Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa
File: 0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa (raw, json)
Hash identifier: icQ3uvEFPxR2tUKeN4C+tUgSxIOeicE5mwMPXF4o3QY=
Subject key identifier: DB:13:9E:AA:57:73:F0:89:23:C1:06:E4:B7:49:E9:5B:BE:57:F9:89
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C7247E0FE24BEF07DE000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:72:47:e0:fe:24:be:f0:7d:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=3814e4e3-348a-444d-8a03-33a8f950c487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:af:a3:d8:d5:b5:ef:80:4a:27:80:10:22:
09:da:4d:9e:2a:42:eb:ee:53:7d:e4:1b:9b:ac:df:
41:fd:db:fe:fd:b1:d8:d8:9c:7a:1a:10:fd:b5:8c:
f2:cc:23:9b:0a:04:ec:64:96:fb:b5:46:09:2a:35:
09:7a:01:ab:9d:d3:b4:c6:f5:ba:97:1f:0e:04:ae:
21:f3:b0:ab:00:02:69:2f:1b:9c:95:ac:69:a5:c4:
dc:ad:2f:4f:e2:7f:16:81:e8:bd:ef:3b:f8:fc:cf:
93:1a:61:d3:1a:73:d6:b9:b0:0d:42:eb:4e:da:26:
5e:7c:5a:6a:e9:30:49:75:81:02:9c:de:1e:ce:aa:
9b:4f:0d:64:4d:65:ce:73:cf:bc:78:3c:1a:fa:6c:
83:79:a4:80:63:4d:00:77:c4:3d:1e:0c:31:f2:36:
d3:e9:ed:e8:6f:8d:77:c0:b6:a6:ae:9c:2c:7b:d0:
58:07:98:3a:16:2d:01:e0:e5:8a:ed:e2:f6:80:ef:
85:2b:2c:5d:5b:14:79:db:cd:84:e3:88:7f:4d:f2:
90:fb:2b:e2:c1:21:bb:9e:c6:65:4b:f7:15:3b:a2:
3a:9d:b0:ad:34:3c:b3:37:68:6c:f7:91:9a:d9:61:
4d:6d:31:d7:af:00:79:31:2d:76:98:ee:77:3e:2d:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:13:9E:AA:57:73:F0:89:23:C1:06:E4:B7:49:E9:5B:BE:57:F9:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0baf2918-bcdf-3fd6-b2bb-75a2b71885cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:57:f9:93:9e:a8:d3:93:b7:3d:ba:26:b3:03:2b:42:f0:45:
06:14:2c:a0:5c:f9:76:61:fc:a8:eb:05:b7:b7:62:a5:ad:01:
da:74:e2:c7:00:28:49:88:a6:10:e9:47:02:9a:55:47:15:b8:
79:30:f6:14:4b:5c:5f:4b:d2:f0:28:0d:a2:2e:ac:c9:64:d3:
31:85:6c:27:86:e4:82:bb:d9:c7:80:65:ae:77:57:6a:05:18:
10:ad:4a:71:4b:35:f5:55:72:19:37:24:d5:48:d5:f8:a1:4b:
97:25:f2:62:34:c7:ff:7d:bb:cb:9d:e5:02:a9:e3:02:73:6b:
0f:23:c7:8b:93:98:c0:f0:82:20:f9:28:c8:e5:9f:51:b2:a2:
d5:9c:c9:ef:c6:8a:5c:bf:2f:ca:fb:8e:35:cd:d6:4e:21:27:
fb:b1:c5:cd:2d:dc:62:10:a7:4c:89:16:c3:e4:55:bb:50:30:
50:d9:52:2c:73:d0:8d:7c:14:b7:57:20:9a:46:75:b1:16:da:
80:72:62:13:eb:98:0f:27:3b:9f:04:0e:97:99:d7:8c:4c:ad:
2b:b4:e2:42:a7:59:22:8a:92:de:f5:84:b7:13:3b:5a:aa:c2:
7c:bb:48:ec:a7:5b:ea:22:17:15:73:2f:1f:f9:10:2c:c0:ac:
ff:c2:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:37 2025 by rpki-client