Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa
File: 41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa (raw, json)
Hash identifier: anD16SXGepnet02HwXRGrZTxL6d4WIYGcb0Kp4Fp9yY=
Subject key identifier: 8C:91:DB:5B:7E:95:82:34:7C:4F:35:7B:E7:0D:F0:1B:47:08:8F:1B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AF253CF69E6C4D7A72020
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.196.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:f2:53:cf:69:e6:c4:d7:a7:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=caf1da22-9023-45ff-9757-97a56c67997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:32:7f:96:e8:74:46:64:05:16:71:4e:45:
2e:b8:ed:87:4e:e9:ab:2e:f6:ea:ed:59:13:4c:8f:
1a:96:1f:01:7e:58:02:84:59:e1:f5:75:78:ad:99:
ac:e7:76:2d:77:f4:ee:c8:fa:c7:b5:ff:67:33:63:
d2:af:f9:7e:42:b6:f2:fd:14:9a:06:9e:5e:7e:87:
71:b5:2f:f9:0f:88:12:9c:4e:d2:ec:86:3f:a8:18:
89:2d:54:4d:1e:03:89:88:a6:17:c0:76:b1:70:1e:
41:d5:7d:13:29:2d:5d:a7:73:56:50:a2:3f:8f:77:
5f:8d:33:fb:70:00:07:b2:42:ec:51:c5:5e:ea:89:
93:bc:85:52:1a:5b:3c:08:4b:6e:09:29:ad:ff:54:
ec:df:4f:8b:f9:20:b2:a4:5b:76:5d:e8:f8:35:3c:
7b:d9:49:f5:bd:b2:7a:5c:2b:b2:f6:99:19:8c:9a:
c1:fe:cf:fb:14:5d:de:72:5f:4f:00:d6:0a:90:83:
d9:24:c3:b0:26:b6:9a:aa:8a:51:25:6e:f1:36:c6:
fa:6b:cf:54:38:53:96:7a:b9:1e:90:24:d8:17:24:
f0:1d:eb:bb:ed:28:5d:04:54:06:19:54:51:c2:be:
c8:fc:87:32:ac:76:34:f3:18:bf:39:24:25:7a:a2:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:91:DB:5B:7E:95:82:34:7C:4F:35:7B:E7:0D:F0:1B:47:08:8F:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41d9a0dd-95d2-36cd-b790-3af92f9ef866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:08:6c:d9:14:31:dc:b6:9c:ab:5e:ed:c6:ff:cf:d7:20:71:
88:6d:9b:d6:46:b5:5d:fd:07:19:39:80:40:3d:72:67:ee:19:
31:c3:d3:01:c0:3a:dd:39:64:59:05:a1:c1:ee:2d:84:66:dc:
ba:f4:fd:99:7d:11:b5:20:12:fd:6d:19:88:5e:f1:a5:12:88:
75:85:d6:8c:a4:47:2d:f1:10:1d:97:b8:df:90:d1:1e:60:3b:
4a:3d:56:35:65:57:1b:dd:46:15:5b:a4:ad:2b:34:88:b5:9c:
a0:e2:e8:89:eb:91:6b:88:59:8d:a1:14:76:68:bf:30:77:61:
eb:62:ec:e5:16:ef:91:02:54:0d:79:b6:cf:74:d6:fd:80:d9:
85:16:69:f1:9b:d9:1b:5a:4a:d3:e6:a2:aa:43:0a:10:ef:b0:
6e:81:1c:ac:9a:18:53:33:33:d7:e2:9c:a4:73:b9:ff:90:3e:
e9:4b:c3:09:23:56:26:52:71:80:ed:d2:0f:ca:57:a0:fc:45:
5d:44:17:80:ff:5a:e2:c8:cd:c5:42:3e:60:4a:7d:7f:d7:92:
8a:dd:92:7f:40:fa:fb:77:4a:2e:07:fd:52:19:0a:51:0e:09:
1e:8a:21:12:39:f7:5a:d0:1e:f3:c6:f1:d5:c6:fc:52:67:fe:
91:b9:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:55:08 2025 by rpki-client