Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa
File: 9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa (raw, json)
Hash identifier: ByMoii/8ylz5Xg2cz67dtgnblgpnVPYdC0Whz1bgVd8=
Subject key identifier: 27:8B:5F:76:DE:75:5B:EE:CB:CE:C3:22:0A:3C:B5:5C:32:0A:D4:1B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AF2298DD705523A15C980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.196.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:f2:29:8d:d7:05:52:3a:15:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=35a6fb07-92ec-42ef-98e5-1af130babb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:8a:a2:f7:b9:e3:52:28:a8:47:94:eb:c5:
df:a9:39:6c:bf:25:94:19:a2:02:ee:38:f1:04:91:
e3:c6:05:41:bf:62:18:05:e6:3e:d9:1b:3b:21:2d:
f1:27:72:5a:12:84:fc:bb:9f:d0:21:3e:1d:53:85:
a0:4a:83:ec:88:42:87:db:33:06:0b:b6:85:e9:08:
1c:21:e6:05:eb:c5:77:b5:03:59:cb:3f:f3:38:2d:
e2:f9:f9:aa:61:c7:0e:e7:d6:6a:9c:a1:20:ea:da:
eb:64:4d:65:83:3c:9c:84:e0:f6:64:c9:cd:ef:1f:
77:b0:6c:57:c3:90:ac:26:d7:a7:50:7c:57:e8:d4:
b1:36:b0:3e:98:7f:54:23:1e:48:9b:ca:62:81:70:
22:55:2d:71:68:8e:11:0a:77:de:0f:f6:0f:62:cb:
44:a7:47:10:15:8e:93:f9:c4:ff:d2:5e:8e:cc:ba:
7d:21:e8:88:5e:53:af:ce:75:8a:d4:57:ea:fb:f7:
52:56:63:8f:f2:e6:e6:c4:d5:0c:db:64:18:41:e3:
a4:c3:72:f9:1b:45:be:73:14:61:f3:05:13:59:3d:
ce:e7:0f:4e:c5:bf:aa:f7:f3:8d:a2:0d:f0:1f:ec:
4e:b4:15:ad:55:23:72:17:aa:b3:3d:b4:d4:ae:79:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:5F:76:DE:75:5B:EE:CB:CE:C3:22:0A:3C:B5:5C:32:0A:D4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ba37a69-ada5-3be2-80b5-9397e59f03e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:7e:90:95:d4:9a:35:8f:a4:5c:b7:da:dd:c5:3f:6b:02:b6:
ac:b7:74:f6:a5:8f:e6:a9:4f:91:a4:48:d4:11:d2:43:0b:9c:
30:71:b1:af:2a:61:15:de:e8:85:6d:f9:cd:9f:b3:58:7d:99:
7b:87:77:bb:02:4f:d3:9d:e2:f0:fd:82:08:d1:69:16:c6:9a:
05:4d:83:85:1a:01:67:e8:db:8d:4b:23:ee:09:6b:66:51:5b:
68:d1:5e:ac:cf:51:17:8f:c1:ac:0a:2f:e5:95:17:c4:50:22:
57:89:37:14:ec:13:f7:73:2a:d6:cb:92:88:12:c2:85:e5:2b:
28:c2:5a:f5:19:ff:da:45:56:70:af:d2:50:82:13:0d:8a:f6:
e3:66:5d:c9:d8:72:e0:9a:f6:12:db:c6:20:f7:bf:10:41:a9:
8f:f6:d3:2e:b1:00:d0:c9:b6:78:11:bf:7f:ee:0d:d4:fb:13:
c2:29:3b:fc:c4:47:e3:f7:08:ba:ff:ac:57:67:8d:8f:29:a9:
d3:2e:23:1b:bc:2e:79:aa:e7:8c:d0:3a:60:cd:7e:d9:44:9b:
51:88:b0:cd:90:95:2b:9e:27:e5:f0:34:46:de:a0:0a:96:bb:
40:0b:af:19:10:47:21:26:85:96:be:66:64:8a:85:e8:d0:c9:
d5:3e:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:20 2025 by rpki-client