Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa
File: 7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa (raw, json)
Hash identifier: TX5sr9oZ1Hs2652/S02LNXCTR2PKvvkq48WCmZUIQb4=
Subject key identifier: 9A:0E:94:74:14:53:9C:95:CF:C5:BC:1A:95:4C:6E:CB:82:95:28:8B
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803CA3D4596A29DFE27E60
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3c:a3:d4:59:6a:29:df:e2:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=3bfcebec-1640-41b3-a5ca-51ffa91d27cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:bd:7d:bb:ca:5d:22:22:c6:0a:46:b7:48:
59:43:1e:86:8f:2f:16:59:8a:d2:43:e8:f2:de:a6:
54:78:23:c3:ec:e7:67:50:2b:dd:a9:20:7b:34:66:
76:4d:db:ea:b5:c8:80:0c:f9:9c:c6:a3:81:f7:49:
1b:b1:d1:7d:99:85:03:e8:98:f5:5e:ee:7f:7f:8b:
84:28:59:3a:9c:69:a8:03:4a:5d:f3:6d:a5:ea:6e:
c5:88:b2:2d:2c:f7:7a:f6:2b:20:d0:b3:d3:bf:4d:
f7:20:ad:04:92:7b:86:fa:6a:61:b1:aa:20:f4:db:
e2:a0:9b:44:f2:5c:bf:b3:bc:ac:6b:2d:35:84:2b:
70:ce:69:88:69:9c:7f:86:26:a8:b3:cd:82:b5:e4:
70:8f:bc:2b:c2:6b:0b:23:97:35:47:36:6c:cd:eb:
34:a0:ba:9d:bc:ee:a5:16:7d:a8:b1:1b:6e:73:f5:
61:0a:76:70:60:19:a8:24:95:41:90:99:49:4d:90:
c1:ac:8c:07:e8:56:07:ba:b2:36:83:e9:5b:20:69:
49:5a:04:39:25:b4:29:6d:46:5e:a6:42:ad:ed:8e:
3b:56:43:16:e4:71:7e:db:8c:9a:21:83:c7:79:a7:
88:20:66:2f:33:85:aa:34:0e:66:cc:05:3e:90:92:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:94:74:14:53:9C:95:CF:C5:BC:1A:95:4C:6E:CB:82:95:28:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:96:56:a7:b4:0a:14:4f:8a:45:b3:34:2d:69:b0:17:86:2e:
ef:70:a3:de:c4:22:be:eb:ef:a7:3a:48:6d:db:7d:cb:7a:1d:
7c:92:bb:40:65:57:6a:cd:43:dd:21:35:0b:d6:a7:9d:aa:fa:
b5:70:f8:d1:73:d5:fa:4a:87:30:aa:3f:c0:7f:ff:80:98:3c:
24:62:32:5c:70:39:32:f3:d4:ea:bc:dc:cf:95:f7:fa:eb:26:
76:0f:de:fd:91:51:59:62:ad:9a:35:44:0a:b4:0b:f6:91:a2:
3f:7f:fe:b8:41:57:32:35:08:b8:cd:52:eb:42:1c:6e:7e:89:
33:e7:19:96:cd:c0:52:19:10:2e:73:4c:4c:f6:21:d9:2b:3d:
ec:c3:2e:cb:f6:16:35:00:34:ad:a0:45:c9:67:8a:34:bb:1b:
9e:f8:f6:8d:9b:35:a2:c6:ef:f6:09:81:51:9a:f9:fd:11:e9:
bd:bc:bf:12:df:d0:53:b7:54:1d:34:41:6f:aa:be:fb:aa:61:
11:c6:1a:16:b6:aa:ea:af:64:1a:31:87:1d:43:36:01:cb:57:
c5:29:b8:09:80:65:86:f2:02:3c:3a:08:39:b2:7e:7c:b1:e0:
5f:77:47:98:5f:40:a4:ae:54:1c:42:f7:0a:bf:28:c4:7c:58:
cc:13:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:04 2025 by rpki-client