Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e1983a9-a2ed-378e-865f-14c2e1ca5bad.roa
File: 9e1983a9-a2ed-378e-865f-14c2e1ca5bad.roa (raw, json)
Hash identifier: AYuf+wYb7Cy6UlrwJhElsM20Jnn+4e4KZ3jbM/5n5Mc=
Subject key identifier: 2E:FA:71:B1:2F:B3:1C:1A:BE:FB:1D:1A:41:C0:76:D4:46:A2:02:62
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F432858489340AFF5F947221BB39FB2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e1983a9-a2ed-378e-865f-14c2e1ca5bad.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 40306
IP address blocks: 99.196.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:af:f5:f9:47:22:1b:b3:9f:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=b8af47a4-6e3e-4347-a2d2-914694f0c92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3b:04:70:fd:20:32:90:7f:fb:94:47:7e:dc:
f9:92:e8:9f:d6:db:c9:48:d0:9f:bd:93:54:fa:ff:
70:a0:c4:4a:77:c1:ab:f3:8d:39:d2:f7:d5:45:d8:
ee:5e:2d:87:e8:37:a7:97:31:3c:62:d5:57:38:54:
94:4c:64:01:c9:56:93:b2:e3:b0:f7:3e:c6:24:6a:
49:99:4d:da:30:a8:21:bd:ed:12:ba:4a:94:56:5b:
e1:30:9d:0b:03:29:4c:ce:72:6f:98:2a:0e:92:2b:
df:88:ca:5c:dd:62:12:70:d2:e6:a2:37:da:0b:89:
13:cd:b0:27:55:56:85:90:19:b3:7b:18:e0:d3:d2:
fd:dc:71:8d:2f:3a:c7:fc:6a:d7:c1:4c:74:c3:88:
8f:6d:14:de:c2:be:38:a4:53:3e:f3:44:37:8a:1a:
26:48:b3:a1:7e:1f:71:8d:e6:1d:18:db:d1:f1:9f:
9d:bd:7e:e7:6f:10:45:7f:09:fc:d2:66:88:0f:83:
38:f8:5c:e0:d9:87:71:49:7b:67:04:0c:32:6d:b5:
cb:43:85:df:d7:7e:51:51:64:70:12:ff:d2:b5:be:
ed:7a:fc:46:cc:dc:56:fd:32:26:17:9d:2f:44:00:
de:da:b8:51:73:7c:ec:9b:dc:8c:dd:d6:63:20:2e:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:71:B1:2F:B3:1C:1A:BE:FB:1D:1A:41:C0:76:D4:46:A2:02:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e1983a9-a2ed-378e-865f-14c2e1ca5bad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a4:b2:2f:ce:a6:34:09:da:7e:22:cd:ce:c6:ea:fe:45:f9:
ab:45:8a:f5:91:ed:b8:24:57:b8:aa:f9:3c:01:b1:e3:a3:c5:
c1:c1:ee:c8:93:71:dc:03:0f:76:63:13:a5:f5:0e:88:76:bd:
7b:68:ab:bc:93:13:5e:67:9d:c0:39:38:72:e5:3a:13:13:4c:
41:80:f0:b0:b5:4a:1b:a4:01:53:f3:34:99:69:4d:fb:67:7a:
5c:61:e1:43:f9:9b:a8:c7:7d:69:d7:0c:b3:22:a4:ba:0d:6e:
f4:70:8b:13:a9:05:d8:af:da:1f:2e:1d:a8:c6:30:a1:24:20:
de:85:63:2b:ca:2f:f3:7c:ec:22:65:49:17:f7:12:af:80:c8:
18:4a:2e:0e:73:5e:ef:51:b8:08:12:2f:4f:85:2a:36:bc:1b:
db:c0:de:3f:9d:7d:83:3b:20:4a:1c:7f:20:3c:3c:a6:70:0e:
d7:4c:74:b7:ea:a1:28:a1:41:b0:52:b0:e6:f1:62:14:f5:ce:
2b:80:da:bf:45:6d:f7:d1:fc:97:3f:40:9e:c4:b5:f4:ac:d4:
bb:bc:95:6a:1b:b3:53:7e:d4:f4:a3:62:c8:21:3a:b8:4c:19:
5b:f6:5b:75:24:43:11:bd:14:cd:97:64:a0:96:49:96:a1:56:
b7:3f:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:06:43 2025 by rpki-client