Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa
File: 9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa (raw, json)
Hash identifier: td+G5JyVLDXFH80wU4KsOsliqyQ6ZricpwC0RB4d6ZA=
Subject key identifier: 4F:9F:9D:15:B6:30:F3:08:DD:BB:9F:B8:8B:63:E9:67:9D:AC:BB:A6
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6EBE1F490A774CF49A780
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:eb:e1:f4:90:a7:74:cf:49:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=d543ce04-8263-44b0-ad48-983cbb25792c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:a3:56:b4:87:d6:b3:1b:54:34:01:76:52:
0a:4c:20:41:be:13:df:4b:47:aa:6c:c3:f3:5e:89:
6b:6a:a4:bd:2c:ed:26:b4:f5:92:e0:08:8a:ca:8f:
d2:ec:dc:80:86:56:7c:80:e4:67:8c:74:ed:7e:88:
80:84:42:e7:11:36:d6:9e:b4:10:9c:20:70:56:cb:
ca:90:d4:aa:2e:11:3f:94:dd:80:33:f9:65:84:d6:
f2:49:82:d7:ff:8b:77:5a:a1:81:6c:1c:b4:42:59:
fd:c8:b3:f1:ae:7d:14:83:c6:99:3e:c3:ad:7d:b5:
33:75:86:ac:2f:a0:83:7a:27:cd:39:06:41:fa:22:
1e:81:21:78:f8:70:84:22:3e:1c:68:5a:95:b6:43:
79:43:0f:e1:eb:e1:75:58:e3:51:87:31:eb:a2:32:
33:09:e3:d9:c0:ab:71:38:e0:23:24:31:c4:73:8c:
62:6e:d1:a2:79:69:ee:f6:1e:ea:24:3e:e4:d1:19:
51:7b:c1:59:54:f0:d2:1f:40:84:51:37:f3:c3:5a:
a2:1a:03:ce:07:94:93:cf:ac:55:83:eb:5f:a7:b3:
79:1a:ef:14:70:ee:0f:02:3c:df:d1:04:55:4b:af:
95:9b:b9:ff:f8:4c:47:62:0b:fc:b9:9d:06:48:0c:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:9D:15:B6:30:F3:08:DD:BB:9F:B8:8B:63:E9:67:9D:AC:BB:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c3ef9c0-030b-38a7-93cc-c00c6985de63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d6:e9:a4:ce:78:3b:59:33:a9:61:21:7d:b8:18:2e:1b:59:
85:f2:36:c4:67:b3:7b:b5:3c:ba:22:a0:5f:59:ab:31:3d:1d:
87:2c:67:ef:5e:05:04:58:1b:5a:3f:f4:7d:3e:4c:a8:5e:58:
68:9b:c7:f9:97:a5:9e:c7:6d:c6:ac:fa:84:e2:1c:e7:4b:94:
47:d3:0b:ed:fa:c0:2e:84:d9:2c:01:a8:95:5c:a4:cc:91:00:
fe:91:ba:bb:9f:cb:07:ea:7d:96:78:0c:6c:5f:1a:68:7a:ed:
fa:59:78:00:46:1d:2c:f0:cf:64:e6:74:bf:8f:57:66:fc:17:
44:de:45:ab:7b:38:37:3e:e6:c4:5b:c0:9c:82:91:46:18:9c:
60:0d:15:d7:a5:82:d0:37:0d:72:52:ef:4a:37:f3:56:61:fa:
20:fb:30:77:f2:57:db:cd:ec:df:30:9f:75:16:ec:ee:02:08:
9c:5e:45:36:b8:00:cb:12:b6:df:e4:54:54:61:72:2e:ee:63:
68:6a:dc:51:ad:6b:13:ad:2f:64:04:3e:51:a5:0d:98:3b:48:
82:ba:c1:bf:86:a8:1d:52:91:62:d8:8b:e0:c4:58:4c:fd:29:
66:3b:06:a4:06:ac:44:7b:9b:20:55:ff:01:d8:1d:f8:9b:91:
98:57:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:46 2025 by rpki-client