Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
File: f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa (raw, json)
Hash identifier: oRz6+MoHdnaO7/2FCyMEH2DnJ83VWlwE6wNAe/DPiCQ=
Subject key identifier: 5D:D8:8C:6A:EF:6F:B2:4D:25:D7:05:82:51:D2:73:38:EA:0B:25:58
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F43285848F22C72D7849678C3957D9700
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 16839
IP address blocks: 149.96.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:72:d7:84:96:78:c3:95:7d:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=20a6843c-8f7f-49d6-a781-0116e017f551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:c5:e2:cd:e9:c5:21:e1:a3:72:65:a1:bc:
e6:d6:f4:80:99:c4:80:1a:77:cf:f2:ed:41:0e:0d:
ef:52:b6:4b:c7:fd:20:e0:ce:c1:ff:84:a0:ef:f5:
d9:45:29:b0:3b:33:d8:21:3e:5e:4f:e1:f3:47:39:
79:a7:1c:58:9c:be:44:c1:c5:d7:e1:2e:31:a1:11:
32:b4:77:e8:a3:54:a3:f2:6b:80:f2:83:e3:a1:d7:
b3:9c:3a:22:1a:e2:57:9b:86:ac:93:ff:31:b8:9c:
30:20:36:e8:88:be:9f:22:4d:e0:56:9e:c1:40:91:
b5:fe:ac:02:bc:af:94:48:f8:0b:41:54:b0:2e:6e:
55:9e:5a:6a:40:74:da:d4:d4:c2:0e:0c:63:11:4f:
22:73:2a:a5:e9:f7:12:a8:97:9d:69:52:c9:97:f4:
da:6c:be:39:c1:93:57:99:ec:7d:8e:ca:63:78:18:
d4:8c:54:d2:61:a1:b2:c9:1d:a4:8b:18:89:99:61:
30:5b:c9:20:27:0e:b1:a9:ae:9d:90:27:93:47:b3:
21:bb:d3:dc:a7:3c:f8:2e:13:c6:7f:37:70:b5:2e:
a9:99:f3:4d:01:61:e3:c6:87:0c:a9:6a:9b:46:44:
21:c0:3b:cc:36:e0:2a:28:3d:9c:be:63:d7:72:68:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:8C:6A:EF:6F:B2:4D:25:D7:05:82:51:D2:73:38:EA:0B:25:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85ce0b2-9318-3d4c-bebe-47774a1065ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
149.96.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a4:15:d1:04:05:59:3e:ef:b5:24:91:1f:d1:a3:53:7c:a1:
d1:c2:9c:cf:19:ac:04:b2:4c:a4:87:0d:32:0a:9f:63:4d:f0:
ac:8e:c9:54:d6:5d:eb:e9:f2:5b:12:72:a0:68:c1:a3:46:e1:
43:5f:ba:f6:b8:ec:ef:8a:31:fe:5a:75:57:ab:eb:a2:3a:c1:
64:72:1c:ea:06:ac:70:11:a9:7e:84:d7:ef:61:37:38:54:36:
f8:2f:a4:99:62:e1:3a:7a:85:74:76:ca:47:4e:6c:e3:cf:60:
ff:e1:fc:0c:41:71:91:50:0e:0e:cb:44:cd:ee:44:7e:30:23:
e9:ee:ef:fd:9d:b5:7b:f2:35:2c:94:df:23:3c:f0:58:36:ff:
d0:f6:43:a3:d1:45:2a:f1:60:72:ae:7c:21:f3:2b:95:6d:8e:
0a:4e:ca:1b:b3:ab:c7:fb:f0:26:55:9a:b8:48:29:9c:c1:9c:
9f:7c:41:3a:79:f5:82:d2:ea:ee:10:0a:cb:22:24:05:a1:6f:
81:ab:e7:7a:e5:45:29:b7:24:6d:e0:b5:59:98:e3:22:61:07:
2d:96:4e:f8:4c:ed:3a:4a:f2:0c:aa:c9:3f:d0:4d:5c:67:4c:
bb:60:3c:97:85:c8:2d:2c:25:76:56:f0:ae:48:5f:ad:16:d3:
34:6c:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:46 2025 by rpki-client