Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc74614-192e-3a12-85e1-0eb144b847ae.roa
File: 0bc74614-192e-3a12-85e1-0eb144b847ae.roa (raw, json)
Hash identifier: 7pCGdLBaIq2HFbV6buvzXEjSx2ramCHsiOi/BEPIDh8=
Subject key identifier: AB:24:2A:70:1B:C9:BB:C3:83:31:39:01:1E:24:81:38:13:3C:FE:89
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581CBD6C5FAAA4B00740DA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc74614-192e-3a12-85e1-0eb144b847ae.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.198.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:cb:d6:c5:fa:aa:4b:00:74:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5cd5d09a-c3e5-4a91-b776-f5619f578da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:59:59:53:bd:c9:3c:d0:d0:dd:31:1a:1f:
5c:e5:1f:b9:df:f1:30:a2:62:92:3e:58:81:0c:f6:
4d:a7:ff:c6:70:e9:6e:c1:04:a1:44:2d:1f:7c:d9:
88:ef:87:a4:b8:03:23:d3:ec:3e:56:73:82:0e:5a:
7e:63:f7:76:51:0b:0f:0a:1b:09:20:00:c1:a4:9c:
61:c8:4f:62:7c:70:45:9b:7e:22:7b:0e:5f:24:3b:
77:c0:fa:1e:d4:f0:d7:24:06:e2:1c:09:98:f1:b0:
6d:d9:8b:b1:37:8b:f0:ae:6d:29:d8:6f:f3:2a:55:
f6:14:2b:2e:20:d5:28:cd:a3:e0:c8:8f:8b:e4:99:
a4:9e:94:bd:90:6b:7a:42:39:d4:b6:87:e6:b6:e5:
fe:2f:d5:37:bf:78:f0:d2:f7:61:fc:b9:50:e5:c1:
37:32:a6:b1:57:dc:05:0a:1d:ec:59:96:6d:c1:32:
88:70:01:db:d2:25:f7:15:54:1b:67:ca:56:64:4c:
96:24:73:38:2a:97:ab:f2:50:81:9d:4d:9a:54:d7:
95:24:ed:b5:89:eb:e2:19:4b:3d:53:1c:64:5d:f8:
0c:89:e4:b4:86:ec:0a:cb:1e:bc:53:08:88:ef:e1:
d1:da:ef:c6:23:22:8e:35:7c:60:67:c8:90:f2:c9:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:24:2A:70:1B:C9:BB:C3:83:31:39:01:1E:24:81:38:13:3C:FE:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc74614-192e-3a12-85e1-0eb144b847ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:5a:16:99:10:bd:46:07:a8:f1:dd:59:59:db:71:e2:a7:d3:
5c:27:41:70:db:6c:d7:0e:d6:ff:12:a2:84:87:97:28:9e:be:
db:29:43:f2:48:30:70:38:e8:fc:79:56:5d:09:b7:05:3c:7a:
1f:e3:17:04:23:b3:da:45:ef:3b:11:cf:74:8d:62:16:91:a7:
ba:4e:58:d2:09:79:66:f9:d2:af:a6:72:4b:34:68:16:77:e4:
df:a6:91:13:c9:44:4a:1c:22:fa:4d:51:b9:f2:fd:8d:e2:5b:
81:bd:b0:2b:7c:05:8d:fd:ee:b5:70:be:a6:20:b5:cc:a1:af:
2c:a4:83:1a:49:04:d3:a4:27:94:cc:22:89:dc:12:29:9a:ad:
bf:3d:a3:36:82:74:12:be:74:01:7d:58:e0:a8:51:70:1b:70:
aa:42:f8:cc:ed:ba:17:01:af:18:ca:09:2c:91:2d:04:13:0d:
7e:9d:0d:87:7b:7c:ab:cf:87:c4:20:ae:d1:d4:0a:75:5b:c5:
b5:98:16:77:54:1f:f0:3e:8b:b9:29:90:0f:76:48:fe:0a:fe:
38:42:19:2b:8a:64:cd:4d:71:5c:5b:9f:a0:37:39:aa:33:83:
56:0b:28:74:0f:0c:a6:0b:a1:10:27:8b:3a:b6:e8:f5:78:4f:
52:58:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:37 2025 by rpki-client