Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa
File: bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa (raw, json)
Hash identifier: UJCiIGibwotW1FqzjRMgMc4/zvDWQAEiMrfnOdsw9ss=
Subject key identifier: EB:A2:6D:25:E3:EA:00:57:80:22:A9:45:0E:D7:12:84:C4:8F:12:36
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C6BF49C61A5F2ED0C7700
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6b:f4:9c:61:a5:f2:ed:0c:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=142a0dc4-aa68-44ca-8da7-5ff9d17722ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:4c:16:cb:3b:e2:64:82:73:c0:b1:a8:71:
58:0c:17:49:46:3a:0f:8f:8c:63:97:49:ee:53:49:
c8:86:0a:31:ab:30:9e:e2:e0:6a:8a:01:4c:6d:02:
40:d9:46:23:64:b9:31:a6:7e:36:21:03:fc:a9:d8:
da:0d:7f:ea:00:30:9a:6b:25:8e:18:48:bc:82:7b:
5b:2f:e7:c2:da:b5:1c:78:22:71:a2:58:6f:e8:c2:
54:e6:7a:1a:ba:8c:34:2c:16:78:49:78:82:dd:f9:
62:fb:66:d1:3c:06:e1:e3:5d:02:55:6a:bc:34:92:
d3:a0:15:61:cf:a5:72:f3:38:31:99:9f:25:e0:d7:
f9:d1:11:63:a7:5e:8c:74:59:67:7f:ba:d6:3b:c6:
1d:20:a4:1f:9c:83:16:e0:33:3f:d2:41:58:8b:28:
f7:8e:a1:71:fd:94:18:f6:0e:80:89:1a:22:0a:6a:
61:79:de:af:0f:69:3f:96:22:0d:7e:f2:c8:04:f0:
eb:ca:30:4e:fe:81:a0:60:e4:1e:2b:c0:1f:f8:e5:
24:93:50:49:7c:40:53:c6:79:69:7c:d2:fd:85:b3:
9d:b0:f0:80:e5:43:f0:f9:26:9e:90:74:c4:cb:1a:
58:81:9f:17:f0:a5:c2:d2:6b:48:f5:27:cd:a2:66:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:6D:25:E3:EA:00:57:80:22:A9:45:0E:D7:12:84:C4:8F:12:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:f3:31:46:a2:1b:22:8f:a9:15:ff:65:8e:0c:5b:61:41:f4:
2f:3c:86:59:4e:c6:f8:c7:03:18:5f:01:dd:57:01:9d:d7:d2:
f2:55:3f:72:38:ad:9b:2e:13:3b:f6:50:40:61:be:ff:ac:54:
58:c8:a9:84:9c:89:9f:77:69:a5:4d:c1:7b:fe:d9:d0:ea:da:
2f:7e:31:4d:bf:9c:5d:af:34:8b:54:80:06:e0:9f:04:38:90:
ef:09:79:c2:6c:63:65:f0:d9:13:8d:1a:b8:4c:ea:06:ab:71:
a8:2c:1f:f5:4f:e7:dc:9f:2a:6a:c2:4f:36:6e:ac:2d:84:86:
41:e1:5d:17:28:77:3d:d9:07:d7:7c:dd:e3:ce:dd:70:74:03:
4d:f0:ec:a8:3b:93:51:28:36:18:8e:9e:be:37:39:4e:96:b1:
21:0b:8c:0a:b8:c4:f1:7a:9e:9d:8b:86:5d:50:34:d4:2f:99:
51:50:49:84:1e:08:79:cd:32:47:0a:c4:db:29:ae:23:76:2c:
54:0e:8f:2d:04:90:0a:f6:09:e3:ee:4e:1a:23:d5:78:73:77:
72:e7:0f:1c:cf:59:bf:35:ed:5e:7b:ef:54:2b:53:db:36:32:
a8:84:80:24:b5:5f:95:5a:3e:2f:18:f1:eb:b9:f1:48:db:34:
74:12:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:16 2025 by rpki-client