Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa
File: 1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa (raw, json)
Hash identifier: 6jWd0uGVvnM8XVzg8pcm+A98nUWUf6Rz8HQSULdQZwY=
Subject key identifier: 3A:3B:AB:93:34:0D:E9:15:60:99:A0:24:3D:62:8B:8B:59:EE:15:48
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6EC28F5274713B8365A80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ec:28:f5:27:47:13:b8:36:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=90b803d0-9bf0-4e3c-89cb-aa0c97b8b089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:66:1a:13:33:a9:15:df:71:68:16:7a:03:
94:e9:04:91:ae:39:0e:19:b9:ea:16:75:3e:cf:a9:
e3:18:81:cb:7a:28:89:7c:76:98:e5:3c:4a:4d:21:
c1:cb:a3:89:d7:63:14:20:6f:d3:6f:1c:1c:e0:25:
8d:59:3f:be:75:8a:2c:82:11:6f:2a:53:6c:8b:0e:
c9:fe:33:33:b5:89:c5:85:a9:67:f1:4d:df:ed:e5:
fd:7a:8e:be:db:44:1e:9d:84:01:2e:42:88:d3:4e:
c2:ae:a9:c1:0c:0a:0a:a2:49:f0:d5:98:60:cd:60:
61:ac:fd:c1:1f:6e:69:bc:e9:a9:e9:d4:50:a8:bc:
7a:59:0b:dd:a4:0f:e2:8b:6b:ec:b9:45:6d:56:6a:
13:5f:07:2f:79:e2:e8:7d:ad:d0:23:5f:6a:ac:1f:
98:4f:29:6e:66:b2:2e:be:f5:4c:98:e0:c8:b7:c5:
e1:a3:c4:99:e9:f0:27:7f:76:b2:7d:58:4c:f3:b9:
4d:cc:69:85:3f:b7:78:3a:b9:de:d8:45:da:c5:20:
66:44:23:a0:14:97:02:ac:41:dd:4b:43:7b:6f:cd:
87:85:27:1f:55:dd:49:88:e5:dd:29:15:1e:0c:17:
5a:62:d4:2a:f4:06:4c:15:3f:a6:19:5b:53:a4:da:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:AB:93:34:0D:E9:15:60:99:A0:24:3D:62:8B:8B:59:EE:15:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:af:c9:49:1d:d9:ea:ef:f3:15:27:21:c3:9e:a8:74:d1:83:
d0:dc:af:10:92:0b:08:92:79:ed:64:99:1c:f2:2f:8d:c7:ee:
00:02:a0:a9:98:ad:70:86:d1:53:a9:10:8f:8a:f2:e6:de:6b:
cf:d9:c6:0d:b2:a4:65:58:84:1f:78:af:29:e6:5d:6b:66:7d:
b2:86:f0:53:8d:e7:63:cd:ce:6a:a2:c7:7c:7d:0a:35:a9:53:
2d:44:ee:29:c6:1d:17:40:af:fe:a7:fa:ea:8e:38:84:8a:3a:
bd:b0:ad:b8:2d:01:83:2b:f0:94:97:6f:87:92:57:ba:97:64:
b7:e5:fa:80:3f:df:f6:a8:60:88:11:f9:f2:9c:32:7a:c2:b9:
c6:7a:0d:6f:20:18:92:2d:14:b1:90:7d:db:ec:84:01:16:d8:
2a:9a:8e:fd:f3:14:0d:f5:dd:2b:ab:62:df:0e:42:6e:45:37:
a3:3c:1d:98:6c:f7:8a:f2:37:8d:66:e1:71:53:13:99:bd:0d:
83:24:ec:68:93:6d:b9:d3:11:5f:55:a0:51:31:d1:fd:24:23:
a9:c0:46:c1:c1:37:7a:2d:dc:4c:59:f0:fc:a4:43:ed:83:05:
f4:a2:b8:b5:67:92:ed:a4:1d:40:be:8d:da:9a:3f:a1:2e:ef:
dc:e4:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:46 2025 by rpki-client