Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa
File: 3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa (raw, json)
Hash identifier: B64dPqYzR2inkoQY7fynsBTs5exvAlx0p27P7iw4y2s=
Subject key identifier: 2B:AE:C5:A2:8D:3A:B7:4C:20:7C:11:7E:7F:4D:BC:5A:34:B7:59:0A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581CCE6EBF96F33CAF200C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.198.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:cc:e6:eb:f9:6f:33:ca:f2:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=fe7a0ffe-d0c0-4771-929a-e366275531ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:7c:3d:b3:30:c8:31:d3:8a:42:8f:df:0b:
87:7f:67:29:58:a8:9a:c0:21:44:be:38:2b:e3:de:
c5:ad:17:fa:f0:1f:21:96:0b:39:d6:9f:6e:08:8f:
a2:ee:60:03:1f:4a:52:70:b3:4d:b8:3b:4c:f2:22:
a9:f5:cf:c7:b2:31:62:60:78:af:b7:37:d3:f9:51:
ff:20:af:78:e1:2b:a8:01:95:7c:2a:33:61:1c:da:
ef:24:d5:0e:e6:38:42:6b:44:ea:65:c9:b9:1b:9f:
f5:e2:e6:71:a2:5a:ef:68:d3:8c:1d:b8:bc:79:1f:
92:24:31:a9:65:67:b7:f7:19:95:36:2e:e3:d7:03:
8f:20:b0:9b:04:8d:df:18:e2:1e:1a:83:03:de:d2:
b3:98:89:58:69:f7:0e:d2:df:4f:d3:bd:26:fe:e2:
56:be:e9:55:ee:6b:dd:c8:4d:f9:63:a3:b3:a2:49:
d9:18:ea:28:79:57:bc:0b:06:d7:db:f0:21:b5:f7:
d3:d2:95:bf:b6:3d:50:6a:ee:c6:34:b2:62:51:ee:
fe:ad:27:15:93:68:e8:dd:f1:06:4b:d2:ee:50:8c:
1b:03:f5:c2:54:b7:5f:e2:a2:cc:a6:e4:63:7a:5f:
ce:7f:99:0e:51:ef:43:10:b8:10:78:fa:f8:4d:16:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AE:C5:A2:8D:3A:B7:4C:20:7C:11:7E:7F:4D:BC:5A:34:B7:59:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3c02d4-9dc3-38a5-bcf7-1fd7d76e9c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:35:fd:70:76:3d:d0:59:5b:11:09:73:6a:f3:5e:54:91:a9:
57:3d:04:83:63:00:5b:50:90:fa:90:a5:45:14:57:8d:48:6e:
42:ae:b3:c3:39:9f:8e:9f:c1:0f:f1:2e:ab:0f:29:a7:2e:95:
b6:6f:fc:0a:5c:76:bb:64:bc:10:08:c5:74:9f:a3:10:63:14:
f1:a9:fd:68:b7:d9:8a:f7:be:a1:89:6d:52:a8:03:26:39:58:
91:32:32:93:20:60:12:1f:90:79:fb:01:de:c9:de:76:d3:c2:
e5:20:f8:fa:f8:f1:26:fe:23:b8:35:13:a4:37:27:51:a3:ef:
4e:8a:c9:88:16:c9:2d:b5:d4:ef:d4:62:8b:d7:f0:c9:c2:6a:
31:ed:82:90:93:42:64:22:85:f5:79:6f:5d:ed:e2:0f:59:e7:
a9:31:e6:a2:e4:79:bd:91:42:a5:65:8d:0b:b2:85:55:c0:04:
ae:c2:04:15:24:ed:54:44:cf:b4:8a:32:cb:bd:c4:c7:7e:a2:
42:12:6a:0d:c0:c1:f2:0a:c8:27:69:91:24:78:57:b2:5f:78:
f4:a5:70:f6:50:01:fb:68:02:d6:17:0a:85:07:4d:8a:48:20:
f2:2f:76:e8:00:85:34:73:2a:5f:79:82:7e:ef:e3:e1:94:c7:
3a:96:81:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:43 2025 by rpki-client