Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa
File: 50124269-513e-3754-85b0-ec7e4cf8e5c6.roa (raw, json)
Hash identifier: 1wHYzjl6+FYdnUvOlqENeJ1r6+or8PVkZqCaloSKOJU=
Subject key identifier: DC:64:8E:61:90:3D:D9:A8:10:93:75:A3:85:CF:FB:F6:64:8A:C1:C9
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6EC94479DE25E9A8A5500
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ec:94:47:9d:e2:5e:9a:8a:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=eb705d37-6968-4bc2-ba41-20eeb3700766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:f7:4c:d9:8b:92:91:44:55:49:32:8a:b5:
96:2d:50:63:03:11:95:dd:cd:2d:58:ae:ec:3b:81:
ff:67:91:bc:d8:c4:ef:f3:c0:60:22:1a:88:0d:64:
91:a7:90:05:a5:c7:77:66:6a:73:95:0d:ed:60:4d:
f8:ea:d3:56:f6:87:a9:e5:66:5c:cc:fb:dd:3d:7a:
4b:58:19:47:d3:86:e7:73:27:90:6a:8e:ce:97:d4:
41:06:57:8d:bc:c7:f9:f3:37:d5:e8:d6:8a:2c:ed:
1b:15:cc:19:98:bd:5f:e2:12:16:d0:f2:1f:19:c4:
06:4d:83:d5:fc:4b:fd:a2:a1:55:58:05:56:3f:d9:
40:65:0b:0c:e2:59:6d:94:90:4e:50:1f:f5:4e:0a:
b1:ec:49:0a:63:6f:f9:ff:e7:c1:a8:9d:b0:75:5a:
2e:09:ab:0f:91:ce:e2:a2:b5:0d:e0:50:b1:03:5e:
dd:48:8c:e2:3c:13:f1:78:d4:ca:86:6f:84:cf:6c:
1a:be:88:95:99:e2:bb:42:59:ba:95:85:94:98:f2:
18:ed:5f:a3:d0:9e:49:21:d6:ca:80:f5:bb:80:40:
98:d4:d2:43:33:5f:a8:cd:28:88:c8:95:7e:1e:48:
84:cc:d1:a4:83:01:18:6f:1d:7c:a1:23:ad:fe:e6:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:8E:61:90:3D:D9:A8:10:93:75:A3:85:CF:FB:F6:64:8A:C1:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/50124269-513e-3754-85b0-ec7e4cf8e5c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f9:83:e4:7a:7f:de:01:8d:8c:5e:ee:b5:07:9e:42:10:6c:
85:48:1c:55:5c:52:95:b7:bb:20:c3:f2:95:ea:5f:b1:62:af:
96:96:f9:37:c1:6b:90:08:bc:eb:73:6e:70:b2:5d:6c:d3:b8:
d6:45:fc:66:56:fc:c7:0b:52:17:37:8d:e1:33:4b:a2:08:42:
a5:45:11:06:dd:ee:f9:fe:70:9a:32:11:86:c8:ce:c9:57:6a:
f6:40:01:cc:43:67:6f:35:89:28:33:01:a0:82:75:ba:c8:00:
45:60:8b:c4:24:e0:bd:2a:6a:c3:10:66:30:ad:46:58:06:b6:
ec:14:22:63:71:10:44:26:78:de:7e:13:1e:d0:e2:8d:14:4f:
e6:3c:c6:fb:2b:77:c4:47:1d:5c:74:9f:b9:c6:d7:b9:d9:7e:
71:d2:f7:fe:6c:e2:76:c8:45:ad:01:23:ed:dd:e0:3d:c8:12:
1c:78:88:44:79:56:87:a0:5c:f4:73:61:61:2f:03:4e:7c:c1:
a9:3c:48:0a:17:ba:d2:1c:de:a6:4d:88:6a:28:7b:9a:0b:19:
a1:cd:67:5f:66:2e:a4:5a:7f:aa:62:db:f2:85:3b:69:c6:45:
a5:2e:b5:f8:b9:6a:4f:f5:c8:bf:c7:9d:5a:cd:de:70:2a:71:
24:b7:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:14 2025 by rpki-client