Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa
File: fa809409-0782-3bc7-912c-a72823c91156.roa (raw, json)
Hash identifier: zFtbwpcgwgfzcOPGKY7cUiC8BGGhGCQ6BynVSIPIKWY=
Subject key identifier: 43:80:41:9D:01:BD:9E:D3:F5:05:39:01:01:50:E3:1C:3E:6A:56:41
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F432858489340B034540758BFD11EA100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 40306
IP address blocks: 99.196.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b0:34:54:07:58:bf:d1:1e:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=d5ce61a8-e573-464a-874f-0c5738ff4e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a6:85:10:03:04:36:79:35:c7:1e:fb:8a:ec:
18:4e:73:94:da:d0:49:b2:6c:22:9a:ed:14:f5:85:
d9:48:72:86:21:c2:42:59:93:fb:b9:a0:e6:9e:d3:
88:c1:85:ec:41:10:5b:1b:57:5c:8a:77:79:6c:65:
5c:e4:34:cb:f3:ad:44:bd:bf:fc:40:e2:ad:f4:c7:
6a:da:43:2d:92:a1:0e:c2:6a:09:ce:a9:ad:25:99:
a7:30:c8:e8:ef:88:9f:20:4f:55:9a:a7:de:cc:76:
1a:3e:c7:b9:f8:93:44:c3:3b:61:a1:67:eb:d1:cc:
84:46:cf:e1:94:16:79:bf:98:40:4b:90:43:76:c5:
20:12:9e:65:be:a4:c5:d1:9a:c4:af:fd:16:ba:83:
a1:e5:34:d1:9c:6c:67:df:b2:f3:20:14:b0:82:56:
1d:77:d7:34:61:18:3b:17:20:89:d1:a7:ce:b4:19:
fc:d0:82:e6:4c:f7:5f:0a:4c:04:83:98:09:74:ff:
d0:e5:61:da:01:3c:c4:79:be:af:70:6b:e4:46:22:
d0:47:87:a4:50:ec:3e:8e:c1:ba:10:7c:ad:12:b8:
ce:3c:23:4b:d8:c2:1b:66:92:be:e3:6b:88:2e:e6:
b4:51:cd:aa:76:23:c5:b3:83:65:f3:e3:15:7c:6c:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:41:9D:01:BD:9E:D3:F5:05:39:01:01:50:E3:1C:3E:6A:56:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa809409-0782-3bc7-912c-a72823c91156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d0:e1:68:95:cf:47:6c:bd:8a:5e:2d:85:44:e7:30:f0:ff:
e6:2e:26:b9:cd:f6:f3:84:e7:de:ed:86:b0:49:c9:1a:9b:f5:
9e:1c:7c:ad:98:99:74:65:70:a5:e0:5c:98:d3:68:a7:6d:57:
67:d7:ca:5a:99:19:19:73:0c:e5:2f:69:55:1f:31:af:4e:b3:
b5:e5:3a:23:02:17:fe:f8:98:44:91:7a:da:2a:f4:a1:d4:e3:
a5:3e:0b:b9:1d:47:9e:94:fb:1d:69:7f:06:4a:ae:65:ff:73:
73:4a:32:86:9a:be:2b:77:25:7b:d2:f8:03:ac:64:00:01:75:
e4:94:c5:67:9d:39:d0:15:b1:f4:2e:41:d4:b0:8f:eb:69:5a:
49:d6:31:d0:33:8a:3c:7c:49:a3:f0:06:ed:ed:d2:b5:07:04:
e6:a2:5a:b8:b3:fa:e0:cc:d7:be:b3:dc:a1:32:00:63:9e:d7:
e1:07:46:87:77:a3:e9:81:f0:da:4f:cf:40:4f:29:41:45:8d:
48:51:80:c5:2a:f1:75:6c:83:93:ab:88:50:fe:21:47:39:a3:
00:85:8a:b5:e6:1d:28:09:5c:ed:6c:ad:1f:25:44:e3:c7:cc:
10:b9:4d:61:81:90:23:d1:29:9e:6c:92:73:6d:67:2d:95:3b:
6a:17:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:43 2025 by rpki-client