Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa
File: 7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa (raw, json)
Hash identifier: tVUh+w1wmeL3N1J3GRZ7qZjIPr7t1PQnh7OpIaGaMGw=
Subject key identifier: B3:A3:38:25:7D:00:0D:1C:FB:67:2A:A0:8B:81:93:04:38:93:D7:C7
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6EBD2353D5906B6A21900
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:eb:d2:35:3d:59:06:b6:a2:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=797ff9e8-659e-4742-800e-49a6e6df611c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:82:7a:5a:07:30:c0:6c:8e:8b:69:8b:ca:
09:7d:8d:0d:07:d4:30:20:06:23:af:9d:cb:e0:f8:
e5:71:af:df:b5:6e:d7:01:40:4b:64:55:2e:29:38:
d0:20:73:0a:3e:92:b4:c4:35:3a:11:0c:83:ad:16:
66:56:bf:92:1c:45:62:71:d0:3b:8e:6a:2c:99:0f:
e4:a8:61:d8:8a:be:bf:14:d4:78:a8:ce:7d:42:01:
dd:a6:5e:a9:cb:81:33:78:c9:a4:9a:de:95:26:96:
28:b6:a2:08:24:4a:26:1f:7d:b9:9b:bc:ba:83:28:
16:23:98:5a:04:16:98:73:90:a0:1d:b0:50:31:69:
03:a0:47:07:49:b7:02:3c:5a:8a:62:85:7a:b4:5e:
35:fa:df:59:8f:3f:09:2c:cc:8b:64:a6:dc:64:a1:
e0:3d:39:96:e5:8f:03:22:86:3d:fb:5d:33:31:93:
e9:0c:e6:25:36:dc:75:ca:04:58:58:57:2b:7e:c2:
df:01:90:05:b5:54:3f:79:cb:ae:da:c0:0e:23:d6:
67:d1:ee:9c:37:c1:dd:f6:1f:83:c8:49:64:2d:5c:
ef:64:64:e2:b1:b2:6e:d6:f2:d8:b3:28:93:b8:22:
f7:9d:df:18:14:e2:0f:ad:69:90:30:3e:a8:22:0e:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:38:25:7D:00:0D:1C:FB:67:2A:A0:8B:81:93:04:38:93:D7:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7abb1e8f-1020-31e4-a1d5-69ba88e9269c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:13:0f:18:17:f3:e6:e3:a7:d1:4e:c0:1f:5f:9f:7f:73:2d:
25:e1:ae:c0:9c:d2:c3:af:d7:8a:82:88:8a:3c:de:76:21:d0:
27:ac:72:af:d4:82:66:3a:e9:3a:0e:cf:9b:26:14:8b:4d:61:
f5:0c:9e:01:d3:c0:41:04:c9:48:52:24:33:0a:8a:48:c1:bd:
df:ac:66:d3:13:0f:ad:e4:fc:5f:0f:3d:61:47:b4:48:dc:18:
e6:fa:f5:ac:64:b3:7e:04:88:63:63:d1:1d:2d:c1:ee:54:4f:
45:f1:d6:69:5f:a8:9e:d5:da:16:89:26:27:f2:77:21:8f:cf:
de:24:fe:0e:dd:60:50:7a:34:36:c0:0b:60:a7:38:bd:92:c5:
4e:a3:6c:a6:6b:5b:13:c4:86:f4:7d:3a:b7:f9:d2:43:06:2a:
98:06:67:ad:4e:87:31:58:34:1b:fc:e0:08:00:f9:59:c2:89:
b1:88:bf:ef:7b:b5:bb:2e:73:0b:06:99:ad:03:c9:74:79:8d:
24:68:70:d0:3f:0b:6c:6a:2d:a4:d8:d5:08:92:d7:d3:a6:3e:
55:80:8a:77:7d:36:4b:f7:e8:08:ab:6b:3f:db:7e:57:11:ac:
ef:9d:79:a7:db:3f:fc:f0:c6:71:9d:76:47:f5:70:09:e9:75:
18:f4:cd:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uvSNT1ZBraiGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
Nzk3ZmY5ZTgtNjU5ZS00NzQyLTgwMGUtNDlhNmU2ZGY2MTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtuCeloHMMBsjotpi8oJfY0NB9QwIAYjr53L
4Pjlca/ftW7XAUBLZFUuKTjQIHMKPpK0xDU6EQyDrRZmVr+SHEVicdA7jmosmQ/k
qGHYir6/FNR4qM59QgHdpl6py4EzeMmkmt6VJpYotqIIJEomH325m7y6gygWI5ha
BBaYc5CgHbBQMWkDoEcHSbcCPFqKYoV6tF41+t9Zjz8JLMyLZKbcZKHgPTmW5Y8D
IoY9+10zMZPpDOYlNtx1ygRYWFcrfsLfAZAFtVQ/ecuu2sAOI9Zn0e6cN8Hd9h+D
yElkLVzvZGTisbJu1vLYsyiTuCL3nd8YFOIPrWmQMD6oIg6eVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOjOCV9AA0c+2cqoIuBkwQ4k9fHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FiYjFlOGYtMTAyMC0z
MWU0LWExZDUtNjliYTg4ZTkyNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWALMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMTDxgX8+bjp9FOwB9fn39zLSXhrsCc0sOv14qCiIo83nYh0Cescq/U
gmY66ToOz5smFItNYfUMngHTwEEEyUhSJDMKikjBvd+sZtMTD63k/F8PPWFHtEjc
GOb69axks34EiGNj0R0twe5UT0Xx1mlfqJ7V2haJJifydyGPz94k/g7dYFB6NDbA
C2CnOL2SxU6jbKZrWxPEhvR9Orf50kMGKpgGZ61OhzFYNBv84AgA+VnCibGIv+97
tbsucwsGma0DyXR5jSRocNA/C2xqLaTY1QiS19OmPlWAind9Nkv36Airaz/bflcR
rO+deafbP/zwxnGddkf1cAnpdRj0zWQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:46 2025 by rpki-client