A215MaFeokza4rfDhhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4JDz8jj002SLVGvktr0nQdja1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDk4YzBhNDAtMmE4My0z
OWU3LTg4ZmItNGEwMjI2YTJiYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnoEr5tKX6RIBuvIJ6BOJKycvnGXk+4MlVgbMtSnvoPpWBdMui8TNkz
Sk8QaTa8Rhu1FhZUOReY6Xktb91N8WNs09EmYwSnkG0P+/aADgp4pMgsk8eKNQ0M
9JtAOYRt+2AI1g4zKmhtsSaXywI8VCuoedBzwuohQEmT4Ije+ypYMVpiKCl/ERX1
TaJQtKwPeEsXr1nLZO+JAdWfscHMaPTJgQX1sBy5u0lNWKhd3h6RSalOrOqjXWZq
D3tplXctcywQzobVZxXReNN0OnACw4E3wT/x/vJ8qk0la0m6nEUg8jSf+fWuH6Do
puHDZqkAnIskhD6gigb3dBAenc+lTKk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:58:02 2025 by rpki-client