Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa
File: dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa (raw, json)
Hash identifier: KMH7SjeA/T7+9ajqn3pSABo6KsiMPL9/5HPNAdasxIU=
Subject key identifier: AA:44:B2:1B:EF:EC:5C:E7:2D:8D:54:0B:28:CC:77:02:88:FC:69:20
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581395723D9D1046CA61280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:39:57:23:d9:d1:04:6c:a6:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=96b4cbc3-b11b-4467-912a-f05e458b9a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:0a:b0:c1:1c:43:dc:13:43:2f:69:25:c4:
69:2f:cb:1b:f6:ff:79:2f:c5:93:58:35:84:95:05:
ae:6d:93:8d:31:74:e4:0e:a4:80:76:1b:93:6a:1b:
9c:d7:56:8d:7b:7e:b4:4e:dc:d6:16:2a:d5:a1:23:
e7:f9:da:4d:42:b0:44:ac:89:70:fd:5a:53:97:81:
c8:00:7f:44:17:c7:bd:ce:00:48:fb:a0:a4:91:28:
fd:8b:b5:2f:e4:bf:b9:e0:72:54:80:d4:3b:9f:a3:
38:42:d3:b2:c0:1c:39:05:27:84:a8:16:9c:b2:8e:
89:c9:a4:6f:54:2d:63:0f:1f:b9:52:2b:d0:e3:3d:
ee:db:5f:43:b2:80:06:3b:02:70:32:6f:43:50:b2:
21:4f:42:04:8b:f5:0f:6c:05:15:27:88:e6:d9:12:
fc:c4:e2:1e:88:ee:34:14:e4:43:70:f7:e6:d6:fb:
1c:ce:0c:b5:53:6e:f6:3c:75:c4:5f:eb:52:3f:81:
d9:e7:5c:7f:45:3c:65:ca:ac:5f:e8:89:93:d8:1c:
e3:71:88:61:42:b9:6c:2d:ae:04:4d:9b:80:15:8b:
b9:6c:59:1b:41:07:d8:a5:6a:5e:6d:29:8d:d5:05:
08:96:11:5f:eb:df:ca:15:37:8d:80:45:eb:9a:ad:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:B2:1B:EF:EC:5C:E7:2D:8D:54:0B:28:CC:77:02:88:FC:69:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dfa25c33-69e8-3003-ba71-4a13f38a6d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:66:2e:b4:a5:fa:2f:d2:74:8f:2f:7f:68:08:8b:12:06:ec:
dd:89:3c:6c:cf:7b:9e:dd:cc:1d:d5:d0:4e:43:28:a5:0e:24:
46:65:ca:9a:ea:bb:c5:8a:80:6f:c6:50:21:0f:81:6a:5d:a1:
e3:bb:e0:0e:e5:62:0f:a4:1d:67:3c:64:03:d5:ed:d0:b1:7c:
74:09:08:58:e3:45:c4:39:5b:d5:bb:3c:f9:93:1e:fc:b1:2d:
9a:04:31:85:66:0d:56:64:9b:40:5f:07:5d:57:c9:13:f9:26:
f4:4b:1f:6a:18:e8:0c:d9:79:0b:ba:fe:c2:66:60:d2:17:a8:
76:41:91:f8:65:9c:20:33:7a:10:b3:db:74:5b:6c:25:87:fd:
79:b6:c1:70:45:08:67:f3:a1:80:07:f3:9b:37:8f:21:fd:67:
38:99:ae:b4:c4:b6:4c:4f:ae:82:66:cd:c0:ce:c3:c0:91:15:
39:3a:45:e3:21:8c:b1:b4:67:40:9f:65:7e:7d:42:65:e4:c7:
76:03:76:61:3f:22:33:14:8f:89:d2:ef:1c:97:ca:c7:18:36:
6f:ea:4f:af:50:3e:de:32:92:8f:b2:3b:a7:be:38:d6:51:94:
30:33:8c:7f:4c:c7:20:05:69:b8:d0:4b:a0:b2:2e:f0:dd:50:
b4:f2:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:05 2025 by rpki-client