Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa
File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json)
Hash identifier: kiLfpYLrjrtET/rVG2bhDLd52UnNSYqxmt4+AtWkBQY=
Subject key identifier: 52:B3:39:AE:3A:43:0F:42:26:0C:43:42:16:12:43:7B:5A:8D:47:B6
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D5237B8923F67F23900EC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:23:7b:89:23:f6:7f:23:90:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=19e0517c-534a-44c8-8409-da23fadd78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:58:2a:17:6f:e2:5d:a0:22:40:33:96:57:
6a:c3:fc:2b:53:d3:92:b6:7b:1c:6e:c7:ef:db:7e:
2a:40:fb:a5:22:fb:5d:c4:95:77:d6:ba:34:3d:40:
32:2e:dd:ac:6d:e3:38:e6:af:6f:41:11:4f:63:c3:
b1:cb:cc:4c:3b:b6:ba:45:e2:bd:6a:5e:cb:1a:29:
00:8a:e1:04:3f:1b:26:f9:d7:12:ca:dc:70:80:9c:
d7:47:18:a7:e1:ac:cd:2f:31:58:af:e7:4d:f2:cf:
c3:47:50:d4:ad:0a:0a:5f:38:9e:42:e2:68:d7:08:
2e:55:4d:17:3f:f2:a9:16:e9:9c:18:85:90:cc:0b:
4e:e1:49:10:05:df:4e:04:5d:03:f0:7a:0f:ba:5d:
68:20:8d:76:7a:8f:ff:06:bb:66:5b:ca:eb:23:b8:
b7:4c:b5:9c:c5:21:ed:0c:32:48:19:4b:dc:0a:43:
2e:1f:18:7b:de:d5:a2:eb:80:0b:52:2f:37:b6:58:
14:86:35:cb:ee:fe:47:02:7c:8d:9e:b8:02:02:49:
25:03:e7:e7:03:c2:9f:5b:e4:3e:69:e0:dc:40:5d:
51:5e:e7:c4:49:20:60:96:f0:09:e4:06:f1:dd:db:
9a:20:2c:b7:2b:7b:9a:98:c9:c0:d9:5b:0a:03:b0:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:39:AE:3A:43:0F:42:26:0C:43:42:16:12:43:7B:5A:8D:47:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c5:06:c4:f1:53:fc:41:03:9c:30:18:eb:16:2a:99:0c:76:
0e:14:80:65:6b:48:51:81:31:c1:69:bb:7f:0c:aa:2c:1f:bf:
f3:0a:eb:d1:4c:ed:18:32:10:81:c0:16:da:26:8a:ec:af:45:
9a:8d:c5:b8:0d:d0:a6:f0:84:e8:50:fa:33:41:61:07:dc:32:
70:d9:11:d0:d9:e6:09:d8:cf:c3:4d:06:40:60:d8:fc:ee:f4:
c3:3e:ce:3d:f6:a8:b5:5c:07:34:e1:25:45:92:e0:2a:b3:07:
f2:b4:ab:0a:af:35:12:49:c4:1d:56:53:ea:82:9f:ad:0d:31:
21:15:79:4d:bc:28:05:5e:79:73:e8:66:47:cf:93:cc:ec:5d:
e4:46:a6:0f:95:2a:b8:4d:48:5b:a4:91:ff:5b:26:86:18:6b:
e6:3b:de:31:e3:67:f9:0c:f0:70:08:dd:9d:72:2b:17:37:db:
17:6a:df:13:d5:f3:ad:df:7b:68:63:5f:bb:22:29:03:79:08:
2e:d7:bc:b0:3c:e8:99:74:0a:59:d3:7d:d5:86:18:08:94:6e:
52:c7:6c:d2:91:d7:34:db:9e:64:c8:a2:c2:1e:8f:27:d2:18:
53:2a:ba:92:28:e6:32:19:f5:af:3b:78:fe:e6:74:06:a8:66:
a6:e1:c2:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1SN7iSP2fyOQDsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
MTllMDUxN2MtNTM0YS00NGM4LTg0MDktZGEyM2ZhZGQ3OGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxVYKhdv4l2gIkAzlldqw/wrU9OStnscbsfv
234qQPulIvtdxJV31ro0PUAyLt2sbeM45q9vQRFPY8Oxy8xMO7a6ReK9al7LGikA
iuEEPxsm+dcSytxwgJzXRxin4azNLzFYr+dN8s/DR1DUrQoKXzieQuJo1wguVU0X
P/KpFumcGIWQzAtO4UkQBd9OBF0D8HoPul1oII12eo//BrtmW8rrI7i3TLWcxSHt
DDJIGUvcCkMuHxh73tWi64ALUi83tlgUhjXL7v5HAnyNnrgCAkklA+fnA8KfW+Q+
aeDcQF1RXufESSBglvAJ5Abx3duaICy3K3uamMnA2VsKA7D7ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKzOa46Qw9CJgxDQhYSQ3tajUe2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z
NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrFBsTxU/xBA5wwGOsWKpkMdg4UgGVrSFGBMcFpu38Mqiwfv/MK69FM
7RgyEIHAFtomiuyvRZqNxbgN0KbwhOhQ+jNBYQfcMnDZEdDZ5gnYz8NNBkBg2Pzu
9MM+zj32qLVcBzThJUWS4CqzB/K0qwqvNRJJxB1WU+qCn60NMSEVeU28KAVeeXPo
ZkfPk8zsXeRGpg+VKrhNSFukkf9bJoYYa+Y73jHjZ/kM8HAI3Z1yKxc32xdq3xPV
863fe2hjX7siKQN5CC7XvLA86Jl0ClnTfdWGGAiUblLHbNKR1zTbnmTIosIejyfS
GFMqupIo5jIZ9a87eP7mdAaoZqbhwq8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:55 2025 by rpki-client