Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2e6490c-e13d-32a6-8e8b-b846c750604a.roa
File: a2e6490c-e13d-32a6-8e8b-b846c750604a.roa (raw, json)
Hash identifier: 9iURKbfjdaaddu+g+T2IXpMEWSwAb6vLt9gAIWgC9Zk=
Subject key identifier: FB:71:A5:40:81:DA:1D:28:B1:B0:C8:B0:F6:29:EF:91:09:6F:99:DA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5813031D7D5D85E87263B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2e6490c-e13d-32a6-8e8b-b846c750604a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.196.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:30:31:d7:d5:d8:5e:87:26:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e972e07a-565f-4be9-a7fb-021ce71b5f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:2c:7d:96:3c:d4:08:2b:69:01:50:3c:ca:
97:c9:90:04:92:3e:a9:31:b5:0c:7d:bb:36:eb:59:
eb:5d:65:b3:7d:50:fc:13:46:8a:c1:f9:66:c5:e6:
f1:1b:eb:67:63:91:e1:37:4b:e4:54:a6:e2:a8:df:
a4:ef:ee:00:3e:fd:32:38:34:c1:05:5a:0f:9f:dd:
71:96:1a:16:c0:94:c6:7c:e3:80:02:70:b5:e8:18:
29:95:88:ff:e7:be:4e:5f:03:de:be:c8:16:ec:5e:
37:0f:fb:97:60:71:0d:fc:0d:72:e2:b2:b8:b1:d5:
59:13:a3:fa:fd:fd:30:4b:92:02:e9:3e:d8:65:97:
f3:dd:5b:61:3b:3a:cf:3c:ae:1b:47:72:7a:fd:c9:
fd:5d:d6:19:02:db:f9:7d:66:0f:6a:5d:cc:75:52:
f0:af:96:88:86:b1:8a:c3:c9:55:de:c7:a6:e7:56:
b0:7a:e9:b0:f3:2f:ea:9e:d6:58:b2:3f:64:50:9b:
9a:9b:b3:58:26:ee:a5:1e:f8:8e:12:70:0f:03:67:
e9:88:21:df:3d:95:2b:f1:9c:4d:c5:95:c0:9e:ab:
c6:3a:49:1e:87:3f:37:91:61:c4:6e:4f:2c:cb:22:
c8:b3:d8:ae:c9:c0:80:61:9d:3b:d7:d6:19:29:51:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:A5:40:81:DA:1D:28:B1:B0:C8:B0:F6:29:EF:91:09:6F:99:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2e6490c-e13d-32a6-8e8b-b846c750604a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d2:31:6c:6e:be:35:ee:65:3f:45:fc:49:ae:9d:f9:9f:ce:
67:07:53:81:33:7c:8c:1b:16:c0:e8:8b:32:a3:39:c5:3c:1d:
ce:b6:0d:d2:a2:5d:1d:51:ef:ca:ff:3b:eb:92:58:90:32:c8:
ad:5a:5a:43:b0:99:21:3c:9f:eb:ee:52:98:49:bf:ff:d8:e9:
de:ec:19:93:a3:46:d4:4a:ad:db:f2:f7:81:f0:ee:0d:52:f9:
2b:e1:bf:62:4f:1b:02:0f:ed:de:b5:65:dd:00:91:07:34:5a:
7e:f8:b6:83:8b:92:95:76:cd:f7:ae:0a:9d:3f:df:d4:94:0f:
f8:d1:d9:bb:ce:87:58:68:78:37:0b:38:d9:7f:f3:f1:38:58:
af:18:a3:ca:99:4a:af:7e:fe:ed:94:cf:3b:33:73:49:62:9a:
f4:51:d1:f7:c7:ff:97:cc:80:6d:00:3e:57:89:e2:e3:7a:6e:
e4:30:92:ba:fa:73:e4:e5:92:04:06:26:b9:46:7d:5c:d7:e9:
c9:01:9b:9c:d3:11:fd:bf:bf:7b:e4:ce:68:cc:2c:bb:33:8f:
69:72:09:4a:d7:bb:89:c8:68:3d:06:b7:3b:82:c3:f5:73:26:
4c:8d:2d:52:43:03:ca:b2:e3:32:fb:76:1a:28:e2:74:d4:03:
59:8d:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:29 2025 by rpki-client