Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f088a2b0-03fa-342c-ae55-7e41d526fdd7.roa
File: f088a2b0-03fa-342c-ae55-7e41d526fdd7.roa (raw, json)
Hash identifier: rKjD5uYgaYUPJjeKqkAvXUARIEuzR1Jh0HBJQvk7PeI=
Subject key identifier: B8:7C:83:C6:A3:9C:33:1F:44:16:C5:F9:49:B2:0C:F9:AB:07:96:A2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581C9771290BF8EE4440AE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f088a2b0-03fa-342c-ae55-7e41d526fdd7.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:c9:77:12:90:bf:8e:e4:44:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=13afe4a4-3983-47b3-9c3e-fc69ec627b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:13:b4:d0:6f:83:95:37:13:c7:6f:0a:6b:
dc:8f:fa:f0:6e:db:35:74:bd:6d:61:73:4e:ad:65:
d5:6f:86:b9:a7:a4:b4:7a:90:f7:32:41:49:3e:fc:
18:db:f7:6b:f6:03:49:6d:8e:aa:c9:64:35:27:81:
16:47:3a:e8:97:28:14:fe:88:32:01:2b:6e:89:97:
5e:f4:58:10:5f:5a:66:b0:5d:0c:66:c1:71:23:d1:
16:92:a5:94:70:d9:24:45:20:9a:c9:20:dd:4e:c5:
e6:82:d1:87:a3:9b:16:d3:83:8e:71:5f:28:85:f3:
26:72:d9:9d:a1:b9:49:cc:c0:68:c2:b5:bf:0f:d7:
68:f9:af:28:19:ca:df:c7:93:2c:08:ed:f7:31:6b:
d6:28:06:a9:59:c6:ab:3e:35:b2:dc:01:f6:cf:28:
66:07:38:81:f4:83:6b:eb:5a:50:43:c6:92:cb:98:
ff:cc:a4:2a:09:bd:dd:f4:22:e1:0f:81:49:25:4b:
d3:fc:c5:7d:f5:b8:6d:60:2e:36:96:1a:00:13:3f:
f3:e8:41:34:a7:ad:8b:a0:67:2b:c7:26:dc:46:e9:
b6:18:e0:fb:f9:25:2b:f0:fb:cd:a8:ff:65:ab:e2:
44:1e:3d:33:de:6c:c6:35:1c:82:e0:88:42:e9:a7:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7C:83:C6:A3:9C:33:1F:44:16:C5:F9:49:B2:0C:F9:AB:07:96:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f088a2b0-03fa-342c-ae55-7e41d526fdd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:96:16:45:c0:e0:24:8b:4f:38:0e:de:94:d9:b8:2a:27:58:
64:ea:fe:2e:cd:d9:27:06:59:31:fd:e6:49:af:04:89:2e:ba:
35:e9:60:a0:f1:ee:b5:6f:d0:d7:8d:95:57:f0:4c:76:bd:e0:
f2:f1:b1:fb:8b:47:79:d2:ce:6c:b6:82:cd:3f:13:32:f8:0a:
e3:09:3c:9b:95:7d:83:80:26:31:3d:25:52:a4:00:da:f6:2a:
13:63:c0:39:92:b7:c3:d8:c6:4f:d0:6e:fc:ff:78:c3:3f:92:
35:ce:fb:d5:17:90:d8:ad:fe:3f:d4:01:d5:0d:d8:33:6b:c8:
f5:bb:41:b9:3a:47:44:c1:c3:5d:a7:41:20:0a:87:f5:07:5c:
af:8d:62:e2:60:11:2a:13:19:60:24:83:a0:ce:d7:0e:0e:94:
f1:e6:2c:64:15:b1:d6:48:55:83:7d:3f:9a:d0:e2:e8:ba:d2:
d2:84:16:a3:9c:71:4d:30:d5:40:00:0b:d6:49:25:e5:de:ad:
0f:97:00:93:03:a1:1a:6c:6e:8c:f1:e6:42:34:bf:c4:d7:4a:
5f:a6:a4:7d:7f:08:57:ea:9b:a4:e2:a9:42:fa:d6:32:f8:a9:
70:6e:52:17:cf:ea:c6:b5:f3:1c:eb:38:ae:fe:30:e0:af:3d:
5c:70:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:12 2025 by rpki-client