Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa
File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json)
Hash identifier: wOV7z+UI0zbjjpsIHC30+IB+IlRZ8opTYBtFNERum90=
Subject key identifier: 8B:98:42:EF:EC:59:F8:07:61:07:41:A5:32:75:DD:2C:D7:60:28:60
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D524F565886FE3B96BCF00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:24:f5:65:88:6f:e3:b9:6b:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=4f07006d-9029-4d75-b461-7b0d3482a61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:a0:85:e3:a2:25:b8:18:c3:5a:5c:c2:e5:
b2:e8:7e:32:de:e4:15:9e:2b:1c:18:17:a1:f3:d4:
02:77:d6:9f:69:e1:67:2c:2a:e2:04:dd:60:a0:44:
62:b5:bf:be:0b:88:fd:55:79:6c:94:ef:2e:cb:58:
55:6e:96:8c:9a:13:18:08:f9:9c:65:35:c3:b0:47:
19:3c:c6:08:1d:29:32:62:78:8d:f6:ea:97:55:2d:
80:df:89:dd:3b:75:2c:d6:ed:d5:bd:ae:61:74:f7:
fc:00:49:c5:5a:af:64:81:b0:ed:34:b5:0f:54:86:
7e:cb:8c:ff:74:c0:f0:37:c9:31:8d:85:44:4b:46:
8e:69:04:47:d3:f9:6e:ca:53:a9:d2:ea:67:8d:12:
b5:70:03:6d:7e:d3:45:eb:81:a0:7c:23:c7:6d:e7:
86:51:54:9a:d7:7c:6a:2b:17:48:04:18:5e:27:e4:
09:1d:1d:71:f8:70:4f:4f:e8:19:57:e0:33:67:e5:
6c:d3:72:97:40:6a:b9:02:5d:23:49:06:04:32:24:
6d:44:fc:ba:cb:2d:9d:a3:7c:bb:cc:f7:4c:b5:ec:
fc:1f:f3:76:81:44:96:e4:17:d2:9f:7b:ae:8a:60:
7f:f7:b1:b2:9d:8d:49:98:67:1f:eb:92:c2:ed:7c:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:98:42:EF:EC:59:F8:07:61:07:41:A5:32:75:DD:2C:D7:60:28:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:33:ad:ad:ec:e6:6a:02:45:f7:94:b9:40:70:91:42:71:3c:
68:8a:68:8c:2b:77:df:41:df:9d:72:52:12:d2:ce:e8:30:d7:
fc:0f:b0:38:7e:4b:50:47:5f:a1:c1:6d:68:71:ee:39:00:47:
77:32:74:83:61:db:d0:ba:38:7a:ca:41:60:76:30:eb:82:f5:
fe:9d:df:96:dd:b0:66:1c:69:eb:a9:4e:0e:3a:87:7f:8c:d5:
c4:cf:7c:db:02:74:0c:6b:85:57:98:84:7c:49:e1:c9:a8:6b:
12:4d:d3:4b:5b:1c:2a:d2:6b:10:de:61:bc:01:60:ab:85:a1:
a4:23:d7:0b:b0:81:c0:97:37:12:cf:91:ee:be:ba:9e:5f:32:
c4:81:50:70:05:17:29:09:a3:f3:b0:2c:d0:e1:ad:59:8d:6d:
7d:df:25:0c:6f:c9:18:8b:28:45:ee:d7:54:d7:f4:33:af:de:
e5:ce:51:f5:72:6e:a0:12:e2:0d:b8:8e:ef:eb:cb:78:9c:3c:
5e:5f:53:49:0e:5f:09:ee:07:ad:76:55:f3:fd:b9:49:e4:0b:
d2:47:fc:d0:d6:ca:6f:96:60:48:2f:04:17:91:3c:09:0d:37:
8d:23:2d:b6:09:a9:f0:04:f2:49:41:82:d7:67:9d:b0:74:99:
53:e0:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:37 2025 by rpki-client