Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
File: cbb47c14-2799-3b64-87d8-2264da5e3862.roa (raw, json)
Hash identifier: CDtMqkEoMQ0+5lVC8bLeH8EZLeoOW1mqlbJTkWrvrzU=
Subject key identifier: 2D:F8:6C:93:D1:49:7D:92:3E:DB:EC:94:1B:BF:61:92:AF:FC:2F:9D
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D524346BA126AB809D5800
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:24:34:6b:a1:26:ab:80:9d:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=fc846e02-b38a-4efe-bfe5-f35b526225b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:be:8a:35:cf:2b:07:6f:4e:b8:d1:91:8a:
47:9e:fc:1f:15:f8:31:d4:fc:0f:ad:21:4f:fe:4c:
b4:4f:82:1f:b0:c6:f6:13:1a:7a:5b:22:49:e9:c1:
85:ed:72:48:d3:7a:8a:a3:a4:a6:ae:fd:f0:e8:8d:
cc:62:c2:78:f0:13:9e:07:97:3a:30:2a:9c:ea:c9:
08:54:94:d2:27:71:53:5b:35:42:e8:ea:f3:a9:f2:
59:ac:75:85:b8:4d:0b:d6:54:d6:e1:8f:4e:46:26:
6a:30:c5:c0:5d:e6:ba:10:53:e3:24:10:00:22:69:
ae:31:2e:d6:20:c2:2f:3c:13:fb:b2:00:07:5e:ec:
a2:10:ad:fa:8b:d6:bf:09:31:4b:7d:67:80:d3:29:
99:57:bf:de:d7:cf:7e:b4:99:6d:f6:79:1e:e7:d7:
fe:bc:e7:7e:1f:62:b3:e6:e3:20:89:57:bc:86:3e:
56:47:5c:34:0b:85:12:d5:d9:4d:4c:84:e5:4e:24:
88:20:a0:81:09:80:36:66:f8:fd:a4:72:93:de:8f:
68:3f:c9:5d:1a:aa:59:2c:e4:a8:7d:fc:ff:2d:e2:
4f:e5:37:02:f6:2e:ea:24:4a:ad:61:3c:60:27:60:
38:1f:5b:14:a3:71:b5:61:9f:fd:f5:46:ed:09:bb:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:6C:93:D1:49:7D:92:3E:DB:EC:94:1B:BF:61:92:AF:FC:2F:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbb47c14-2799-3b64-87d8-2264da5e3862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f5:0b:13:89:65:cd:df:b7:f9:0e:a1:3d:87:61:d3:bc:65:
83:b1:39:a7:e2:c5:c2:cd:fc:7a:82:18:88:c0:a3:ba:40:bf:
fb:a9:38:9f:81:ab:b8:1c:6a:ab:1d:e2:fe:9d:21:60:f6:f0:
98:87:62:63:02:be:4e:0b:b4:cf:b4:39:93:d9:b9:c8:d4:93:
f8:a2:4a:82:99:8e:2e:ef:f1:06:ce:b4:15:b7:6c:19:09:4f:
63:d5:04:b3:d7:82:ea:99:ec:8e:e8:a3:ee:5c:9f:a2:33:8f:
63:40:fe:a9:52:b7:f1:60:16:97:c8:ef:70:fe:2b:d3:30:f9:
a4:b7:0d:61:33:4b:75:0d:23:1a:84:95:b2:28:c5:be:83:a5:
23:25:45:3f:de:4f:58:bd:a7:38:b3:b2:62:2f:60:ec:b4:0c:
3d:00:ae:61:c0:93:d9:d9:a1:23:d1:3f:c9:9a:f1:90:7d:4b:
92:ee:a1:74:c8:b7:ab:98:0a:ca:17:5a:f1:dc:c7:cf:61:e9:
ca:7e:8c:29:70:00:6a:e0:3e:12:d9:ba:76:8b:da:01:98:53:
63:2e:f2:50:d3:ef:3d:6b:4b:5d:d8:6d:90:f6:e1:9a:90:b8:
98:f9:b0:f2:86:fa:4e:e8:8e:f5:c3:43:50:71:70:d1:2e:47:
d9:6e:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:35 2025 by rpki-client