Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c05cf45c-df47-3895-bc36-4efa20355167.roa
File: c05cf45c-df47-3895-bc36-4efa20355167.roa (raw, json)
Hash identifier: 0Tor1i/XD5i7cqoC0WqDFS5sOcGs7M0rVKwfk0MI9Rg=
Subject key identifier: D2:C1:A7:FA:DC:1F:8E:08:6E:58:CB:39:08:F4:CA:E1:6E:DD:BB:E5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5813C115DDA53D83F8DCD80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c05cf45c-df47-3895-bc36-4efa20355167.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.198.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:3c:11:5d:da:53:d8:3f:8d:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4b672f68-b64b-4ebd-a5be-ed7ac673f0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:2d:8b:a9:f1:74:68:dd:f7:05:c5:e4:02:
5a:f0:a9:49:57:86:4d:1c:12:ff:4c:1a:40:fc:15:
57:08:c1:30:e9:cf:56:ab:89:4d:8b:08:85:bc:f1:
ee:16:c9:03:e1:ca:a0:a4:15:1f:1f:5e:ed:1a:2f:
2f:3d:c1:a8:f6:32:cd:ec:7d:ae:84:b2:bf:a4:55:
00:7e:8f:e4:21:8a:52:80:47:e7:0c:78:05:ad:41:
88:a8:b2:45:07:f8:81:ed:92:b7:9e:53:7c:8d:27:
e2:dc:fa:1b:ad:6a:e3:f6:7d:87:83:6e:76:b3:0f:
d9:99:00:07:9d:17:f6:94:06:0f:1a:11:39:ba:a4:
e8:42:98:8f:15:bc:e8:59:2f:50:66:4d:8a:5e:e8:
60:7a:3a:d2:14:1c:76:b0:df:f0:91:17:76:c5:bb:
e4:a0:06:67:de:48:e7:53:47:f0:97:7a:9a:cf:fb:
e4:08:ae:ae:cd:41:b0:42:57:0a:ee:a3:c8:f7:92:
64:3c:cd:69:43:b0:7e:35:64:2e:9a:7a:82:78:16:
0c:4e:b1:0e:8e:be:3b:46:d9:57:fe:9e:83:65:42:
47:00:17:f0:50:a7:3d:d6:4c:4b:3b:e6:75:21:77:
2f:15:64:66:1b:a5:ae:eb:31:eb:76:fa:cb:69:80:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:A7:FA:DC:1F:8E:08:6E:58:CB:39:08:F4:CA:E1:6E:DD:BB:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c05cf45c-df47-3895-bc36-4efa20355167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:19:cd:f4:cd:9e:11:27:94:93:65:a6:f4:e8:a1:f6:e8:1d:
de:d3:5e:80:04:77:51:7c:68:b9:de:17:b6:0c:1f:98:b2:32:
01:ce:b7:06:7a:51:64:1a:b7:b1:ea:cc:c5:0f:fb:46:61:b9:
1f:fd:42:b4:3f:6e:84:ff:47:37:63:56:3f:81:5c:26:8e:4e:
0a:ea:07:5b:40:36:0a:18:4e:e5:fa:7e:ba:6a:4d:18:2b:50:
2d:92:ab:09:00:f0:53:c2:b7:3f:31:a2:48:a6:f7:29:bb:14:
bf:af:f5:4f:3a:83:41:f1:06:66:2f:c0:f4:4f:bf:d3:c9:5d:
5a:28:61:3a:90:0b:8a:8f:81:a6:d0:ec:d2:f4:66:6c:54:b8:
4a:ae:17:d0:90:2d:91:c3:0d:8a:03:fb:9d:00:dd:80:bc:57:
17:88:5c:2b:a1:cd:7e:a7:f1:53:b7:bb:e8:b9:78:72:22:5b:
9a:39:e6:3a:2a:d0:93:d3:c5:a8:dd:bf:00:ab:23:e7:ae:a9:
8e:21:ac:6d:bc:1c:34:35:fa:8a:af:49:ca:2d:62:6b:c8:c5:
28:e7:5a:f3:fb:3b:9f:2d:81:b4:01:67:18:34:d9:bc:f1:39:
75:c1:d0:84:55:1a:0d:aa:ed:64:f1:44:5e:4b:59:5b:5f:63:
e0:02:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:55 2025 by rpki-client