Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bf0df034-e7e6-3186-82c9-3c619c919c76.roa
File: bf0df034-e7e6-3186-82c9-3c619c919c76.roa (raw, json)
Hash identifier: IV6nJUp2G+hQpCMgAwjPVgYkGmjwYy6L41q+ZQEgf2E=
Subject key identifier: 50:23:A2:0C:26:27:6E:FE:35:78:C3:AA:E3:6D:BA:1A:1C:13:19:93
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F804145F9636BC5861D5D00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bf0df034-e7e6-3186-82c9-3c619c919c76.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:41:45:f9:63:6b:c5:86:1d:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=4b9acb0f-cadd-4395-83d5-a87e71d6d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:92:bd:8f:6f:a9:a2:22:21:cc:4d:11:97:
7e:d8:51:6a:d5:bf:55:66:c5:56:b3:65:aa:46:2b:
10:bb:90:c6:38:05:f6:e9:12:d2:43:d8:e5:d7:bb:
8b:28:99:c8:25:83:61:fe:d5:ba:67:2a:f5:42:7a:
5e:f2:50:2c:b3:1d:26:dd:a4:c5:82:43:2e:61:46:
e5:45:6d:83:8e:23:ea:1f:44:a0:6b:51:59:92:26:
7e:c0:4f:de:b6:c7:ed:6c:17:06:a2:14:d7:7c:31:
76:6d:e6:26:99:19:af:87:00:36:62:ba:61:93:7e:
4c:7e:5b:b7:1d:7f:1b:05:da:5a:c6:d1:4c:fd:f0:
fd:af:3f:42:8a:a4:a6:dc:96:da:ab:63:2c:41:26:
33:a3:3e:7e:f2:65:db:63:8b:48:72:b2:f2:53:ea:
28:cb:07:5d:2b:27:71:2b:d4:4e:58:54:3f:82:93:
f9:41:a6:7d:3e:81:72:3d:c9:dc:b9:7e:bd:31:fe:
c1:66:1e:80:2d:7e:05:96:a9:cd:54:83:ac:3a:88:
16:2c:f8:d0:0d:84:d9:8a:e0:9e:36:33:0b:bc:ec:
92:07:5f:15:86:f5:9d:a5:4f:0c:ae:ca:f3:a8:34:
ab:6b:43:0d:3a:e0:02:52:7c:7a:6a:eb:77:26:05:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:A2:0C:26:27:6E:FE:35:78:C3:AA:E3:6D:BA:1A:1C:13:19:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bf0df034-e7e6-3186-82c9-3c619c919c76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:89:6f:aa:7a:f9:35:09:34:4a:e7:13:0e:ce:d2:4e:a7:f6:
da:b5:5e:1d:85:fc:68:76:8e:d7:f1:4b:24:bd:da:13:8b:8b:
41:fc:25:9f:5e:da:df:d4:e9:cb:ff:ab:1f:36:b7:73:b8:59:
36:b0:7c:21:71:ac:d2:ec:6e:fb:c5:17:44:87:d4:ae:c4:46:
2e:83:18:ac:08:2f:7c:e3:13:69:b6:80:90:35:51:fd:f7:a5:
c9:2b:32:40:27:89:9b:c0:84:70:81:2e:2f:74:bb:22:76:9b:
13:67:81:0d:0c:09:11:1b:ef:68:13:82:e1:d2:3b:84:55:70:
a4:9a:75:ee:1a:6d:2c:29:40:02:b6:8e:29:58:fd:36:34:7c:
3e:4c:84:37:b5:a1:1e:df:b2:df:2e:c4:79:d7:41:a2:44:51:
d3:72:ad:6d:06:5e:16:00:10:b7:bb:be:93:28:3f:80:cd:64:
2e:c6:ac:64:56:6e:00:aa:6b:74:0e:c8:31:9d:d5:5f:51:29:
c1:e1:12:ab:6a:84:87:13:22:b9:5c:a3:b9:27:f3:fd:48:4b:
ab:28:96:0e:6d:7c:03:47:51:ea:42:7a:e9:07:bc:45:8b:f5:
56:7e:39:79:c0:82:bb:fc:0e:34:b2:bc:52:23:d5:c7:10:c0:
df:b0:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:14 2025 by rpki-client