Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa
File: ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa (raw, json)
Hash identifier: 382fHYykNeyiZBuZwZJAaaXkEZfP2HxjYGsDzF18Myk=
Subject key identifier: DF:E0:56:AE:EB:54:C7:CC:A5:65:E5:73:BA:0E:81:E9:CE:3F:BE:C5
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584855D599A2BDE4712DFFAB1A80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 397182
IP address blocks: 149.96.184.0/22 maxlen: 24
149.96.188.0/22 maxlen: 24
149.96.192.0/24 maxlen: 24
149.96.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:99:a2:bd:e4:71:2d:ff:ab:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=6a2283cc-04b1-4314-9e64-6efb1862f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:e3:12:6f:a3:9c:fd:d3:a3:48:e0:27:3e:
8c:06:cc:50:cf:56:32:96:5d:61:c2:a4:df:9a:16:
cd:55:2c:40:16:37:e6:cf:62:e9:ec:e1:08:12:d0:
8f:cb:e2:af:ce:06:3a:3e:53:21:33:f0:2f:d2:4b:
ce:8b:6c:9e:d9:32:3b:00:9b:52:91:fe:25:30:c5:
c2:85:07:87:2a:04:c9:8e:b5:01:d1:d9:0c:7c:9c:
b3:6b:e7:7c:6f:f7:9f:3c:92:a3:d5:8d:6d:be:7c:
8c:23:50:6a:bf:9b:e0:89:54:80:a5:58:11:e4:a3:
96:5c:0c:af:41:0f:a3:19:4e:34:93:05:69:86:a3:
65:29:48:28:98:40:d2:b2:ea:36:9e:b8:a3:a2:b2:
1a:2f:a8:b2:99:47:60:20:b0:f8:82:ac:d2:e1:9f:
97:5c:bb:35:93:f8:5b:70:73:f0:14:b1:08:6b:39:
69:77:68:1b:33:74:d2:e0:52:aa:73:b2:70:72:50:
59:ed:5f:ef:dd:b3:31:d1:6f:01:aa:79:73:9e:7c:
d4:53:80:dd:9b:63:08:a1:d7:2e:0c:7e:b8:82:cf:
db:cc:1f:2e:3f:8e:2c:20:48:48:90:da:cd:85:f9:
03:3c:84:19:b5:42:98:79:56:a1:c7:33:48:72:1c:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:56:AE:EB:54:C7:CC:A5:65:E5:73:BA:0E:81:E9:CE:3F:BE:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.184.0-149.96.193.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:20:6b:a5:fc:1e:c9:2b:86:99:4c:e2:d2:ae:78:14:5d:d1:
25:df:1d:70:b1:a3:8d:3d:e1:47:52:b8:fe:50:e5:19:cb:1c:
0d:b6:83:96:b4:2e:28:ff:42:ba:39:cc:1e:45:43:6d:a1:c6:
e7:e3:35:cd:98:65:e0:05:00:3c:fb:9d:59:b0:65:5e:9b:3c:
c9:7b:d9:66:45:a4:04:f2:91:86:ff:59:d2:e9:f6:51:96:d3:
e9:f4:94:bf:3d:5c:bc:8c:d0:11:de:da:bc:89:04:e3:4b:4c:
1c:03:c2:14:1c:35:11:1d:6b:7d:ba:2d:59:bc:05:e3:0e:d9:
cf:14:97:e6:52:1b:dc:b8:a2:f1:97:35:39:dc:0f:2b:c7:ed:
d5:f6:2c:8c:e1:ca:66:3e:c2:7b:65:5a:d4:b6:96:51:ac:fc:
ec:8d:a5:f9:9e:4c:5e:dc:60:a7:ca:71:0e:a9:d4:b9:08:93:
a6:9d:b4:d9:d1:00:be:09:67:05:e4:52:5d:f9:b0:f4:95:aa:
e9:b4:d5:42:75:19:9e:88:b3:50:81:d2:92:27:bd:e4:5b:23:
e4:be:eb:25:59:7d:43:5d:75:fe:7b:41:e8:de:9b:81:76:5d:
f4:3a:14:c7:ed:2e:ad:d7:34:e8:6a:5f:a1:c6:79:fd:a8:b9:
91:80:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:30 2025 by rpki-client