Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa
File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json)
Hash identifier: R8BrlCXlTCySP26Ngb1iAUD+21kpev4U5gZmGKSdaVg=
Subject key identifier: DD:0B:8F:5E:0E:2B:A7:74:FE:BA:39:23:47:DE:3B:97:E6:72:BA:E6
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D523D9E1CC9878F58B4400
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:23:d9:e1:cc:98:78:f5:8b:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=96b80351-33bd-4187-86b6-f5217d756fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:e5:8c:0d:2f:19:79:c8:c8:38:8a:b7:59:
e6:b4:0a:b1:f8:ec:14:90:05:d0:2e:07:49:4b:53:
19:1b:26:46:18:3f:90:a1:ee:20:51:65:7a:d0:3d:
64:bd:ae:6e:7d:0f:3e:17:93:0c:96:ee:50:ba:bf:
a4:fe:ea:83:b9:8c:cc:fd:13:87:39:5f:f3:c8:94:
eb:61:e1:73:bb:ce:96:ef:39:86:34:46:87:62:ae:
4a:d6:33:0f:02:13:4e:4d:a8:c2:18:aa:80:d1:ad:
fa:bd:c7:2c:24:51:7a:98:a1:0a:33:76:a5:75:78:
af:69:86:b9:55:09:1b:7b:22:9f:e8:dc:8e:31:b2:
a2:59:73:4b:8a:22:cc:0e:29:01:a2:0b:ca:18:d6:
4b:78:18:3b:2b:59:38:36:4c:11:16:46:f4:86:75:
60:71:a9:d6:37:bd:d8:24:8f:76:b6:c2:00:12:10:
28:73:fa:5f:5f:67:99:93:9b:b7:40:79:85:9c:a8:
2e:2f:55:f4:09:a1:fe:ad:b0:39:36:d5:50:85:bd:
39:43:9b:98:c0:e8:70:00:f7:d1:1f:2e:39:f4:d6:
3a:9f:1a:1e:0b:c3:95:41:73:a7:c4:15:a5:24:4e:
42:0b:2c:a9:dd:92:e4:f0:e5:d7:be:4d:33:14:cf:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:8F:5E:0E:2B:A7:74:FE:BA:39:23:47:DE:3B:97:E6:72:BA:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:95:0f:01:8e:93:ee:4b:fa:54:40:2b:5e:db:26:b9:25:3d:
e0:a5:23:82:9d:90:30:67:30:f2:24:de:e8:6e:7b:53:5d:89:
d5:eb:ed:60:01:86:f8:03:ef:7d:9d:e5:27:3b:7c:a1:7f:cb:
73:6a:09:51:a0:7e:e2:56:0b:2e:57:3c:e8:4c:39:f3:44:8a:
f5:bc:72:45:5f:2c:4f:87:2c:5e:5d:b8:fc:8b:bb:b1:f9:bd:
9c:07:ec:eb:7c:89:a6:c2:be:9b:86:25:60:9c:45:7c:3f:30:
b4:95:83:11:b8:14:b0:ca:5d:af:77:84:1d:67:33:99:69:13:
db:28:60:38:08:d1:77:ec:ba:e9:f6:9a:79:5f:ad:da:7b:a6:
49:78:f7:dd:a9:bb:cb:45:40:34:c5:70:2d:d7:d5:96:90:0d:
66:b4:69:8b:98:68:a2:94:37:5e:83:42:20:96:49:00:c0:77:
4d:d2:2c:d8:83:ba:08:18:8e:67:4e:50:41:ef:b0:15:6a:4e:
00:aa:6d:95:6f:db:aa:f6:c0:6c:ad:cd:68:ec:f3:12:05:99:
e2:58:18:87:18:77:8a:c8:14:fa:af:1b:db:8d:aa:ed:0c:26:
7f:92:89:a4:eb:c9:9d:92:d8:a1:27:e4:c4:40:6a:af:df:3a:
df:bf:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:12 2025 by rpki-client