Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa
File: 85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa (raw, json)
Hash identifier: Aj78GaMKGtO7NyFGPScsJ/xDR7C3PYJIc+wBdZQyWPY=
Subject key identifier: 27:14:6D:6F:33:08:50:56:86:69:8B:F9:DD:90:39:2F:AE:C7:73:B8
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D52570F8D3694B6DEB0C80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:25:70:f8:d3:69:4b:6d:eb:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=223527cf-6180-448c-919b-db74868d5864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:85:2c:7e:c6:8e:c7:c1:f6:1e:5d:53:35:
b9:b0:7f:f4:41:4d:3a:fa:ff:7f:5c:cf:e7:b7:21:
b5:93:29:a0:c1:fe:8e:d7:26:df:99:8e:b2:4b:b6:
53:45:ff:ee:ba:37:96:31:23:33:78:82:f0:17:b9:
79:f3:43:4f:b1:d0:96:34:70:c1:d1:36:9c:46:fc:
94:46:f0:ab:b4:fc:0e:d9:40:57:47:9a:2f:aa:7e:
20:00:00:d7:ba:61:3a:82:19:9a:e9:5b:6f:a0:6f:
cf:06:94:14:de:92:a5:94:29:64:c2:ea:13:e1:26:
39:5f:aa:6e:ac:c9:56:8c:fa:2b:59:79:73:c9:14:
bf:00:a1:45:69:f2:36:c8:4e:99:cd:c8:f8:22:a3:
bf:10:e2:63:aa:fd:43:ee:28:01:66:7c:5f:00:cd:
07:33:94:c5:1a:08:cd:fc:12:95:ec:a1:c8:1c:1a:
3e:8f:ba:e8:fc:8a:c6:da:92:6a:47:34:23:b7:d6:
96:2d:59:40:8d:f0:d2:b1:76:e3:42:6b:20:26:3f:
fc:cc:02:93:5a:90:53:98:ac:f8:13:cb:e4:00:f5:
7a:28:bf:d0:91:23:5f:d1:52:e0:09:81:61:bb:c8:
fd:c3:7e:72:f4:8d:7c:a2:65:d1:75:fc:3c:1d:89:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:6D:6F:33:08:50:56:86:69:8B:F9:DD:90:39:2F:AE:C7:73:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/85e9bfdb-32cb-33fd-b3f7-af3f6485ba14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:85:7a:f7:47:c1:c5:4b:03:34:b2:cf:cc:c4:02:c5:9e:35:
83:91:9a:cb:5c:fb:b8:1f:2d:49:b5:ad:d6:df:eb:d2:7f:c2:
c1:aa:f5:b9:d1:cb:8b:d3:e2:52:86:85:91:17:b3:34:6e:d6:
80:e2:26:ca:4d:9b:a8:cd:40:11:7f:8d:63:f0:11:ab:15:fb:
4a:2a:95:75:ef:a6:ac:c6:18:5c:fc:1c:25:5a:cb:cf:61:40:
7b:c3:f4:b8:98:a1:b1:66:0a:03:a7:22:59:b5:32:10:2a:cb:
21:de:af:ed:11:ad:d5:76:e0:2d:e4:88:e3:f0:3e:36:d2:86:
44:8b:e2:0c:13:11:80:71:17:37:27:1e:c6:f1:b0:3c:b4:f3:
27:a7:0d:b0:ff:7a:51:37:9f:90:e1:c5:1d:6b:d9:98:ad:b1:
25:7e:e9:f6:80:71:36:3b:89:8f:cc:87:6e:5b:bd:83:d3:1f:
94:c7:b6:9b:a9:bb:04:7a:11:9a:7b:03:74:04:dd:b9:bf:89:
54:68:2f:a9:c6:98:d5:3a:d3:8c:0a:66:15:85:c1:a7:9d:31:
e0:4d:d2:2a:94:d3:6c:32:50:91:31:01:37:34:3b:ab:fa:99:
aa:62:dc:8e:cc:c0:9a:ba:7a:65:b0:d0:5f:37:14:37:ea:87:
08:e9:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:25 2025 by rpki-client