Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f8df1eb-3aaf-366d-b6b6-58406bd59e7d.roa
File: 7f8df1eb-3aaf-366d-b6b6-58406bd59e7d.roa (raw, json)
Hash identifier: Lr2MBuH5ujTrQcObe4rJ/YiJMlPtAiaqIVEqXwnYd/A=
Subject key identifier: 21:57:D0:6A:49:DD:D2:D2:46:AC:15:72:51:6B:E8:74:FB:81:33:B8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581BECFC27896F6BEE1FB50
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f8df1eb-3aaf-366d-b6b6-58406bd59e7d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.196.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:be:cf:c2:78:96:f6:be:e1:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=00b7169c-dde7-474f-b862-5c4674a657ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:94:e4:78:39:23:5e:74:58:a3:43:21:09:
b6:7c:45:73:d3:b5:08:c1:e1:bb:9c:2f:0c:8b:cc:
af:51:21:d5:90:0d:4d:77:26:c7:a6:bd:84:03:08:
d0:a2:1e:1c:60:c0:25:0b:d2:b4:c2:e4:74:f0:37:
6f:eb:fe:c0:6f:6d:bd:7c:f8:88:75:9f:12:73:db:
73:31:20:70:cc:bf:a0:67:2f:60:92:40:6e:88:da:
cf:b4:2c:af:23:c7:3a:1c:9f:13:ee:27:90:5f:25:
48:e9:81:6e:b6:ac:fe:44:f9:84:5f:0c:fe:56:43:
51:a9:2b:74:f5:21:52:e9:08:f1:b1:ee:e3:a3:b6:
93:85:e9:5e:68:52:e3:ca:fb:81:d5:6c:0e:c8:15:
c9:d4:bd:08:bc:71:00:40:e5:50:d7:c2:33:c4:bd:
e9:c4:0e:01:ad:6e:27:90:90:64:81:4d:4b:03:45:
45:c4:c0:aa:8f:69:08:00:fb:29:e8:cd:36:d8:e5:
01:39:7d:22:50:f2:ab:2e:7d:e8:19:e6:5e:e9:3d:
43:e6:89:19:d2:8c:f8:d1:6e:f4:6b:0c:5a:43:14:
1d:52:8e:a8:32:5f:19:bb:c6:bc:59:fa:b6:41:b8:
c3:21:82:bf:ff:c3:14:43:b3:30:30:57:b3:2e:5f:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:D0:6A:49:DD:D2:D2:46:AC:15:72:51:6B:E8:74:FB:81:33:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f8df1eb-3aaf-366d-b6b6-58406bd59e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:14:a3:a7:22:12:04:46:0a:42:54:a9:2c:33:e6:83:cc:64:
0c:e8:55:87:7d:e6:77:76:ba:d9:b0:c4:c3:48:3a:3d:68:56:
0d:25:16:a7:e4:bd:45:be:ce:72:f4:fa:ae:0f:59:92:dc:20:
32:d0:1b:d0:c5:c9:48:85:28:5b:19:b9:8b:79:b3:9b:15:ef:
e8:71:1e:63:37:c7:93:89:1a:19:77:72:4c:ed:4e:75:8d:7f:
bd:e8:6c:a8:7c:de:3c:c3:12:de:fa:6d:de:0e:c6:ee:68:02:
27:f9:1f:17:ec:dc:3d:ab:85:f1:d1:8e:1a:dc:3f:cf:2b:9b:
75:c4:67:3e:e8:60:fc:91:d0:92:a7:ee:84:ba:81:27:9a:82:
15:58:ff:d5:cf:c2:9a:ed:9d:1d:6e:92:3b:96:c2:77:dd:12:
3b:c1:7f:93:72:10:14:3d:2c:09:b3:6b:ab:fd:2b:7e:e7:07:
85:a7:4f:b3:84:14:d3:ba:69:e3:9f:72:02:cb:b0:83:c5:13:
0a:b1:c5:0b:96:5b:4d:44:17:cf:a3:22:15:ae:cd:97:c4:6c:
cb:98:90:c0:60:3a:85:c7:01:7c:b8:e5:64:c0:72:b2:9f:49:
24:4d:cb:08:42:c0:a9:b6:af:2a:b9:cc:23:1a:26:1a:81:d3:
bb:69:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:04 2025 by rpki-client