Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa
File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json)
Hash identifier: QaOcT0jqnPbJn26mfC347dlhWziLS+9pPuSC4oj5oFI=
Subject key identifier: 19:FC:1C:49:B5:F8:9E:FE:22:B3:A8:98:C2:BC:DC:20:37:93:22:1E
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C7254D9CD0897F5A9D1E0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:72:54:d9:cd:08:97:f5:a9:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=f18125cf-adea-47c7-92da-84061f616aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:28:9b:3c:8e:53:05:56:d2:79:21:7d:19:
0e:dc:ae:44:d4:a5:61:8b:9a:22:ae:37:ac:4f:0f:
dd:a9:9a:87:e4:8a:e5:e4:33:24:63:86:51:e5:15:
99:5e:b5:7c:55:29:15:aa:e0:d5:08:9a:73:14:1b:
73:0b:15:29:a6:a4:3c:c1:44:76:b4:b3:36:7f:25:
8d:78:e4:2a:53:da:98:22:a0:77:c7:98:b8:53:9a:
9e:8c:fd:53:d7:21:81:0f:43:8e:de:66:7a:40:f1:
37:06:b8:c6:aa:47:45:3e:ca:64:c8:0a:ca:bb:6a:
ca:16:ef:10:bd:77:bd:ad:e6:fb:7d:46:28:93:66:
cc:30:97:ae:a7:ac:8b:27:16:b9:b2:16:6d:02:5b:
78:41:0e:a9:ab:4d:98:a1:5e:41:d5:4d:6d:e1:8f:
08:45:12:c8:b1:fe:85:52:ac:b1:59:92:7b:48:b7:
b4:88:3d:ad:19:7d:e8:9e:6f:ee:8e:ad:d0:46:7c:
90:74:a1:1e:f0:68:73:10:83:bf:19:09:c5:25:97:
78:b6:8f:71:a0:83:eb:ea:93:7e:8f:41:bc:7c:a5:
b6:31:8a:41:e2:7e:8b:55:67:b3:e1:87:58:15:f3:
74:a5:54:60:69:58:6c:62:80:00:01:7a:5f:d0:f6:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:1C:49:B5:F8:9E:FE:22:B3:A8:98:C2:BC:DC:20:37:93:22:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:c3:66:83:e4:41:75:bb:44:39:18:c5:59:cb:6d:81:14:33:
b8:40:e1:36:35:f8:68:30:6f:8a:b0:cb:ed:9a:a9:5c:c2:8c:
fe:53:a7:47:19:09:e0:81:68:49:c2:b9:f3:84:cc:73:73:ef:
99:af:94:1f:23:b0:26:b5:8e:b4:c8:3f:e6:d2:73:5a:4f:45:
6c:14:54:ad:8b:c2:ce:48:ac:e8:bf:5e:dc:12:7f:00:df:f4:
59:f3:b3:53:87:e4:be:25:1b:de:47:56:4a:a5:5f:73:31:b6:
c8:4f:c4:a6:38:ec:8f:7f:f5:56:81:24:20:59:d7:3b:f0:bf:
b6:a2:d8:f9:18:39:c2:cd:a1:41:f8:4f:d2:f2:22:71:1a:cd:
f5:f3:95:e8:67:43:fb:1d:7e:71:70:ce:f1:4b:93:9c:11:50:
8a:a3:87:52:46:16:da:4c:a7:f5:6a:91:d1:12:7a:01:6f:1f:
26:41:79:0f:31:ba:00:de:bf:f3:57:86:06:e9:2a:0c:ba:24:
60:45:ef:ed:3b:ab:a7:bb:c6:46:9a:a6:fc:ad:a5:ea:03:be:
eb:48:c8:3c:6f:91:ba:3a:b9:b1:d8:d4:70:3b:9b:4b:ac:bf:
37:6b:7b:05:98:c9:7a:70:be:19:e7:8d:7d:3d:59:21:5f:d0:
57:86:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:15 2025 by rpki-client