Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa
File: a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa (raw, json)
Hash identifier: W9jLIxl+jQA5UmGtmbJXW8zKMfs338a51Qb1nv5EYb0=
Subject key identifier: C0:70:A6:73:59:0D:D5:88:D3:4C:B8:8E:E9:35:27:64:B5:6F:57:0E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581C6AEC8D22B7C2D367D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:c6:ae:c8:d2:2b:7c:2d:36:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=6fe2da4f-874f-43fa-996f-bff190c5cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:de:5f:96:4a:68:ef:47:cb:37:d6:f0:b8:
4f:0e:a6:d4:74:b4:79:fe:71:61:83:2f:78:3a:3e:
78:98:01:66:25:37:39:d0:69:39:11:04:63:70:f7:
b1:c3:c3:34:25:65:a9:08:cb:76:39:6f:55:21:b6:
59:e6:7b:14:e6:9d:43:23:86:e9:8a:3b:16:b0:28:
6d:82:dc:1f:ff:19:0f:4a:11:8e:b3:cb:62:89:bb:
47:e8:12:6d:f3:cf:d0:69:67:38:82:16:5a:26:5e:
27:ab:97:a5:3c:af:1e:60:25:8b:af:c9:26:5b:a9:
fc:d6:ed:3a:d7:10:8e:db:51:a0:47:0f:39:d4:27:
10:21:9e:fe:f5:05:b9:26:99:6e:23:2e:b4:c5:20:
a5:2f:51:9c:90:7b:1a:75:fa:84:05:c0:a4:cf:9f:
a8:60:3d:62:fb:f2:ed:5d:3a:54:dd:4c:28:f2:4e:
ec:b4:cb:96:6b:fc:0c:ec:3e:c1:34:ec:eb:f6:48:
41:f9:35:fb:e2:cb:e4:89:d8:bd:d5:29:28:a0:f2:
94:74:54:9f:59:51:f8:0f:de:9c:80:f4:b6:fa:1c:
07:ef:d3:f5:8a:28:46:aa:26:5b:8c:83:a6:f1:16:
3c:0a:cd:af:0e:84:c8:da:50:7d:ce:73:89:6e:2a:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:A6:73:59:0D:D5:88:D3:4C:B8:8E:E9:35:27:64:B5:6F:57:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:db:05:9c:7d:47:7c:87:a7:ff:7e:eb:f7:aa:25:ca:9e:7a:
87:b0:c1:00:94:10:0c:34:63:97:36:ef:fd:dd:6a:52:e7:21:
7c:c1:94:10:c5:0f:e4:ba:6a:a8:b3:a5:3e:d9:4f:0f:4c:42:
f1:2f:ca:93:71:35:51:8f:7d:6f:16:89:33:ef:8b:fa:28:93:
3a:52:cf:22:6f:ac:9b:16:dd:53:9b:29:02:e2:d5:30:28:6a:
3e:a4:96:e6:fe:87:e9:95:43:5a:55:79:91:21:a1:92:57:63:
1b:8f:c0:c9:81:e7:fc:47:4e:87:74:08:2a:93:8b:e6:86:8f:
7e:00:0a:9b:63:78:63:75:45:7c:86:d2:28:83:6d:73:72:17:
58:c1:53:34:96:b0:91:f1:96:75:79:38:2f:ad:e0:1a:d1:a0:
10:f8:38:1c:19:45:42:b2:ef:70:8d:fc:e7:bf:2a:ea:c3:f5:
b0:3e:43:a5:0f:c7:f4:f0:1c:35:51:0c:7f:33:98:e1:9c:76:
83:81:ef:97:6c:b7:1f:7c:19:7c:a3:0b:45:d8:b7:04:57:63:
52:91:cb:fb:06:f1:d0:67:c4:c1:28:9e:5e:55:68:48:61:ae:
20:6c:55:ff:ca:bf:e9:1f:c4:3d:72:30:e9:c3:3b:89:71:07:
61:c2:bd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:54 2025 by rpki-client