Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef237d5d-9079-3fcc-a67a-f5fdb26cf55c.roa
File: ef237d5d-9079-3fcc-a67a-f5fdb26cf55c.roa (raw, json)
Hash identifier: q+v0IdQcIdjbh0qIRTMK9UaYY5+MDTVQamhada9v3w0=
Subject key identifier: FA:B1:89:93:DD:7E:D3:64:83:B8:6C:1E:C2:30:36:81:19:4D:03:AE
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58138B2E1B2FBD1A2D2EE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef237d5d-9079-3fcc-a67a-f5fdb26cf55c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:38:b2:e1:b2:fb:d1:a2:d2:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ce509aa2-7d4a-490a-8cff-ee9d8c9848c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:d3:ef:d9:c3:32:66:b8:c3:46:c2:b7:4b:
14:90:8b:24:e0:c3:12:89:50:b5:9e:3b:13:3d:78:
3e:8b:3c:19:bd:ba:48:5a:bf:44:68:1b:97:ab:74:
3b:17:e1:8e:75:f3:57:fe:a1:61:0e:1b:36:19:a9:
3a:44:2e:f3:26:b0:ce:fa:3c:cc:5c:97:97:32:05:
5d:88:d5:8d:fa:4b:a9:22:2f:08:0a:bc:62:9b:e1:
19:3d:d8:7c:4d:77:b3:e2:33:9b:97:28:4d:b5:37:
dd:2b:1b:bd:f4:45:0a:62:c1:7e:ce:04:72:01:7b:
37:7a:7f:44:37:5a:5a:48:3f:ee:c8:d7:8e:46:82:
02:c1:55:4c:8f:71:fc:76:14:a3:cb:e1:29:37:3a:
14:2f:64:76:6a:ee:a1:f0:bb:e0:11:11:0e:a2:d6:
c5:1a:cb:d6:01:bf:75:a1:e3:1c:06:5b:d4:d7:41:
da:9f:b5:1c:bf:93:b4:fe:48:b3:9d:da:7a:b2:f5:
62:c7:a6:00:0c:bf:ba:8d:f2:8d:0f:1b:13:0c:c4:
8a:f5:b1:29:a2:98:34:86:cc:f9:97:26:b5:28:d0:
f1:73:8d:b8:19:c2:74:f8:29:b0:50:01:44:42:21:
08:43:aa:ad:6a:7f:fa:9a:f3:fe:7c:56:af:1a:b2:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:89:93:DD:7E:D3:64:83:B8:6C:1E:C2:30:36:81:19:4D:03:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef237d5d-9079-3fcc-a67a-f5fdb26cf55c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:24:fa:02:f0:d0:38:ac:53:d9:5c:f9:d2:7b:d2:b5:56:33:
ce:6e:e1:5a:0b:b7:3e:2f:04:a5:ed:ad:b0:bf:d6:99:91:bf:
e9:29:aa:63:94:e6:7c:10:81:e3:50:ed:f3:00:74:ef:57:8a:
7d:4f:48:01:c7:94:93:d9:3a:8d:bc:49:75:64:d8:e3:30:2b:
6d:6e:c3:df:cc:c9:0d:7e:a7:7f:12:11:a4:d4:7a:c6:89:d2:
41:71:af:b4:da:01:8d:d4:7f:6d:25:a3:8f:f1:18:58:4c:31:
16:8e:44:cc:23:bc:9e:58:75:6b:b9:c7:43:bd:1d:bb:41:75:
5a:27:b9:8f:58:26:8b:d4:03:64:91:63:0b:03:61:3f:78:9e:
6a:e7:7a:a3:7c:75:aa:db:bb:fe:0d:4e:3f:03:5c:1d:58:79:
fd:31:42:fe:87:aa:4a:d1:36:d0:c8:45:39:d5:fe:eb:6e:e8:
8d:a0:cb:a0:b5:3c:ab:0c:e1:49:13:8c:df:fe:88:5e:b4:0e:
fb:2c:b1:ca:c4:b4:e5:3b:4d:3a:d7:ca:8c:28:21:92:1b:c7:
5a:c9:31:42:82:ce:fd:67:6b:ff:fc:9c:40:0d:c4:c9:9d:da:
91:af:c5:68:36:21:69:6f:59:5e:37:bd:a1:b6:b5:d4:bc:6f:
5c:41:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:19 2025 by rpki-client