Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352abffc-a834-3df2-8005-48dd2f5b7be4.roa
File: 352abffc-a834-3df2-8005-48dd2f5b7be4.roa (raw, json)
Hash identifier: qu0e3oI9tiwBDf7Cmays8u3uqupZ7qUDxGhek78mjNk=
Subject key identifier: 24:BD:4C:53:FE:BB:A9:26:24:14:77:BC:6E:B1:72:7F:9D:D1:87:84
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AF7BC570DF61A11AB5DC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352abffc-a834-3df2-8005-48dd2f5b7be4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.197.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:f7:bc:57:0d:f6:1a:11:ab:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d8fb3985-ec99-4ec3-a6d7-fd296cc3251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:15:04:b4:e1:c5:dd:25:ca:13:de:b5:28:
9a:d0:40:87:5c:72:c5:dd:fb:7f:be:58:42:58:8b:
bf:0d:0f:82:c5:9c:a8:34:17:b1:28:9f:92:cb:fa:
c7:a1:34:16:59:b2:2c:a8:c5:e0:d9:0e:15:21:19:
fa:25:4f:b3:0e:fb:f5:25:31:92:ae:d7:05:a4:de:
7e:73:8e:3a:34:79:99:7a:46:05:06:21:9e:f6:c6:
33:86:fe:ba:12:98:6b:e5:64:8d:7f:55:7f:b9:fe:
ca:1e:cc:dc:69:a8:3c:d2:5c:f0:e0:e1:84:c6:93:
23:52:da:9c:16:74:9a:1c:da:3b:c2:4a:46:99:a3:
48:99:9d:b5:0d:17:54:18:df:45:81:ed:91:ce:66:
40:02:25:4d:77:c1:9e:24:2e:ee:f5:72:d6:bc:54:
d9:9f:48:30:8b:76:5e:fa:bd:1a:2c:b7:75:cd:09:
f8:ef:f0:46:13:46:0a:f6:f7:95:f2:2c:ca:e7:c8:
d8:5a:c6:45:45:73:09:fb:36:f0:44:b5:40:24:ec:
94:48:d4:bd:79:0b:85:f9:07:2a:c5:8d:63:26:7f:
db:02:ae:af:0e:83:88:cc:92:8a:33:08:6d:e3:f4:
fb:17:89:ac:29:96:35:47:b7:c7:38:05:53:bc:19:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:4C:53:FE:BB:A9:26:24:14:77:BC:6E:B1:72:7F:9D:D1:87:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352abffc-a834-3df2-8005-48dd2f5b7be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c2:8c:65:8c:21:a8:2f:f7:f6:d2:ff:22:53:04:a4:57:ce:
93:db:8c:e0:ae:60:cd:e8:d6:2d:ca:7b:13:7a:d0:5d:69:b7:
8d:12:b3:bf:14:3c:ba:d8:86:2a:19:17:45:0f:c7:ea:1f:e4:
50:80:d4:c5:06:22:02:3c:45:79:35:18:dd:75:c2:8a:a0:75:
0e:16:46:3b:0d:c5:17:07:94:5e:de:ed:de:db:ad:f7:a8:93:
f3:52:03:8b:5f:2e:96:d2:26:ba:a4:f6:db:f0:fa:c9:ec:5d:
1b:bf:80:c2:42:68:04:e9:f6:b7:46:28:4f:9f:d4:d9:1f:f6:
cd:e2:06:69:fc:f9:41:c7:eb:45:9b:af:3a:fc:13:96:6a:21:
31:ec:b9:ea:e8:0b:e7:61:cb:1b:4b:10:76:89:86:0f:75:84:
3f:df:8a:34:4e:7e:d7:14:8f:b0:7a:08:f7:b5:f6:f0:f4:65:
ed:93:20:26:ee:08:f6:66:17:33:d2:c3:3d:03:4e:8b:29:28:
d5:2b:78:f1:09:58:de:26:86:47:a1:4c:ca:52:00:e3:ef:f5:
04:2b:3f:84:3d:e1:55:ad:3e:71:a0:62:7e:5b:fe:4c:14:6b:
c7:ce:5d:5f:5d:bd:cc:11:51:92:d8:13:c7:35:81:8e:bc:5e:
55:b6:d0:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKve8Vw32GhGrXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDhmYjM5ODUtZWM5OS00ZWMzLWE2ZDctZmQyOTZjYzMyNTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWYVBLThxd0lyhPetSia0ECHXHLF3ft/vlhC
WIu/DQ+CxZyoNBexKJ+Sy/rHoTQWWbIsqMXg2Q4VIRn6JU+zDvv1JTGSrtcFpN5+
c446NHmZekYFBiGe9sYzhv66Ephr5WSNf1V/uf7KHszcaag80lzw4OGExpMjUtqc
FnSaHNo7wkpGmaNImZ21DRdUGN9Fge2RzmZAAiVNd8GeJC7u9XLWvFTZn0gwi3Ze
+r0aLLd1zQn47/BGE0YK9veV8izK58jYWsZFRXMJ+zbwRLVAJOyUSNS9eQuF+Qcq
xY1jJn/bAq6vDoOIzJKKMwht4/T7F4msKZY1R7fHOAVTvBkRJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCS9TFP+u6kmJBR3vG6xcn+d0YeEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUyYWJmZmMtYTgzNC0z
ZGYyLTgwMDUtNDhkZDJmNWI3YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/CjGWMIagv9/bS/yJTBKRXzpPbjOCuYM3o1i3KexN60F1pt40Ss78U
PLrYhioZF0UPx+of5FCA1MUGIgI8RXk1GN11woqgdQ4WRjsNxRcHlF7e7d7brfeo
k/NSA4tfLpbSJrqk9tvw+snsXRu/gMJCaATp9rdGKE+f1Nkf9s3iBmn8+UHH60Wb
rzr8E5ZqITHsueroC+dhyxtLEHaJhg91hD/fijROftcUj7B6CPe19vD0Ze2TICbu
CPZmFzPSwz0DTospKNUrePEJWN4mhkehTMpSAOPv9QQrP4Q94VWtPnGgYn5b/kwU
a8fOXV9dvcwRUZLYE8c1gY68XlW20K0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:11 2025 by rpki-client