Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa
File: 4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa (raw, json)
Hash identifier: Rlm80348Tyy5mtuwQeh2ZeMjH4zWnJcoH2jjM9Zk0oc=
Subject key identifier: 93:AD:22:2E:6E:D5:D2:17:74:79:BA:1E:B7:24:50:C3:66:64:84:5D
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F804165F0BA14747B291040
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:41:65:f0:ba:14:74:7b:29:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=a2c7d586-d851-4911-99dd-447fbf9c4d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:6a:6c:8f:07:42:1b:34:72:2e:16:bd:12:
a5:0e:16:91:94:0f:4b:ed:2b:c1:97:1d:8e:b4:44:
6b:f0:69:9e:22:a6:0e:ef:b3:52:7f:70:38:3f:0b:
1b:eb:0b:89:00:0a:05:fa:6b:57:fd:be:59:44:11:
87:29:44:93:cd:c9:82:65:6b:e7:38:30:76:74:4b:
f7:15:64:26:0d:d3:6c:06:fa:8a:70:75:86:74:44:
48:e9:f6:21:41:0f:d0:8e:0a:2b:cc:02:ab:9e:85:
aa:85:57:38:97:73:7e:35:b0:1e:87:78:b7:dd:28:
21:3d:40:e5:1d:d9:4c:d5:b7:53:97:7b:ba:fa:0c:
28:fe:63:0c:0d:74:3d:6c:eb:86:f9:a7:e6:0f:f9:
69:fb:60:cf:88:c1:15:9e:d1:02:b6:10:d7:e2:89:
b9:49:68:e7:31:bc:88:ba:0f:19:6e:3c:06:03:5b:
d1:be:97:d8:b3:66:8d:c3:aa:e3:e5:89:90:09:70:
67:26:7f:76:ef:57:fe:26:91:06:9d:92:17:5e:d4:
f1:6c:5e:82:e8:43:67:e1:82:2d:38:cc:99:d0:b8:
fb:87:96:fd:c4:8a:56:2d:7f:d2:dd:8f:f6:a1:ed:
45:59:f2:2c:34:85:b9:e5:62:64:0f:0e:50:9b:af:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:22:2E:6E:D5:D2:17:74:79:BA:1E:B7:24:50:C3:66:64:84:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:4d:07:4e:59:f3:4c:c9:e5:ed:47:4d:68:eb:08:5b:e5:0b:
ed:d3:4e:a7:72:28:a9:51:ac:a1:7d:02:25:52:c8:8f:c4:d1:
79:c4:70:c6:64:e9:01:35:b8:91:de:b6:4e:e2:11:6a:9e:e8:
08:bd:20:ad:d1:be:0d:1c:8b:88:ff:83:e9:d8:ca:15:0c:5e:
a2:38:68:ab:66:76:08:3b:f3:2a:98:43:ab:97:33:1f:0e:41:
f5:9f:7f:fc:a4:32:13:dd:6c:60:c0:f1:56:5b:9b:3f:26:be:
5c:b8:35:b1:2f:06:d8:9b:17:1e:51:43:80:68:05:b9:13:c7:
c1:b2:33:85:40:86:3b:11:a0:b4:cd:de:0a:88:a1:cd:e4:f2:
5e:04:40:2b:66:00:62:e6:f7:d4:40:25:99:da:22:9e:fc:d9:
9d:ab:38:e0:85:65:16:6a:ce:07:83:e0:15:b0:3a:c7:2e:6d:
b2:46:76:4f:59:e4:37:c1:ab:af:03:23:ea:e9:ca:57:83:96:
d3:7f:91:c8:d8:79:66:d1:9b:0d:0b:7b:60:36:ce:0b:03:7c:
4a:4c:57:54:ba:5b:f5:68:27:21:d7:42:64:5c:33:0a:6b:67:
a0:04:de:32:da:46:95:92:d2:90:c6:a9:bd:07:49:4b:c2:7e:
c9:83:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:49 2025 by rpki-client