Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa
File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json)
Hash identifier: aPov5QGrAjZCCQbtYJEp35RL1hImcs14cspX1YM9TVU=
Subject key identifier: 25:99:0F:B6:7C:98:14:FC:FA:7D:F1:46:7E:A2:F9:E3:A3:58:86:4C
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C71C903B12D013D983B00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:71:c9:03:b1:2d:01:3d:98:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=57f947c3-70ff-4192-a8da-735ec42c0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:fc:68:a1:00:3f:36:ef:6d:43:3c:bd:6e:
00:ee:ba:8b:d7:57:55:9b:f2:f5:38:96:f3:30:a3:
97:74:df:1f:5b:51:c0:fb:9b:21:3b:67:7e:98:6b:
ba:61:75:4d:d5:df:f6:11:20:b9:4c:3a:bd:a3:df:
eb:0a:ad:d0:12:0c:e6:55:6b:fc:74:1d:24:ea:c2:
ea:c3:9e:45:aa:87:34:89:de:2b:8a:cb:1d:d3:ca:
d1:35:f7:10:5a:11:fd:1c:70:e4:dd:10:8d:17:2c:
ad:c9:63:cb:c3:b9:ed:39:51:93:45:1b:a3:ac:b7:
5c:54:e6:a3:1e:24:28:5e:e6:65:06:2c:05:7d:8d:
0f:54:e4:9b:b9:44:ea:ce:f7:33:fa:be:50:f7:c2:
ca:af:bf:e4:90:d1:a1:39:0a:55:f0:c9:51:8c:a6:
0d:b4:3c:40:73:a4:1f:ac:aa:05:6c:35:83:d7:c2:
a4:66:25:d9:98:3b:05:fa:40:00:58:7b:6f:d3:d2:
e1:77:4a:d3:06:cd:98:cf:7f:e6:b7:37:06:ce:c6:
b5:f3:dc:0d:61:2b:68:af:74:2d:c2:1b:a6:21:18:
c9:ac:24:4b:b5:97:0b:45:36:6f:14:fd:db:a9:3c:
af:5a:1e:86:ef:39:86:de:d3:c5:8d:07:fb:3e:af:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:0F:B6:7C:98:14:FC:FA:7D:F1:46:7E:A2:F9:E3:A3:58:86:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:20:8c:53:19:de:4f:fc:c4:7d:2d:1f:d9:85:2a:28:5d:35:
35:4d:05:81:5f:c1:16:77:09:98:4b:27:f1:da:e1:ec:94:c8:
54:b9:76:70:b8:d3:cc:d8:1a:14:9b:c0:74:ab:f4:a2:67:cd:
84:40:84:f5:6c:70:46:cc:da:9b:55:fe:c7:79:9d:65:b8:03:
95:28:c9:16:34:35:81:21:25:6d:93:61:a7:ab:54:75:66:9a:
d0:68:eb:bd:86:bf:fe:c2:cb:c7:b9:ea:fa:38:bd:aa:06:b9:
aa:da:93:e9:d4:19:e4:ec:a1:17:a3:35:a3:24:4f:6e:3b:98:
07:6c:58:59:ed:f2:f1:1a:cc:4d:3a:b8:8b:63:e6:0b:eb:9b:
66:62:03:5f:41:42:df:c4:57:96:2a:6a:f6:90:41:f0:6b:a4:
1e:87:ca:c8:b0:8d:f4:08:50:c3:f4:72:2f:e7:b4:1a:72:30:
53:7c:8f:ad:ca:c4:26:60:88:8f:4b:69:6e:87:e2:ae:d6:37:
b4:cd:0d:8f:fe:a3:96:24:c8:a5:16:df:7d:ed:59:db:4e:af:
24:67:70:09:b9:2a:ff:c7:e5:55:e9:be:af:06:0c:3b:60:b3:
1f:bd:91:08:b5:44:42:f3:cb:d1:4a:a9:12:6a:8a:4b:8e:43:
f1:90:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:44 2025 by rpki-client