Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa
File: a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa (raw, json)
Hash identifier: tMkJiO6+JGj0b3t+BhVW79yLKmi8Bb+mjIdkB4PFPLg=
Subject key identifier: 63:9F:1E:63:C2:90:BC:B7:21:D1:9E:C3:17:50:1D:31:9A:CB:F5:BA
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C6C3C2E760C9C53C7DA00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6c:3c:2e:76:0c:9c:53:c7:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=3074f3d2-f3f5-438e-a3ea-4f202f57cf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:90:aa:51:0e:21:1a:aa:82:50:fd:c3:e7:
36:42:8b:ac:80:85:26:1f:5a:d0:5f:2f:15:e0:c3:
1f:b8:7c:2a:38:f3:73:fe:95:83:15:75:e9:1d:e8:
26:44:70:c2:c5:f9:d0:6e:cf:a4:1f:8e:36:82:6c:
70:2d:61:74:c1:f5:9d:c6:f9:dc:9d:ea:2d:b4:6e:
ff:29:65:cd:95:75:8a:30:e1:8f:2a:97:dc:ca:91:
e9:dd:3d:ba:7d:ce:29:87:99:5d:bc:ab:7d:9c:bb:
eb:dd:81:f6:ef:8d:33:56:2d:d1:95:26:d4:36:77:
ad:59:77:82:61:c5:3a:87:ff:da:85:d2:e1:62:a5:
90:26:2b:26:5e:97:d2:76:2a:a7:cb:d8:16:17:2e:
9c:13:44:2d:54:99:49:c9:5f:6a:0f:55:55:c5:3a:
f8:ce:e2:5e:dd:5f:f2:06:01:e6:38:73:fa:1a:9b:
57:34:65:04:bc:0d:8f:09:9e:b9:bf:57:cb:52:4d:
72:61:f1:92:ef:61:88:de:8e:d4:50:e3:37:ee:6a:
cb:3e:de:6e:fd:25:72:cc:c0:f5:ba:0f:b9:73:93:
72:2d:9e:e9:bb:40:0d:65:0d:73:cd:ac:11:90:28:
48:e7:7e:7b:f4:9f:aa:38:fd:a1:23:d2:ae:3a:d8:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9F:1E:63:C2:90:BC:B7:21:D1:9E:C3:17:50:1D:31:9A:CB:F5:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a17ded1f-77d7-3b50-aa81-4ea0607984cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:a0:20:42:86:d7:80:85:0a:20:cf:12:d8:4e:f7:8b:86:4a:
15:1d:e9:b3:40:53:73:37:d3:44:24:98:cf:ee:82:d2:09:73:
ee:01:5e:b7:71:b4:1b:b6:ea:53:d6:bf:54:e6:63:9f:ea:97:
20:40:82:6a:2f:6d:1f:35:ff:c7:cc:e4:4b:99:14:21:2f:7e:
35:71:24:9e:c7:d8:74:8c:14:42:86:26:b6:ed:f1:62:95:68:
56:44:30:f9:3e:52:9f:11:47:b5:39:0a:c2:4a:6f:9d:fa:96:
47:03:08:16:65:6f:c0:b2:92:2b:0c:3b:11:d4:ef:e9:48:a2:
f7:6c:18:53:c2:51:1e:d0:29:71:37:1e:69:da:a2:50:36:bf:
36:4b:77:1d:a8:2c:c4:2b:33:69:8c:cd:2a:32:c1:22:f7:dd:
ca:9b:a7:c6:2c:3a:ac:46:13:b0:1a:a1:6e:f5:59:72:a6:82:
1f:31:7a:4f:de:13:38:d9:02:76:24:ee:6c:6c:2c:b2:90:c5:
ce:26:95:85:df:70:bb:0b:e9:91:35:04:34:61:33:04:ef:71:
11:18:b6:89:98:97:71:03:7a:e3:c6:0c:d1:f1:38:8c:85:53:
63:8d:73:c0:34:d2:cf:e2:7d:ac:d1:ee:04:00:90:9c:2a:ae:
2f:9b:f5:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGw8LnYMnFPH2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MzA3NGYzZDItZjNmNS00MzhlLWEzZWEtNGYyMDJmNTdjZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCWQqlEOIRqqglD9w+c2QousgIUmH1rQXy8V
4MMfuHwqOPNz/pWDFXXpHegmRHDCxfnQbs+kH442gmxwLWF0wfWdxvncneottG7/
KWXNlXWKMOGPKpfcypHp3T26fc4ph5ldvKt9nLvr3YH2740zVi3RlSbUNnetWXeC
YcU6h//ahdLhYqWQJismXpfSdiqny9gWFy6cE0QtVJlJyV9qD1VVxTr4zuJe3V/y
BgHmOHP6GptXNGUEvA2PCZ65v1fLUk1yYfGS72GI3o7UUOM37mrLPt5u/SVyzMD1
ug+5c5NyLZ7pu0ANZQ1zzawRkChI53579J+qOP2hI9KuOthZ1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOfHmPCkLy3IdGewxdQHTGay/W6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTE3ZGVkMWYtNzdkNy0z
YjUwLWFhODEtNGVhMDYwNzk4NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+gIEKG14CFCiDPEthO94uGShUd6bNAU3M300QkmM/ugtIJc+4BXrdx
tBu26lPWv1TmY5/qlyBAgmovbR81/8fM5EuZFCEvfjVxJJ7H2HSMFEKGJrbt8WKV
aFZEMPk+Up8RR7U5CsJKb536lkcDCBZlb8CykisMOxHU7+lIovdsGFPCUR7QKXE3
HmnaolA2vzZLdx2oLMQrM2mMzSoywSL33cqbp8YsOqxGE7AaoW71WXKmgh8xek/e
EzjZAnYk7mxsLLKQxc4mlYXfcLsL6ZE1BDRhMwTvcREYtomYl3EDeuPGDNHxOIyF
U2ONc8A00s/ifazR7gQAkJwqri+b9W0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:46 2025 by rpki-client