Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa
File: 249c943d-b89a-3ace-b703-d24eed8a0e72.roa (raw, json)
Hash identifier: BXN9EKya38vDQrBItJUjycGAbmevJNVUH+Cx4efjAaM=
Subject key identifier: A3:01:EB:1F:3A:51:AD:6B:61:43:64:3A:91:C7:68:44:45:43:13:E7
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F80417264B1B3DA07AE4F00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:41:72:64:b1:b3:da:07:ae:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=3e028764-8f98-460f-9920-05c9edd2e9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:de:c9:b0:89:7b:3b:ff:1f:bf:65:68:0c:
15:f7:3a:04:95:ea:78:f8:c7:24:06:80:f9:a4:da:
f8:78:0f:47:f7:d8:c6:74:dd:59:1d:84:ad:ef:46:
b6:cf:6b:b5:15:72:ad:f4:d5:37:23:e3:cc:f0:10:
f9:de:b5:81:bd:a0:76:13:0b:03:4b:90:f1:3b:3e:
b8:db:94:1f:0b:8f:5c:54:c2:22:56:f1:4f:44:58:
ce:1b:16:85:1d:45:e1:5e:51:85:b9:86:50:a2:b2:
7b:1e:99:56:94:df:b1:d8:ed:81:92:0b:ff:ee:b1:
fb:31:c4:bf:83:09:8f:23:a1:2e:15:f4:ad:25:b0:
7f:f3:73:e6:f6:87:95:e6:4d:35:78:e6:a0:e6:0a:
e6:5d:99:90:72:f0:63:9e:8a:b6:66:8f:5f:ef:4d:
d1:a0:2b:8c:99:ff:4b:ea:95:78:30:5e:06:ba:55:
1b:0b:5c:b1:4d:1d:e5:f9:0f:6f:43:c1:23:18:bc:
8c:aa:6b:dc:1a:6d:67:98:7e:de:73:29:cf:b5:1f:
80:75:d8:6e:47:76:14:7a:1f:25:de:0a:d1:75:a0:
9d:de:77:06:98:55:a0:be:c3:49:0b:35:1f:53:10:
cd:aa:f0:f8:8c:3c:65:91:da:5c:0c:f9:b4:dd:50:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:EB:1F:3A:51:AD:6B:61:43:64:3A:91:C7:68:44:45:43:13:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:a8:51:ff:b2:0c:2d:8e:bb:61:08:77:41:ff:af:a1:bc:6c:
c3:1d:ff:41:1e:e4:03:d2:e4:ff:16:43:5c:2f:71:76:04:f1:
e8:b1:75:95:09:a4:97:40:03:f8:3a:cf:f6:a4:ff:6a:3a:4a:
57:3d:68:b1:37:24:b3:df:12:03:79:73:d3:0a:00:2a:63:ee:
61:f5:76:95:cb:08:8a:9e:0c:67:38:6e:2b:b8:ea:77:c6:07:
a0:d3:e0:1f:39:c1:12:c1:bc:8f:3a:e9:66:ff:f5:4e:ee:08:
ab:b8:96:bf:2c:26:aa:c0:a4:bb:f6:c1:f8:83:f5:a7:8c:04:
c1:69:11:19:30:76:05:6a:c0:72:75:b0:ea:31:40:be:b4:ed:
06:24:d3:0f:de:1e:43:45:ce:58:48:06:cd:56:24:a4:38:2f:
8b:8e:1f:2a:1c:84:5d:15:ca:d0:e8:88:e1:8d:fd:b3:1a:74:
70:c4:6d:a0:a7:16:76:ac:6b:cb:24:42:aa:a7:da:44:f6:16:
38:df:4b:a5:d7:64:5f:01:c8:f0:c0:d5:b9:15:3f:bd:4f:f7:
60:b4:82:91:21:fd:8d:51:3f:4f:d1:d6:38:b9:ae:c3:6a:cd:
a8:a0:40:e0:e7:77:a5:12:df:30:f0:34:5a:33:3e:cb:ac:0f:
96:61:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:40 2025 by rpki-client