Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa
File: ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa (raw, json)
Hash identifier: pafsOUOdpB0JwBE/kiKnrcCr2tIlnV8bWkyVn8Ul/UE=
Subject key identifier: 06:C0:30:FF:0D:06:61:27:CD:E4:1D:F7:A8:7A:A3:9A:5B:CF:CB:E3
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285849350EAA6ACAB2AFCBAA131000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 397182
IP address blocks: 149.96.184.0/22 maxlen: 24
149.96.188.0/22 maxlen: 24
149.96.192.0/24 maxlen: 24
149.96.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:aa:6a:ca:b2:af:cb:aa:13:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=b16cbae2-9113-465a-9160-e76a0ab440c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:f0:3a:98:6a:27:19:8b:97:0c:f7:28:e5:
4e:f6:3b:31:d4:2d:e5:83:35:d7:ff:f4:71:a5:0c:
b0:46:55:d8:2a:92:93:86:77:41:de:59:e5:0b:f1:
12:9a:27:23:75:d1:42:51:d3:e3:b1:3f:35:bf:3e:
18:c9:6d:93:f4:57:a7:a3:bd:a6:ee:8d:ee:51:b8:
6e:ca:85:bb:1f:68:2f:0a:40:a0:84:82:28:d9:0c:
11:8e:8d:ea:e1:36:41:ba:17:01:8f:17:cf:da:28:
e8:6b:f5:d8:7f:f5:d9:d6:27:01:7c:9e:02:02:69:
2b:57:48:49:bc:6d:b9:14:00:fa:e9:c3:e7:e9:34:
33:2f:91:e3:d5:fc:fd:62:60:ec:ee:eb:51:5e:a2:
11:5c:48:0e:6c:66:13:fb:dc:38:57:07:13:f5:c2:
4e:00:84:7d:d2:59:c9:2d:26:b5:2f:8b:b7:47:6d:
9e:dd:e7:a0:55:af:91:37:9d:d5:7c:55:d5:52:e1:
1d:4f:37:89:15:b2:8a:12:9f:40:b8:c0:5b:71:4e:
67:d6:3f:6e:85:6e:3a:98:8c:7d:4d:65:d0:a1:05:
32:62:f8:3c:f1:b4:a2:eb:d6:f8:28:21:7a:fa:d7:
67:70:2a:09:f1:c8:28:b5:6c:63:95:50:be:54:f2:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:30:FF:0D:06:61:27:CD:E4:1D:F7:A8:7A:A3:9A:5B:CF:CB:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ebd7b3f0-fc33-31f3-b693-7ebc38da5a9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.184.0-149.96.193.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:57:1b:b6:32:37:5e:4e:72:65:d6:54:0f:d7:bd:13:4d:46:
92:1c:ae:ba:1a:51:9a:6b:16:a0:d5:87:11:a2:5d:a0:a9:52:
1e:a0:f5:e1:6a:9f:91:0f:fd:01:95:89:45:fb:af:8b:f5:d6:
97:01:75:dc:d9:c1:f3:be:1f:f8:9a:7f:5a:9d:67:37:fa:7d:
05:27:d8:32:e7:25:44:66:4b:ba:b9:c4:24:96:0c:49:78:a8:
af:47:58:c7:97:fd:08:ab:83:ed:19:36:7d:3d:13:82:7e:8c:
c8:ea:ac:3a:ae:c9:f4:ec:82:8a:ec:6e:2e:a5:5c:4c:06:62:
d2:0a:55:17:e5:50:e2:30:bf:8b:11:b9:51:dd:7a:40:53:b7:
b0:6d:30:51:71:f1:33:0e:67:35:76:66:ec:33:91:36:57:6a:
49:df:88:33:b3:8e:30:5f:a4:2b:a4:03:ba:e5:db:36:4c:41:
30:88:5b:59:b4:8c:12:20:57:43:16:d4:fd:9e:d4:10:67:f6:
13:4e:07:cd:d8:5d:69:0c:bd:25:f0:e9:64:c9:33:8f:fe:fa:
62:54:79:f2:25:f3:c6:91:af:0f:be:50:a3:ce:86:e1:f2:02:
af:75:d6:2f:c6:41:55:84:1e:12:ab:b2:7f:70:f8:62:11:e9:
56:91:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:09 2025 by rpki-client