Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2d81d87-a7b2-38a9-8879-1dafd5bf0154.roa
File: c2d81d87-a7b2-38a9-8879-1dafd5bf0154.roa (raw, json)
Hash identifier: Df/ADFDvoR0OT+CVknZfub2qQKFI4ufwIlriJ726aFk=
Subject key identifier: 6F:8B:9F:B7:16:E4:6B:AF:90:45:9E:9F:84:9B:5E:28:2C:C7:B8:C4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58139AA9BFBFFE98A127CF8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2d81d87-a7b2-38a9-8879-1dafd5bf0154.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:39:aa:9b:fb:ff:e9:8a:12:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a1102245-31c0-4914-92eb-6797cef7c50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:83:76:4d:8d:b7:a5:f2:aa:59:eb:66:fd:
8a:66:2d:0c:28:e9:2b:1f:03:e4:1d:84:7c:30:62:
24:01:f3:96:de:29:99:3e:6a:ec:30:cf:6a:24:a0:
fa:08:82:53:a3:0d:19:d2:ce:2a:b9:93:c6:d3:d8:
53:98:0d:41:19:57:b6:20:94:5a:7a:bb:f4:28:bd:
af:39:f1:15:fd:57:72:66:eb:9f:5c:0b:05:bb:e9:
de:b4:2e:e8:70:a3:c1:26:71:90:ff:f8:02:89:c1:
d8:91:64:77:aa:2f:2d:4b:be:96:68:66:f3:1d:4a:
f8:46:2b:54:a1:ad:80:e2:72:2d:b1:42:62:4f:69:
32:f2:63:73:72:10:40:9b:21:f3:5a:98:94:14:e1:
07:02:85:7c:6c:d4:8a:f2:d8:4c:6b:3a:a5:f0:f4:
88:6d:1a:8c:10:2c:a1:f9:39:6c:27:04:14:fe:cf:
2b:c9:d6:92:42:cd:8c:ba:31:b5:92:ee:d1:79:f4:
e4:7f:fa:62:aa:78:00:e9:8b:59:e4:6b:73:ce:04:
f6:e4:f3:43:e8:a6:f1:e4:94:ef:e6:6b:69:c7:17:
b3:28:55:bb:81:c2:cc:00:a0:a8:da:45:45:fc:d0:
a0:46:e5:58:57:d6:d7:d8:e8:0f:63:a9:08:f5:4d:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8B:9F:B7:16:E4:6B:AF:90:45:9E:9F:84:9B:5E:28:2C:C7:B8:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2d81d87-a7b2-38a9-8879-1dafd5bf0154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bc:d6:a5:9c:7a:6e:42:98:a8:df:00:7d:f1:3c:62:f8:9d:
44:d6:fe:8e:a1:60:4b:e7:e6:3f:ee:a1:a5:69:af:9f:c0:c5:
7e:87:44:d8:6d:d6:9e:ae:80:c0:f5:54:11:63:a0:25:36:95:
d0:aa:0a:96:a0:f3:67:38:3b:39:e6:f1:6d:e5:bb:10:28:fd:
6e:88:ba:06:c3:99:22:cb:23:12:28:15:14:2d:6d:c1:61:84:
95:a9:45:24:8f:df:d1:c5:eb:f3:9b:49:7d:c7:ed:33:01:7a:
5f:ea:53:dd:f7:b1:a1:71:a0:8a:0f:5c:38:dc:71:e8:62:60:
dc:9d:b1:45:0b:83:76:51:cf:61:53:d7:77:55:00:05:4c:23:
06:b7:ae:82:f3:3e:82:6e:33:37:33:d3:0b:3e:17:34:25:cd:
d7:f7:3a:68:3e:42:a9:f5:21:88:64:0b:b8:b0:70:67:dc:34:
2a:8f:68:9f:9d:9e:b0:80:fc:0b:a9:ed:16:01:c4:e2:f9:7c:
7b:2a:48:31:31:c8:c9:51:ca:d0:78:74:1f:5f:e3:8c:18:99:
d1:a3:ee:83:1a:82:a2:71:b1:06:5c:a9:7b:83:97:ac:43:cc:
45:3b:8c:61:b3:57:38:fe:72:35:8b:1c:d5:09:81:af:75:8e:
70:b8:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:35 2025 by rpki-client