Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa
File: 148e8965-c9d0-383e-82c1-fd713e6a01d1.roa (raw, json)
Hash identifier: QuXd0v/BW2tRCFdSQ+u/kdpP4wq3QdpN50jpBj89QNk=
Subject key identifier: 42:43:56:D2:E3:58:59:C8:E7:DA:C6:17:5B:38:B5:A6:19:32:C0:03
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D52396A73DDCA3668B2800
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:23:96:a7:3d:dc:a3:66:8b:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=2a5d50e8-bc7f-43f6-84da-5d1f51770ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:21:d2:a7:05:d9:a8:ff:38:7c:ec:1f:b8:
08:1c:d1:89:72:32:8c:33:53:b4:b4:10:90:6c:32:
e4:92:3e:09:2c:bc:e0:36:ee:be:c8:d5:fe:c9:36:
78:99:28:01:ba:b3:9d:31:91:38:6d:0d:1a:ec:88:
60:a7:4f:d5:00:88:6e:fb:32:c9:cc:e0:3d:98:53:
96:6e:b2:b8:e1:02:ba:ea:cc:ea:5f:5d:a1:f5:f6:
9f:fd:5d:9d:e0:99:a7:5b:d9:66:55:ba:f3:60:61:
ff:f3:de:d9:24:d3:99:69:bc:60:84:6a:ed:f6:ed:
b6:e1:07:fe:8f:e0:e9:fa:86:37:4b:4e:26:ca:fe:
32:82:de:65:62:5a:19:3f:4b:e2:06:55:ff:c0:c4:
eb:73:e3:a5:95:46:08:72:46:ca:e0:10:66:c1:63:
7f:3e:ab:09:b6:40:5f:f8:49:51:81:0f:5f:36:12:
d6:03:e0:78:99:3f:12:09:7b:da:0c:15:8d:d6:3e:
32:29:28:91:76:89:aa:06:9d:23:47:b6:3b:8e:04:
13:3e:aa:8b:18:07:84:03:9f:00:19:b6:ff:e8:17:
4a:8f:d6:6b:05:58:a0:84:02:b3:3d:33:c5:ee:13:
17:a5:0a:1d:5a:31:11:03:7c:9a:ff:38:93:63:ba:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:56:D2:E3:58:59:C8:E7:DA:C6:17:5B:38:B5:A6:19:32:C0:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/148e8965-c9d0-383e-82c1-fd713e6a01d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ba:c7:0a:aa:1e:d3:05:e4:e3:27:de:af:4c:03:61:d5:d3:
b8:32:b0:ca:b4:f1:ef:db:fc:97:a7:f6:79:e2:36:15:fd:be:
12:e1:80:cc:08:98:b9:27:d1:f0:40:f9:21:7a:e0:b8:2c:1f:
09:00:76:97:15:06:a1:d9:6f:49:96:a0:06:e6:b6:f5:e5:20:
a6:8f:9e:ac:47:b2:a0:86:73:5d:ca:4b:07:fb:33:04:ab:68:
22:a0:c6:9f:c8:90:a3:db:f0:a8:48:34:12:12:7c:99:10:58:
43:62:82:f1:84:a7:97:f7:ee:37:7a:05:94:65:b6:ca:91:be:
83:ce:de:14:0d:51:94:7d:f8:bf:8b:87:61:4f:dc:8a:46:91:
25:d5:a3:9e:b9:29:e7:cf:3b:02:2e:20:56:6b:57:87:02:12:
53:c8:ff:33:0a:56:97:7a:9e:2c:5d:a1:5b:c4:45:d8:8b:d9:
1c:ef:89:03:2a:87:7d:e2:78:a8:06:b4:b7:df:43:0a:5c:8a:
95:16:55:c2:39:9b:21:dd:74:96:91:4c:5c:ad:31:44:fc:6a:
5c:d3:00:1f:db:a1:3f:93:62:8d:51:34:66:e6:2d:1f:a8:23:
6a:52:e5:93:a4:a6:a9:5e:b5:3e:7e:a4:ee:08:8e:c9:24:6b:
72:74:4a:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1SOWpz3co2aLKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
MmE1ZDUwZTgtYmM3Zi00M2Y2LTg0ZGEtNWQxZjUxNzcwZWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAposh0qcF2aj/OHzsH7gIHNGJcjKMM1O0tBCQ
bDLkkj4JLLzgNu6+yNX+yTZ4mSgBurOdMZE4bQ0a7Ihgp0/VAIhu+zLJzOA9mFOW
brK44QK66szqX12h9faf/V2d4JmnW9lmVbrzYGH/897ZJNOZabxghGrt9u224Qf+
j+Dp+oY3S04myv4ygt5lYloZP0viBlX/wMTrc+OllUYIckbK4BBmwWN/PqsJtkBf
+ElRgQ9fNhLWA+B4mT8SCXvaDBWN1j4yKSiRdomqBp0jR7Y7jgQTPqqLGAeEA58A
Gbb/6BdKj9ZrBVighAKzPTPF7hMXpQodWjERA3ya/ziTY7pVBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJDVtLjWFnI59rGF1s4taYZMsADMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTQ4ZTg5NjUtYzlkMC0z
ODNlLTgyYzEtZmQ3MTNlNmEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJW6xwqqHtMF5OMn3q9MA2HV07gysMq08e/b/Jen9nniNhX9vhLhgMwI
mLkn0fBA+SF64LgsHwkAdpcVBqHZb0mWoAbmtvXlIKaPnqxHsqCGc13KSwf7MwSr
aCKgxp/IkKPb8KhINBISfJkQWENigvGEp5f37jd6BZRltsqRvoPO3hQNUZR9+L+L
h2FP3IpGkSXVo565KefPOwIuIFZrV4cCElPI/zMKVpd6nixdoVvERdiL2RzviQMq
h33ieKgGtLffQwpcipUWVcI5myHddJaRTFytMUT8alzTAB/boT+TYo1RNGbmLR+o
I2pS5ZOkpqletT5+pO4Ijskka3J0Slw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:52 2025 by rpki-client