Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa
File: 96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa (raw, json)
Hash identifier: ioM1YvWENIgpfS04YLr9z0MnGd3wz0Rp8H5ImcXNYE8=
Subject key identifier: 06:01:90:D9:3D:08:D7:3B:84:7A:DC:18:20:1C:66:3E:0E:50:96:C7
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D522D157B7D4EB8AEBEA00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:22:d1:57:b7:d4:eb:8a:eb:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=b70d6b95-604f-4708-8e91-2c6c8dd1b95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:9f:a2:c5:57:ae:f7:07:9d:34:25:7b:c7:
fe:46:45:0e:cb:d0:28:23:34:d3:82:6c:98:5e:c6:
1f:c0:2f:ec:2b:ea:5c:43:88:b7:b1:8e:e2:ac:74:
69:42:f6:18:03:96:64:06:70:63:b5:1c:97:b4:23:
3e:96:96:cc:fd:9f:6b:3e:76:cb:1a:5e:fb:78:88:
a0:70:27:a7:10:c6:71:6b:ff:cb:bb:cc:c2:dc:60:
cb:f2:97:62:91:fe:8c:17:2a:ec:9d:71:91:0b:e9:
32:94:10:6a:1f:21:aa:30:f1:03:8f:9a:cf:89:13:
84:f3:29:a2:4c:4d:96:04:36:fe:b5:43:25:3d:b1:
9a:fe:cb:ed:8b:8e:82:ed:d2:45:37:18:0c:2f:e2:
48:04:cb:77:0d:7a:52:9d:01:2e:c9:ea:de:ce:be:
6b:96:cd:a2:dc:5f:4a:b0:a0:c8:04:f9:b2:11:f3:
76:8b:8a:81:c3:4f:58:4e:ca:91:ab:98:b2:ff:33:
8c:2f:95:a6:0f:1d:cf:5a:5f:a7:ca:1d:40:80:a6:
90:c3:82:1d:6b:7a:5a:4d:fc:4b:93:ce:84:81:40:
30:d6:22:82:28:29:a3:28:da:aa:50:5a:7f:9c:8d:
d0:11:8a:7a:a2:96:a4:3d:58:29:e1:94:01:ab:02:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:90:D9:3D:08:D7:3B:84:7A:DC:18:20:1C:66:3E:0E:50:96:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/96f59d5f-81d6-3d98-b66d-c5e96735b3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:82:a7:00:d8:d3:6f:93:99:bf:ba:56:31:55:75:c0:e3:48:
0c:4d:65:ab:f1:7b:1f:b5:8e:25:c8:23:91:30:f1:c1:6d:85:
f4:26:71:05:db:20:aa:5a:d4:fa:aa:b7:1f:84:2d:32:91:13:
26:2d:e2:3d:2d:72:03:ab:fe:50:b1:fd:77:d7:e0:69:59:bf:
04:b4:d7:3d:06:fe:38:a9:a7:2d:fb:05:50:e4:8e:81:35:86:
5f:11:3c:78:05:da:81:00:f4:b5:23:75:f2:40:15:40:3a:48:
b3:1d:2d:84:c0:b0:9d:94:ea:36:f5:f4:97:f6:c8:4f:da:ed:
81:08:b3:ff:8e:68:56:aa:cc:0e:80:2e:fa:e1:0b:be:18:1f:
2e:ca:09:7e:de:2a:b6:46:ee:06:fa:b6:e4:f4:20:1e:30:4b:
95:50:8a:8f:ac:fb:9a:60:27:2a:12:b9:53:a1:4c:cf:8f:31:
87:3c:23:bc:56:5c:16:21:27:23:3b:dd:39:fe:82:e8:53:0b:
76:61:c1:a0:7a:cf:3d:c9:fd:8a:d9:bf:7b:30:62:1a:e4:74:
6c:60:e1:df:de:e2:5e:6f:8d:2a:27:1a:53:91:10:70:5b:fd:
25:49:d5:13:e4:d6:25:22:7a:f5:4f:8d:07:9c:fe:a1:a6:c3:
91:aa:c0:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1SLRV7fU64rr6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
YjcwZDZiOTUtNjA0Zi00NzA4LThlOTEtMmM2YzhkZDFiOTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYqfosVXrvcHnTQle8f+RkUOy9AoIzTTgmyY
XsYfwC/sK+pcQ4i3sY7irHRpQvYYA5ZkBnBjtRyXtCM+lpbM/Z9rPnbLGl77eIig
cCenEMZxa//Lu8zC3GDL8pdikf6MFyrsnXGRC+kylBBqHyGqMPEDj5rPiROE8ymi
TE2WBDb+tUMlPbGa/svti46C7dJFNxgML+JIBMt3DXpSnQEuyerezr5rls2i3F9K
sKDIBPmyEfN2i4qBw09YTsqRq5iy/zOML5WmDx3PWl+nyh1AgKaQw4Ida3paTfxL
k86EgUAw1iKCKCmjKNqqUFp/nI3QEYp6opakPVgp4ZQBqwIfXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYBkNk9CNc7hHrcGCAcZj4OUJbHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTZmNTlkNWYtODFkNi0z
ZDk4LWI2NmQtYzVlOTY3MzViM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGCpwDY02+Tmb+6VjFVdcDjSAxNZavxex+1jiXII5Ew8cFthfQmcQXb
IKpa1Pqqtx+ELTKREyYt4j0tcgOr/lCx/XfX4GlZvwS01z0G/jippy37BVDkjoE1
hl8RPHgF2oEA9LUjdfJAFUA6SLMdLYTAsJ2U6jb19Jf2yE/a7YEIs/+OaFaqzA6A
LvrhC74YHy7KCX7eKrZG7gb6tuT0IB4wS5VQio+s+5pgJyoSuVOhTM+PMYc8I7xW
XBYhJyM73Tn+guhTC3ZhwaB6zz3J/YrZv3swYhrkdGxg4d/e4l5vjSonGlOREHBb
/SVJ1RPk1iUievVPjQec/qGmw5GqwAs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:28 2025 by rpki-client