Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
File: f10cc6f2-a28f-3c55-96fd-806192f823f0.roa (raw, json)
Hash identifier: otbiVjlcDTF/NH+Rm1vqW7sflKTTuG7C8z6Gjm8Qp5g=
Subject key identifier: 0D:EB:E0:85:CC:86:41:C5:7F:15:7A:69:5F:66:17:D8:D6:FA:AC:7E
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803D7E4ACA3F130ECE4750
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3d:7e:4a:ca:3f:13:0e:ce:47:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=1ea68ffd-0688-43d5-87dc-c6be2124d8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:af:9d:a0:46:95:ec:79:a6:1a:ee:df:92:
8e:34:c9:24:c7:3e:05:f4:d6:d7:f2:ec:32:aa:7c:
da:3d:07:d5:1c:b5:82:73:a4:50:13:36:0f:88:bc:
04:4b:8e:d4:c7:f4:ee:c5:1b:e8:40:a1:97:46:c2:
f5:b5:f9:79:3e:66:fd:b3:27:aa:52:20:29:11:e5:
51:fa:82:d2:51:71:0d:4b:a0:89:e5:45:b6:1e:da:
41:03:58:3d:5f:74:59:31:bc:6a:93:04:78:a5:bf:
96:58:c3:14:20:f2:37:d1:41:aa:d1:3d:36:d6:07:
43:72:fb:46:d0:20:8d:18:82:91:b3:8f:8f:86:07:
52:e2:13:ff:08:fa:93:7a:a9:13:8f:5a:74:64:7f:
8f:1d:a5:a8:4d:d1:80:40:76:62:1c:34:03:aa:6c:
7b:0a:c5:ea:f7:c6:9a:2f:dc:d1:f0:5c:cf:9a:b2:
00:51:38:49:07:97:cb:a4:06:6e:1d:51:6a:6d:e9:
21:a2:34:7a:1f:87:50:00:0d:5d:56:e1:85:5b:c2:
78:26:b7:2e:27:32:db:57:c7:6d:d0:f1:41:6d:0c:
a9:d1:e1:b5:07:11:0e:18:08:01:ed:0d:bd:db:b4:
09:fa:5d:89:bd:34:31:a6:ff:c6:40:04:2e:f1:14:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:E0:85:CC:86:41:C5:7F:15:7A:69:5F:66:17:D8:D6:FA:AC:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:d9:db:c5:93:c3:55:b7:a5:31:fe:34:0c:80:c5:e3:e8:94:
49:51:13:4c:db:b3:75:b8:38:9b:57:50:7e:cf:f5:cb:a4:e3:
28:c2:b1:b2:c8:a1:33:58:fd:bd:ec:45:ae:38:9a:0a:ef:57:
f4:3b:62:08:81:2a:91:b7:a4:2e:da:73:a0:ae:5d:f9:29:9b:
42:be:70:81:e6:4c:bf:fa:70:e5:e5:4d:dd:14:31:c6:6a:7a:
ba:5b:44:ab:e1:17:09:61:ee:b4:71:e7:a7:4e:5c:a3:e5:3d:
42:4e:af:9b:6b:1e:53:e7:9d:96:6c:38:7e:61:70:91:db:d4:
fa:4b:7f:df:64:98:56:0b:2d:d6:f0:d2:d8:55:23:be:25:e5:
6b:58:8d:6b:e5:d9:5d:c9:fb:82:75:ac:5f:1e:79:ae:93:8e:
5a:7c:0b:49:07:34:4e:c5:9e:74:3b:a3:34:b1:3d:22:48:fd:
3d:1b:9e:63:99:82:3f:7c:86:6b:c5:1a:05:b4:c2:38:9f:dc:
a0:c4:d5:19:11:36:40:13:8a:d0:64:27:fc:e8:96:3b:34:10:
8a:bc:be:0b:4d:84:6e:5a:bc:0e:cc:8d:08:37:2a:c0:de:7c:
57:22:32:eb:c1:f9:6b:ea:71:a4:c5:fd:50:69:c3:b8:37:22:
45:02:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:42 2025 by rpki-client