Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a301146-1563-36f0-ba63-b348772d28ee.roa
File: 7a301146-1563-36f0-ba63-b348772d28ee.roa (raw, json)
Hash identifier: +EgRxMKe8x7NZ1vxfmiCmQ2bT29nWjvMM1sobf82nOI=
Subject key identifier: FA:0F:DF:45:70:6D:8C:42:90:48:0E:B5:CD:53:E2:86:43:B9:3A:A5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A62B8B99FBA6AD9350900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a301146-1563-36f0-ba63-b348772d28ee.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.196.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:62:b8:b9:9f:ba:6a:d9:35:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=6e21c429-2466-417f-90bb-95cf9dd91b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:7e:a8:3f:7f:83:a6:e4:d9:64:05:c1:7d:
59:39:b8:e6:c4:70:6b:36:c3:23:6a:9b:06:89:41:
95:b2:61:43:d8:e2:99:9c:2b:27:fc:94:df:5c:b9:
5e:3a:8a:17:d2:bd:ae:0e:96:a8:32:e4:aa:13:b0:
3e:ce:07:34:0d:22:a6:52:ca:c3:85:3a:d6:a5:f1:
6b:c4:7f:52:c4:36:d6:37:8d:3f:01:3f:da:89:29:
ad:32:63:5b:06:f4:24:e7:87:b5:18:5f:5d:6b:be:
81:1b:a9:4f:40:42:30:9d:4c:a8:e7:aa:b2:59:a2:
d6:42:01:5a:57:d1:12:83:95:f1:9f:8c:33:a6:b4:
63:8a:79:36:24:eb:f3:bd:ec:25:aa:9d:04:bb:a0:
b9:f1:a1:73:09:2a:92:79:b1:4d:8a:fc:21:1f:46:
d1:57:f4:32:11:96:2e:ea:de:53:9d:ad:ef:1d:fb:
36:7f:45:51:10:22:95:30:8c:57:f9:11:24:cb:c3:
f2:df:ad:3f:45:0f:46:87:10:4e:77:f3:34:08:91:
72:c6:aa:33:a4:8e:b3:fe:c1:99:c2:3a:94:c3:32:
2a:54:27:e6:2c:af:b5:6a:69:fa:cf:5f:97:21:af:
fb:bb:71:50:29:35:bc:80:4c:eb:8d:8e:fb:56:cf:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:DF:45:70:6D:8C:42:90:48:0E:B5:CD:53:E2:86:43:B9:3A:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a301146-1563-36f0-ba63-b348772d28ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:0c:1b:bf:a5:6e:1c:9d:86:bb:f3:f7:e0:87:5c:5b:be:d3:
77:22:3b:b5:2e:14:b7:d5:c4:34:5a:df:a0:88:6b:5f:9e:9b:
0d:8e:9a:11:d5:79:d7:d5:10:0a:cc:8f:dc:2c:ee:51:24:c1:
78:92:59:81:11:f9:98:95:bf:d3:08:67:66:3b:dd:62:0f:9a:
30:af:72:59:b0:37:8e:73:8c:82:3c:02:61:c5:f8:7f:92:15:
ee:78:4e:e2:1e:96:51:88:cd:ef:c5:f6:76:05:63:63:7d:c5:
2c:a9:b0:2d:4b:3c:ab:b3:58:27:f8:d6:86:56:2a:d6:fb:8e:
24:2e:3d:17:59:8a:ec:82:28:b5:4d:01:96:8a:d5:da:b2:68:
12:e1:32:3e:c1:22:c4:86:8b:06:17:d6:08:00:2e:f6:39:41:
bb:7c:a6:b5:24:a9:d1:90:44:69:bf:c1:8a:6a:68:52:5b:37:
3b:dc:33:8c:c0:4f:1d:71:5c:ec:ac:84:00:ff:f9:da:f5:18:
15:d2:d2:79:d1:eb:9e:44:da:e4:c9:0d:24:23:4e:dd:5f:16:
bf:96:1b:d6:88:5e:64:a3:f1:4a:7c:6f:ad:de:80:11:db:ee:
70:34:95:3d:f2:01:01:07:63:c0:94:6e:0f:69:0d:ba:02:9d:
91:e6:62:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKmK4uZ+6atk1CQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NmUyMWM0MjktMjQ2Ni00MTdmLTkwYmItOTVjZjlkZDkxYjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS1+qD9/g6bk2WQFwX1ZObjmxHBrNsMjapsG
iUGVsmFD2OKZnCsn/JTfXLleOooX0r2uDpaoMuSqE7A+zgc0DSKmUsrDhTrWpfFr
xH9SxDbWN40/AT/aiSmtMmNbBvQk54e1GF9da76BG6lPQEIwnUyo56qyWaLWQgFa
V9ESg5Xxn4wzprRjink2JOvzvewlqp0Eu6C58aFzCSqSebFNivwhH0bRV/QyEZYu
6t5Tna3vHfs2f0VRECKVMIxX+REky8Py360/RQ9GhxBOd/M0CJFyxqozpI6z/sGZ
wjqUwzIqVCfmLK+1amn6z1+XIa/7u3FQKTW8gEzrjY77Vs/ctwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPoP30VwbYxCkEgOtc1T4oZDuTqlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2EzMDExNDYtMTU2My0z
NmYwLWJhNjMtYjM0ODc3MmQyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAMG7+lbhydhrvz9+CHXFu+03ciO7UuFLfVxDRa36CIa1+emw2OmhHV
edfVEArMj9ws7lEkwXiSWYER+ZiVv9MIZ2Y73WIPmjCvclmwN45zjII8AmHF+H+S
Fe54TuIellGIze/F9nYFY2N9xSypsC1LPKuzWCf41oZWKtb7jiQuPRdZiuyCKLVN
AZaK1dqyaBLhMj7BIsSGiwYX1ggALvY5Qbt8prUkqdGQRGm/wYpqaFJbNzvcM4zA
Tx1xXOyshAD/+dr1GBXS0nnR655E2uTJDSQjTt1fFr+WG9aIXmSj8Up8b63egBHb
7nA0lT3yAQEHY8CUbg9pDboCnZHmYkc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:01 2025 by rpki-client