Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa
File: 53da01e2-4fd1-3726-8525-261dfe0ace4c.roa (raw, json)
Hash identifier: GiMNZuOpJpCFogx5L63jX3NycVbF+j2lRpbSkdfr0Bw=
Subject key identifier: 81:7C:5E:35:D8:EB:55:44:76:37:08:E0:64:83:65:8F:6D:9E:3D:A2
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D5233FEDBCEFFAC7102500
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:23:3f:ed:bc:ef:fa:c7:10:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=01c4a3c1-2573-4339-8ebb-1db6b4440822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:6c:51:bd:20:6d:af:ee:cc:bf:9b:b0:c2:
78:86:82:fb:7e:dd:93:b7:45:78:6f:85:2b:1c:3f:
de:00:4d:27:c0:24:38:ce:81:1f:5e:c7:29:3e:8c:
2d:06:90:d2:32:89:6f:2b:80:9e:05:80:0b:ff:ff:
9d:1d:ae:c7:4d:6c:12:4a:61:07:34:82:92:20:94:
68:7e:5c:c5:74:c1:b2:15:ae:1e:a1:e3:38:fe:26:
cb:c5:a3:77:32:ba:f3:69:7e:a6:14:14:2f:12:8b:
00:1c:a4:e4:69:a3:44:94:cb:a1:25:87:59:9b:7a:
6c:98:44:8b:3c:ff:21:89:a5:ed:e2:a4:12:5c:23:
0c:18:e1:00:cb:59:a7:5f:74:fb:31:2a:2c:5f:4d:
eb:5b:75:b4:89:18:37:38:db:dd:d6:22:7e:a4:b4:
96:c2:04:2b:c5:cf:27:f9:19:39:55:87:77:d9:43:
89:ef:a1:72:4a:8a:a3:44:ab:5c:38:d3:89:b0:1c:
6c:6a:28:65:a7:82:36:9a:9a:7a:d1:19:4f:bb:c0:
8d:5d:c2:39:92:74:f2:84:21:50:ad:c1:4b:92:10:
e9:45:42:7a:17:ac:59:5d:21:fc:3a:73:73:08:18:
13:88:34:ed:f8:e2:14:6a:8a:85:eb:6a:77:02:c8:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7C:5E:35:D8:EB:55:44:76:37:08:E0:64:83:65:8F:6D:9E:3D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/53da01e2-4fd1-3726-8525-261dfe0ace4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b0:73:06:f4:8c:e6:ac:a2:99:f2:95:08:58:48:c0:a3:fd:
dd:8e:b9:73:39:30:8e:e1:ec:24:51:87:5e:96:93:b9:6a:ff:
12:b2:f3:4e:8a:12:07:80:0c:b3:d8:d9:0c:1e:1d:a9:48:e6:
d9:34:55:18:2a:ad:5c:41:25:2d:ba:f1:1c:36:fd:0d:6d:dc:
5f:1c:48:f0:6c:cb:22:bb:20:fa:f8:ad:e9:e6:85:3b:cc:35:
82:c6:06:7d:ed:06:29:e5:45:1e:7d:7d:8f:51:67:cd:75:8f:
81:dd:b3:72:28:82:42:2f:e1:a2:1d:fc:34:b4:9c:80:80:42:
49:4e:62:eb:eb:9c:aa:ad:b2:0c:b2:25:cd:23:52:8c:95:f1:
3d:2e:fb:da:c7:e4:26:62:81:a1:ff:20:34:0c:c7:78:c8:b5:
cb:64:b1:a4:28:f4:06:63:b6:26:58:6e:16:f8:bc:5c:29:3a:
3c:a0:a8:f9:37:e3:29:22:a1:aa:ff:72:ba:2d:0f:99:db:1c:
5a:14:ef:4f:7f:e6:48:ba:e1:0d:f8:ed:b3:86:12:b3:02:8d:
8e:60:82:ca:f0:ea:cd:8f:13:38:85:b0:47:a4:85:0b:a3:27:
de:f3:e4:f4:74:2c:0e:8d:a4:eb:40:4a:fa:da:7b:ea:03:89:
ec:57:9c:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1SM/7bzv+scQJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
MDFjNGEzYzEtMjU3My00MzM5LThlYmItMWRiNmI0NDQwODIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPVsUb0gba/uzL+bsMJ4hoL7ft2Tt0V4b4Ur
HD/eAE0nwCQ4zoEfXscpPowtBpDSMolvK4CeBYAL//+dHa7HTWwSSmEHNIKSIJRo
flzFdMGyFa4eoeM4/ibLxaN3MrrzaX6mFBQvEosAHKTkaaNElMuhJYdZm3psmESL
PP8hiaXt4qQSXCMMGOEAy1mnX3T7MSosX03rW3W0iRg3ONvd1iJ+pLSWwgQrxc8n
+Rk5VYd32UOJ76FySoqjRKtcONOJsBxsaihlp4I2mpp60RlPu8CNXcI5knTyhCFQ
rcFLkhDpRUJ6F6xZXSH8OnNzCBgTiDTt+OIUaoqF62p3Asj6bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIF8XjXY61VEdjcI4GSDZY9tnj2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTNkYTAxZTItNGZkMS0z
NzI2LTg1MjUtMjYxZGZlMGFjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKwcwb0jOasopnylQhYSMCj/d2OuXM5MI7h7CRRh16Wk7lq/xKy806K
EgeADLPY2QweHalI5tk0VRgqrVxBJS268Rw2/Q1t3F8cSPBsyyK7IPr4renmhTvM
NYLGBn3tBinlRR59fY9RZ811j4Hds3IogkIv4aId/DS0nICAQklOYuvrnKqtsgyy
Jc0jUoyV8T0u+9rH5CZigaH/IDQMx3jItctksaQo9AZjtiZYbhb4vFwpOjygqPk3
4ykioar/crotD5nbHFoU709/5ki64Q347bOGErMCjY5ggsrw6s2PEziFsEekhQuj
J97z5PR0LA6NpOtASvrae+oDiexXnIY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:40 2025 by rpki-client