Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa
File: fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa (raw, json)
Hash identifier: HSzXeMrshoYq9nOhzgxc7o5Khs7pCuzSNIYGv/16/IA=
Subject key identifier: 26:57:DF:E8:61:FC:F5:36:88:50:A3:5C:33:45:98:95:57:29:C2:01
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858483F803C6D152DCDF43E3B1480
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3c:6d:15:2d:cd:f4:3e:3b:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b25234f5-3ce4-4999-8d31-a18f9368caf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:20:35:9e:d8:5f:ed:f0:a9:0e:82:a6:a3:
81:7f:54:ed:2f:56:c4:18:9c:6d:7d:71:1d:e8:15:
13:f7:a8:48:3a:19:1b:7f:4d:cf:43:24:0f:3e:eb:
d1:a7:5d:0f:d9:81:f0:96:a2:fd:1a:63:ca:68:d0:
b3:ed:0b:53:fe:e3:b8:5f:34:d6:43:66:1e:03:fc:
c5:1b:46:e3:2a:8a:60:23:48:a7:91:af:35:b9:47:
9e:92:72:96:18:10:ee:08:7b:4f:40:b5:c3:26:05:
34:4a:8f:13:5a:ab:9d:a5:ea:ce:0f:62:3f:29:b0:
42:49:0b:ea:a8:d9:27:bf:5d:52:2b:bf:b4:84:f2:
78:16:39:cd:87:00:fe:71:b1:71:3e:55:4a:89:53:
2d:9c:fa:7d:9c:7a:5e:37:f5:d8:5a:dd:0b:fc:81:
4d:f1:10:d6:1c:6b:d2:65:ab:bd:30:4b:f0:cd:46:
c9:2f:bb:de:02:5a:bf:0b:10:71:24:03:e4:5a:ca:
e2:ae:9d:43:34:37:3e:b0:68:6b:44:51:7a:9b:cd:
c2:5c:c6:df:97:2b:98:61:cb:8c:2a:ff:e7:41:35:
6b:2b:c9:76:df:b9:c3:0b:3f:f1:b3:57:91:92:57:
88:01:dd:34:66:99:35:0c:db:88:1a:0f:17:f6:ec:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:DF:E8:61:FC:F5:36:88:50:A3:5C:33:45:98:95:57:29:C2:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fdd0cfb7-63e3-3c41-8f1d-452af949e784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5d:ca:ae:e3:9c:14:bc:c1:5d:ed:e5:4a:6d:4d:c6:49:6d:
a8:a1:af:44:91:7e:2f:d7:dd:62:60:39:3c:6a:ce:75:d9:e4:
f3:d6:ba:a3:e3:ff:0b:dc:8c:4b:8c:98:41:6d:ba:d6:c5:f2:
d0:95:be:06:b5:d7:1e:13:f4:91:59:9a:e6:b1:fd:26:04:c9:
23:82:52:ec:ff:19:ae:b5:21:27:e1:e7:a8:76:bf:b9:00:dc:
f2:82:7c:7b:92:a2:f0:1d:a5:78:5e:82:a5:ef:04:ce:4b:3c:
c7:40:fd:08:a1:40:bb:ee:b6:1a:53:31:af:3e:3e:9a:d4:eb:
01:8f:10:55:cb:85:9c:92:57:d4:77:54:c3:19:d8:3d:bf:66:
6e:30:b1:0d:a8:94:56:89:86:36:da:c6:b6:2b:60:9f:6a:68:
d3:76:80:47:63:be:ba:c6:d6:b8:6d:25:92:ca:54:6b:89:2d:
f6:8f:4d:ce:2d:ca:fd:7a:6c:f0:89:75:65:38:7f:2f:68:c0:
4b:57:c1:db:b8:69:7d:a2:de:a2:ca:36:9b:b9:93:07:1c:3c:
38:4f:7f:98:92:44:60:7b:71:c7:ac:8a:99:77:63:fb:c5:fe:
7c:5c:c7:77:1e:6f:a6:8d:ec:17:0b:b2:93:7a:19:3d:c9:0b:
53:c1:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:31 2025 by rpki-client