Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa
File: f4185a63-316f-3d91-b674-52ffad72f800.roa (raw, json)
Hash identifier: RwgMrd0uyXGmgYfCBBTTZGF4JhFL5pJIWvpjS8Xus8c=
Subject key identifier: 34:77:E3:A5:8F:4F:A9:48:17:71:B6:DD:2E:1B:BF:11:AD:D1:B7:F4
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584812D52451A840B9D6B92FCC80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16839
IP address blocks: 149.96.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:24:51:a8:40:b9:d6:b9:2f:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=d00070bc-dce8-4117-b000-223842168da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:04:e3:b6:9a:fa:0d:b3:fc:53:91:45:cb:
a8:d4:a3:63:e4:d1:86:7d:38:53:13:91:c6:6e:c9:
71:6c:e6:99:ce:ed:4c:99:95:bd:31:85:51:21:84:
1e:15:72:fc:52:4a:d2:4c:91:4c:92:19:ae:44:4e:
5b:a6:fd:4d:ca:d7:53:aa:d3:76:22:70:64:7d:cf:
9e:2d:78:f0:c6:9f:3f:0b:a2:32:76:9f:fb:e9:03:
8a:4a:37:86:c2:db:04:92:cc:f6:cd:c9:a1:46:f8:
70:d8:e3:f8:cd:2a:83:fc:92:1c:b4:fa:b9:e6:2f:
e7:17:86:20:62:7f:4b:70:f3:06:e5:04:88:d7:11:
a3:df:dc:85:96:6f:af:aa:a5:6a:64:48:bb:91:f5:
67:5a:45:59:64:1d:2a:7d:8d:5f:49:ba:37:7c:15:
3b:71:c9:fd:9d:0a:d9:c9:a2:16:30:5f:de:8b:93:
96:ff:a9:97:f9:9b:8e:13:e2:e8:69:4a:f2:a6:a6:
e5:d1:dc:cd:2e:f2:8c:2d:e7:a5:cd:69:8a:1b:e2:
f5:a5:38:d3:ca:fd:7c:7d:74:61:36:8f:4a:b3:48:
6a:ce:12:6c:a8:8d:80:92:a3:1f:25:ef:d3:c9:ed:
6e:5e:8d:bd:bc:48:44:33:b5:74:83:22:dd:ca:51:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:77:E3:A5:8F:4F:A9:48:17:71:B6:DD:2E:1B:BF:11:AD:D1:B7:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:d7:60:8d:97:df:3a:df:a1:91:30:e5:6d:26:86:05:24:e4:
09:91:7d:da:75:96:3e:1c:64:65:eb:0a:c6:9b:98:55:8c:4c:
33:49:99:10:11:6a:bc:21:d0:53:41:42:e4:88:e4:89:c9:af:
15:cb:bb:a8:e0:e7:20:dd:5e:02:06:43:1e:11:2d:09:44:0f:
f3:21:5f:36:4d:e0:2f:2d:30:b3:dd:67:53:28:2c:8a:e2:2a:
82:16:0b:14:e5:eb:4e:ac:5f:89:ef:cd:86:8d:5e:07:f3:01:
53:1d:9d:7c:34:6b:e7:c7:4b:8c:81:88:fc:05:53:16:bd:ee:
08:17:2d:b4:ff:ae:af:c1:3e:37:a7:0c:dd:7f:78:a1:9d:da:
49:9d:21:b2:0b:ed:5f:06:db:e1:46:60:1f:09:c5:8a:7c:3e:
03:82:52:ef:66:1e:4f:4d:68:7f:a8:29:29:7a:5a:6e:c9:c2:
19:db:01:f1:58:17:4b:3b:4f:95:ca:74:48:8e:af:cc:1c:5a:
37:ce:de:5d:2d:17:d8:5e:38:8f:ad:ad:aa:ff:11:a7:2d:c1:
6e:43:b5:f3:02:26:77:db:8e:cf:6a:6a:9e:c9:d1:40:81:fe:
93:fb:22:8d:0f:c0:dc:c4:be:15:fa:e7:9a:a1:69:1e:6e:2a:
27:ab:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:09 2025 by rpki-client