Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab5e6e5f-aeb9-3835-9662-df722931667e.roa
File: ab5e6e5f-aeb9-3835-9662-df722931667e.roa (raw, json)
Hash identifier: IyIeSshcUI6S6QjZ7IEKCNUiV0uV9kjMZGIWvjhFVLM=
Subject key identifier: D1:15:79:D7:7A:08:A5:D9:78:49:E4:2A:0A:BA:63:FC:ED:AB:F9:16
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58136015D1118EEECFB2600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab5e6e5f-aeb9-3835-9662-df722931667e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.196.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:36:01:5d:11:18:ee:ec:fb:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=950e84e3-b32e-47c3-969a-690b7655701f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:48:f0:b1:fd:b2:9a:4c:3f:f7:0e:61:62:
d9:32:bd:a6:42:03:b7:05:59:fd:74:e1:9e:f2:81:
9f:dc:72:6a:98:1a:0d:41:dd:38:7e:76:f8:ca:ac:
28:1b:c5:50:fe:36:ba:1d:3a:09:76:40:e7:7a:c2:
d1:3f:c2:02:99:3f:ab:45:93:64:26:2e:98:78:0f:
db:a7:dc:d7:90:18:04:d6:5e:e0:63:26:7a:54:87:
88:3d:40:e1:d0:e5:fb:1d:d7:a3:b3:86:2c:b1:80:
bf:f8:bd:1d:01:cc:10:12:8b:05:9a:55:2c:84:95:
5d:74:0e:d3:1a:cb:43:33:ae:2d:da:f5:07:2b:1c:
d1:5e:6a:1c:18:64:49:fa:9c:43:72:f5:cf:57:3e:
41:e4:21:ef:ec:6d:a0:20:e6:b2:8d:cb:0a:79:3a:
6d:0f:b2:97:e9:9f:3a:06:30:f8:3c:85:bc:d1:eb:
39:09:43:3c:ef:5d:5d:0a:f0:a7:b3:a0:ed:80:3d:
77:71:0b:7f:86:f0:e0:f7:34:98:5d:bb:1e:90:98:
e3:12:02:6c:e0:da:fe:be:ae:e0:be:17:20:38:33:
a0:e4:bc:ba:82:61:95:ac:be:40:9c:16:5c:b0:69:
ce:1a:d1:1c:7a:04:9a:fc:e7:91:fc:10:fd:50:4e:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:79:D7:7A:08:A5:D9:78:49:E4:2A:0A:BA:63:FC:ED:AB:F9:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab5e6e5f-aeb9-3835-9662-df722931667e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:17:c7:9f:5c:17:7e:cb:b8:f2:36:b8:53:50:0f:38:5e:5c:
5a:61:d2:84:83:55:f7:5d:d9:a8:84:bd:3e:ae:12:5f:45:ab:
80:41:82:a7:f8:6e:be:c3:06:54:08:52:db:f3:fb:a9:da:04:
b8:18:c9:52:12:4c:04:f0:1b:c7:76:98:e9:25:43:55:7f:48:
78:60:93:09:1b:c5:94:82:62:11:ad:2e:34:ff:9c:de:83:16:
0a:60:66:50:d8:0c:9b:9a:4d:12:6f:11:e9:45:57:74:d4:97:
58:16:81:27:70:0c:85:bd:4f:bb:45:2a:31:30:fa:ce:7b:1c:
1b:2d:75:5d:27:eb:10:d5:0c:ce:44:96:70:33:4f:78:43:9b:
bd:0a:8d:1c:f3:d4:86:49:0e:b1:b5:e0:5f:e6:a1:00:4c:e0:
ed:c0:94:a8:00:77:f9:b5:e1:45:6f:54:73:e8:62:65:75:c8:
83:d5:45:a9:5b:c6:62:b9:cd:f0:6c:90:bb:79:ff:a0:03:8e:
13:47:a9:b0:39:9b:e8:4e:d2:7c:2d:ed:63:df:96:da:e9:52:
70:54:52:f9:8a:a1:9d:0d:cd:9b:7b:0c:e5:c9:a5:f0:ba:5d:
32:fa:0c:5a:6f:13:fa:8d:2b:ad:7d:d6:cb:3b:f7:87:8e:fa:
14:c4:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:24 2025 by rpki-client