Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d90c5bf-a400-3d13-914f-56a1ac24de29.roa
File: 8d90c5bf-a400-3d13-914f-56a1ac24de29.roa (raw, json)
Hash identifier: u6tXiXBByyWTv3K2YUZOSedjMDVyLUMSeO7IoXy/RoU=
Subject key identifier: 66:35:5D:60:43:5A:49:43:D7:DE:A7:42:68:F6:19:94:AC:A1:36:C9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581CB2EBDD8E17F5F06A500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d90c5bf-a400-3d13-914f-56a1ac24de29.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.198.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:cb:2e:bd:d8:e1:7f:5f:06:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e3bc05e9-befe-41ba-84ed-ae5de0346149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:bc:d6:d6:84:d1:74:8f:8c:78:b7:ed:52:
4d:b1:a7:9d:5b:82:a2:7b:19:68:85:d4:cc:65:24:
41:d7:17:e1:42:7b:a8:92:77:f4:32:4d:f9:4a:d4:
20:9b:38:c1:b4:d1:7a:45:8e:ff:ed:01:35:f0:92:
fb:21:fc:05:c3:3f:bc:b3:19:18:99:0b:7a:51:09:
14:ec:6e:47:9f:da:eb:1e:bf:44:65:c2:c1:b5:68:
83:4d:06:47:8a:04:54:ff:ca:a3:bc:b4:c0:eb:1c:
86:2b:6a:eb:0a:d4:7a:fd:17:59:dc:84:73:42:82:
d8:b8:66:85:14:58:33:ce:d2:ca:1b:c2:df:96:7d:
34:ad:82:14:31:86:d8:02:1c:52:e5:d1:d9:99:98:
2c:c8:3e:56:32:86:7a:9f:51:12:95:76:3d:83:6d:
3a:da:48:37:72:38:25:60:09:42:c5:82:48:f7:f8:
e0:a9:16:93:10:16:8e:3d:d5:83:8f:30:5d:fc:46:
4e:08:c7:c0:e6:0c:06:e4:03:16:f5:b9:76:53:d7:
48:41:3e:16:67:ac:a5:02:b9:9f:2b:cb:4f:69:9e:
14:e9:11:ea:22:e4:9a:fa:83:33:0e:3b:1a:2b:7e:
bd:55:c8:1b:f6:72:0b:85:32:6f:67:6f:0e:42:2a:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:5D:60:43:5A:49:43:D7:DE:A7:42:68:F6:19:94:AC:A1:36:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d90c5bf-a400-3d13-914f-56a1ac24de29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:73:ff:19:5c:cc:1a:b8:98:a6:1f:4d:9b:1a:43:ab:cb:16:
73:01:11:af:85:a6:a5:6a:d9:52:fd:71:6b:da:f2:63:3d:3a:
21:b9:59:f0:de:73:c2:9e:eb:c0:8c:3b:03:4c:48:fb:ee:7f:
be:9a:6a:21:7a:e9:2d:1e:13:68:b2:c6:e7:bb:53:be:d0:cd:
0f:a1:97:22:d7:fa:90:a7:7d:3a:af:e6:3d:9b:4e:86:ae:c9:
f9:0a:9b:33:2c:b1:6e:ca:d6:10:dc:b7:77:4e:2b:24:17:60:
52:fb:46:22:97:c3:1c:7e:e3:50:56:15:b6:db:7a:6b:ea:23:
8d:5b:97:10:d2:83:8f:bb:ac:6b:0a:8c:6e:97:01:b4:50:8a:
7f:2a:c8:c7:54:1a:3e:64:f8:57:0d:2d:f6:ae:55:f1:f4:3e:
e5:5a:db:d2:49:8f:27:f6:9f:6a:f3:84:1d:30:57:3c:fb:25:
22:43:a2:2a:33:d5:d4:68:bc:b5:a4:d6:53:71:dd:e5:98:88:
ef:6e:70:23:35:60:ca:6a:d4:5e:49:21:9a:d8:6c:37:5a:2c:
d2:8d:e7:1d:70:64:b4:e7:f5:0c:4d:4a:db:9d:9d:c9:7e:5a:
88:a7:8b:3c:1b:e7:9f:88:47:dc:df:d4:0b:ea:3f:f1:0b:62:
d3:fb:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:58 2025 by rpki-client