Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa
File: b672c24e-ac3a-3a73-9369-af3fde4793e9.roa (raw, json)
Hash identifier: VoE7AGjUNgvPyq8iqwbFZfX083By4CmMZvcpf2/kKA8=
Subject key identifier: 54:0D:A5:B1:54:68:91:C7:64:DE:4C:B6:9F:4F:BB:03:BE:7F:E8:B1
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803C882DE513B279A25370
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3c:88:2d:e5:13:b2:79:a2:53:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=dcac1d5c-e289-48ff-9d2f-8728762379b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:cb:30:10:6a:52:95:d1:6a:91:a7:42:1f:
06:b5:07:87:65:cc:4e:26:62:11:66:76:8d:cc:ff:
b2:79:53:49:c7:5d:7b:7e:93:16:6b:63:e3:59:69:
32:55:49:77:26:1f:d5:d2:b4:97:39:65:25:a2:a5:
fa:88:e2:71:1c:4d:82:d6:33:1c:9b:d8:50:35:a8:
f4:6e:90:a9:b2:74:fc:4b:2c:b6:0f:1a:b4:e9:5a:
fd:f0:50:d4:a4:5b:7b:b3:04:33:08:50:26:56:87:
8a:c0:45:02:0e:3d:75:c0:d9:32:e9:25:54:e9:cb:
c8:2a:4e:21:24:38:24:23:57:28:e7:be:ae:1e:7d:
86:f1:b1:ce:fe:ab:53:69:49:50:52:b9:e8:bb:20:
c1:15:29:d7:4e:26:c2:d8:0e:58:b0:d2:ed:33:3c:
21:c5:40:4d:55:c1:88:fd:cd:8a:23:bb:c6:da:b2:
ca:f3:91:01:24:78:54:b8:4d:83:36:37:61:21:5e:
07:1b:44:11:d8:89:e4:37:5a:78:11:c0:9b:25:91:
d9:93:89:93:c8:af:7a:a9:cf:af:67:b2:fb:d5:71:
f9:84:21:8d:a1:80:05:19:a2:f9:db:d9:05:08:ca:
48:5c:9d:fb:c3:4b:74:96:88:36:bb:17:69:f4:4a:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:A5:B1:54:68:91:C7:64:DE:4C:B6:9F:4F:BB:03:BE:7F:E8:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/b672c24e-ac3a-3a73-9369-af3fde4793e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:6b:f2:79:76:5f:51:24:33:9f:13:8a:0b:74:8c:51:4a:92:
5f:01:95:0d:37:eb:e4:4a:8c:a1:10:4b:ee:74:80:61:a4:bb:
10:75:e4:13:b4:f2:0c:b7:58:bf:92:15:b3:41:5f:fe:a7:d0:
95:1f:fe:c0:30:dd:b8:4d:35:30:fe:e2:f4:ca:f7:3a:a5:f9:
30:e6:25:e4:33:25:5c:06:b2:64:97:ed:51:43:49:d4:f7:22:
b1:84:a2:b6:89:00:20:85:fb:15:5d:e7:77:f4:89:99:ca:09:
fb:4a:a2:3b:68:a3:c4:e7:d4:0a:70:15:e9:a4:59:c1:3c:76:
95:87:f1:74:1a:f7:aa:ec:e9:1a:59:25:96:22:10:09:25:cd:
1d:93:d4:95:70:0b:4f:02:03:4e:4b:c4:e4:81:53:78:1f:db:
66:f6:a8:1a:1f:62:88:44:68:56:d1:27:6c:a9:80:92:a3:c6:
c2:4a:6a:a5:e1:87:08:6a:79:0b:a2:13:29:9a:26:9e:7a:d6:
86:dc:2e:57:00:33:da:be:dc:cf:4b:a8:2f:6d:34:4d:e4:86:
23:93:9e:b6:8a:95:a2:06:8a:a9:52:9f:e2:ee:09:92:27:fb:
65:dc:6f:9a:36:4d:f4:0f:0a:cb:1b:45:58:74:c9:37:8f:66:
4f:ff:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:25 2025 by rpki-client