Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa
File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json)
Hash identifier: 0XAbrq28Gg+DtS4nSzEPFmiF18clYV2ycyEGSbMoWJQ=
Subject key identifier: 1D:F8:B6:F5:D4:03:7B:39:EA:31:E0:80:A9:30:AE:B2:14:92:BB:52
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6EC7673F95FF02E4F4B80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ec:76:73:f9:5f:f0:2e:4f:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=8910b093-9d69-4621-99bd-8e9b91f915ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:1d:17:bb:60:24:82:39:3f:15:66:4b:b1:
f5:9a:3e:b0:5b:45:b1:69:36:48:08:07:b9:92:63:
94:78:5a:2e:75:70:bd:a6:15:d7:e8:11:83:37:c4:
ef:64:c2:f3:03:00:8e:ed:aa:bb:0d:4c:e7:06:7c:
ce:4c:0d:1d:86:45:61:fb:79:9f:95:ff:1c:86:5f:
16:7b:43:54:3d:49:c0:3e:12:61:52:9d:a3:b3:67:
83:5c:96:09:4b:66:14:f8:88:e7:dc:b8:7e:0b:dc:
d4:c7:89:1c:0e:cc:cf:91:a5:81:9b:7d:d3:d7:50:
80:b9:fb:96:16:83:4f:dd:56:3c:03:25:ee:ed:bc:
c6:28:fa:fe:52:f3:91:25:77:4a:50:fd:ab:fd:6f:
a1:ce:1c:64:f2:d8:a4:be:3e:71:61:81:e3:a3:63:
a9:69:ee:93:d8:18:1f:24:a1:bd:28:0a:51:55:85:
68:64:70:cc:98:5a:d9:84:45:f0:f5:22:27:59:2c:
cc:19:1f:0c:7f:91:17:70:b9:c3:8e:cf:84:4e:2e:
00:62:cc:0d:b4:81:1b:58:60:f7:c3:c5:5a:8e:b5:
fa:e3:de:dc:96:ef:21:94:f2:91:e4:86:b5:1c:01:
34:67:78:ed:c6:14:3d:bd:28:b5:14:3b:60:c9:3e:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:B6:F5:D4:03:7B:39:EA:31:E0:80:A9:30:AE:B2:14:92:BB:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bd:8b:81:75:13:f4:df:91:a6:85:2e:bc:d4:b4:0e:32:13:
f4:21:fd:62:5d:b0:7a:fa:13:bd:af:af:17:de:9b:cc:a2:ad:
b3:3c:93:b3:cf:a2:f9:0e:ab:0a:55:33:0b:ef:96:ac:de:85:
a4:ca:a5:96:b2:f7:ea:8a:d6:5d:0b:e6:56:43:97:5e:84:73:
4e:c9:64:c4:a3:84:0e:32:de:5b:93:ea:c5:ce:b5:6c:84:9c:
a2:05:62:f7:cc:af:35:f9:df:85:f4:0c:d7:67:47:a5:e7:0e:
ed:5e:52:28:de:5c:5c:13:b8:b5:b7:9c:2c:2c:20:85:34:68:
08:fd:08:d8:67:6f:59:7d:19:65:6e:d6:63:6b:68:e3:cc:98:
9e:43:ba:2c:ee:98:e2:d6:2a:90:c5:ee:30:f0:35:25:eb:94:
f6:01:ef:22:08:33:8f:0a:a5:d2:e3:40:a6:14:97:cc:87:e7:
dc:1e:c8:51:c3:3b:a4:20:33:d5:a1:23:e3:e5:c4:88:13:d2:
51:5d:c0:59:b3:52:b3:d1:43:df:28:64:d9:76:8c:91:86:41:
d9:91:a7:99:bb:17:b6:8f:a7:51:f1:96:8c:8d:f8:45:b8:4f:
33:d8:4c:c5:ac:82:6d:66:82:c0:e4:42:b9:29:35:0c:92:b7:
b2:0d:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:15:59 2025 by rpki-client