Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa
File: 7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa (raw, json)
Hash identifier: Wekx6zd8M0pJCX8pToz0rrvcofp+2DJipHbFud0Y76A=
Subject key identifier: C4:9A:C4:C0:79:2D:A6:7B:1F:88:4E:5B:8F:39:E1:1E:07:37:9C:3A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581C3127F2D69226BD4C500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.196.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:c3:12:7f:2d:69:22:6b:d4:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=515f3804-1017-4934-a93d-6f74cb42825c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:47:3f:27:fe:80:c4:f9:39:8b:7a:3b:81:fc:
c4:f4:ab:94:d1:8e:0d:c8:d2:94:27:ad:0b:79:fb:
d7:5c:62:ba:4f:ba:0d:7d:e8:71:f6:e9:ae:cb:a3:
e9:4c:80:be:fe:95:08:a2:62:e0:c6:a8:3d:ca:5e:
9e:cd:c6:cf:a2:45:86:e7:0c:60:0b:73:a9:cc:e2:
bd:6a:32:49:a5:be:8d:34:e3:dd:b4:24:82:59:20:
df:2c:2b:14:7e:9c:21:1b:bd:29:f3:39:95:6c:a1:
59:2c:99:79:16:ca:0c:5a:13:70:61:89:f3:63:5d:
e9:b5:31:93:a1:3a:6b:c6:f1:f8:10:12:c7:62:dd:
e9:14:94:e5:23:ee:60:c2:8f:c7:5b:a0:f9:7b:42:
d9:34:66:79:ab:e1:1c:27:91:fd:8d:ab:2a:41:94:
bd:36:05:1f:e8:49:06:ee:be:ca:e0:81:3b:79:14:
20:38:a4:df:a4:94:b0:1f:04:21:0e:50:d5:eb:6a:
9d:d0:5d:1d:80:ac:7c:57:c2:f7:5a:14:17:86:31:
56:75:2e:c3:52:e3:2f:01:5c:71:1f:47:89:fb:0c:
fa:86:ef:8e:9f:fa:4a:7c:56:e9:9f:6a:1b:e3:a8:
fb:44:77:15:41:33:1b:f7:8c:da:6d:1b:c4:85:69:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:C4:C0:79:2D:A6:7B:1F:88:4E:5B:8F:39:E1:1E:07:37:9C:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:0e:d0:94:b4:61:50:f4:1c:d3:ea:6c:c2:d3:40:52:2b:6c:
c5:96:6f:f7:12:6b:24:a5:3c:f7:3f:1c:cb:4a:3c:8f:c3:4c:
03:00:60:bb:1f:0e:41:91:17:5d:c3:f0:94:90:49:0a:b0:ed:
42:a7:70:3f:19:9a:77:40:9f:91:1f:d2:32:e6:81:7b:76:70:
d6:78:43:eb:bc:8f:87:b1:10:10:a8:c0:47:d3:a4:e9:dc:b1:
60:5e:b3:a8:e3:93:37:97:42:04:b2:ef:fc:b7:a6:99:8c:97:
e1:e4:17:1c:ec:dd:21:c6:2e:62:a8:5e:d1:f4:0c:18:fd:4a:
56:17:e7:91:e3:dc:37:94:6d:3d:a5:69:d0:aa:ab:7a:51:a5:
51:bf:12:01:29:a1:ef:14:cf:4c:d7:a3:05:7f:84:5d:c4:ef:
32:9f:b8:7f:ad:2c:24:02:b2:28:b6:2a:5c:35:7a:56:80:48:
90:b4:89:6a:dc:88:b2:6f:b3:0d:a9:0f:05:43:3e:a8:84:34:
99:24:4b:47:f8:21:c4:05:60:02:e0:c8:e6:0c:8a:d3:a4:09:
a6:7f:45:44:9e:45:bb:a1:4c:6f:79:11:33:85:9a:f1:98:9b:
25:78:7e:75:55:55:9b:2d:89:be:23:3e:26:9e:b2:b6:b7:27:
4b:ca:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:25 2025 by rpki-client