Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa
File: 6e089eef-fbf2-3611-96fd-939251a6b7fa.roa (raw, json)
Hash identifier: rI3HQMdo9zofEEITDygjaW7BwLnRM3g+HQaf4nFWY+Y=
Subject key identifier: 7C:CA:57:B2:C1:64:29:C4:A5:1A:49:49:00:D5:AF:29:C7:71:EA:F0
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D525110D1E0FE0EB869B00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:25:11:0d:1e:0f:e0:eb:86:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=7e1d2541-a721-4336-a3b6-8ae1a30f3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:67:1f:2d:a2:2c:ee:8a:c8:aa:5d:16:c6:
90:53:05:a9:95:aa:ae:b2:71:04:b3:16:b2:01:78:
7d:32:5d:d2:9a:f7:67:0d:36:b3:50:56:c0:7f:90:
b7:2c:6b:18:44:18:e4:f1:ce:72:c7:2d:6d:0f:bb:
d8:93:c0:7d:03:bc:62:e0:9d:89:32:0a:ab:ef:f2:
e2:27:4b:dc:0c:9e:fd:a3:be:6c:1a:37:8e:4b:15:
45:77:0b:4c:bd:b2:da:b1:91:23:f8:1c:1c:e6:7b:
04:19:9a:8d:1d:1e:9f:37:c3:d7:62:10:36:e3:b6:
fe:75:2a:97:cf:2a:c0:52:fb:ba:4c:e1:86:cf:08:
46:b4:a5:83:ad:de:28:5f:89:56:06:59:6e:fb:ad:
fa:72:fe:7a:58:35:ff:3a:1f:d3:f5:9b:d8:f6:a6:
3c:05:1b:2a:39:bf:b2:db:58:cb:19:ef:69:85:ea:
9b:fe:63:a9:15:69:2e:9e:a7:27:8a:a9:d3:70:2a:
ac:65:b5:b2:6a:87:e6:1b:31:01:03:67:46:0b:46:
56:9f:b3:d9:1d:11:a7:a5:06:29:21:35:ef:0d:a6:
18:8c:12:5b:49:46:60:c8:58:de:93:17:11:ac:66:
0c:86:31:1f:f5:0a:1c:5f:04:a8:6d:69:d1:a2:60:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:57:B2:C1:64:29:C4:A5:1A:49:49:00:D5:AF:29:C7:71:EA:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6e089eef-fbf2-3611-96fd-939251a6b7fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:df:57:01:60:13:4d:5e:4b:3b:79:ed:eb:16:ae:de:b9:63:
8d:6d:94:61:3b:dc:00:73:8b:05:6a:7b:ad:b9:1d:70:6b:5d:
39:4c:78:9d:84:42:65:90:f0:05:42:f7:f6:4f:f5:fa:69:5f:
e4:e9:e8:36:07:21:de:0d:71:ae:0c:e0:5c:4f:f6:b9:6f:7d:
0a:c7:15:a9:f8:82:28:27:d3:0d:97:ab:37:a1:be:b6:ba:68:
fb:7c:a9:b5:e6:fc:0a:df:d4:ca:13:a9:18:2c:f9:bd:ad:6c:
92:0b:ef:b8:0f:8b:f2:6e:d9:f6:da:75:63:19:d6:15:2e:87:
f0:c8:2e:a3:dc:0d:e9:77:5a:d1:57:e1:39:95:50:58:8b:45:
43:ae:b5:a8:dc:8e:37:ef:7a:12:bb:b0:49:79:de:e7:c7:98:
0b:59:04:81:f3:28:a7:bc:b5:5c:44:cd:0e:24:b4:63:cb:d3:
26:4c:a6:9d:88:7f:35:75:61:03:27:f2:d1:ce:05:51:76:9d:
e1:41:68:d0:07:bf:b7:14:cc:00:68:00:b7:c5:3c:f6:1c:7b:
bc:8f:08:2a:79:5d:53:4a:66:81:28:95:ba:c0:a3:7d:ad:4c:
a3:f9:8a:23:92:2c:b9:b0:90:2b:52:03:66:5e:a6:b4:b0:6f:
9c:b5:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:10 2025 by rpki-client