Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa
File: cf51676e-908e-3239-8c39-d639532ade54.roa (raw, json)
Hash identifier: N33W08E7y71CgrPpq8LqEH3esFf+LgG5MXocj+jEff0=
Subject key identifier: 86:A6:01:CF:6D:3E:0A:2E:4F:D0:65:0C:E9:A9:F2:DB:FD:75:45:78
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AFD69B698167FDBC27500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.198.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:fd:69:b6:98:16:7f:db:c2:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d4738c3d-7ce2-48e6-85cc-e2d80978faeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:50:ea:2d:cc:d6:f3:86:f6:de:72:08:1e:
81:9a:41:ce:c9:10:a4:cc:46:cc:a4:ae:63:6d:03:
9a:ba:bc:c5:dd:10:51:21:78:59:85:8f:99:7f:0d:
ac:bd:bc:59:bc:3f:6a:f2:f8:be:8d:51:94:df:2d:
ad:9a:0d:8e:7f:c7:8f:4b:4b:bc:25:35:92:e0:cc:
c4:3b:65:79:43:e7:21:04:10:c2:6a:2d:1f:c1:03:
bd:71:2a:72:0b:7d:27:c7:98:fa:2c:c6:7d:c3:c6:
9b:f3:16:b4:8d:e4:01:f0:ba:8f:cd:60:f6:37:41:
18:6a:dd:76:7a:3e:88:34:05:99:1d:d3:a6:85:f8:
1f:4a:c5:28:1b:15:da:78:5b:8c:6c:3c:d7:42:e1:
b9:08:11:b5:01:73:63:c4:ed:db:fd:bd:db:5e:32:
7c:4f:c0:fa:88:21:83:9c:01:81:f5:48:ef:35:72:
1c:94:33:6e:dd:fd:67:eb:61:c7:14:14:b3:79:69:
a9:3d:fd:0e:3c:ff:fc:e4:c2:09:5e:9c:3e:38:63:
cd:fd:18:cf:0d:f8:37:86:1e:74:d0:78:00:d6:f3:
d2:cb:33:53:1e:de:97:c3:e2:ef:2e:fb:db:0b:8d:
a4:fa:2b:9d:bb:1f:12:f1:4b:f8:4e:a4:f6:fa:d0:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:01:CF:6D:3E:0A:2E:4F:D0:65:0C:E9:A9:F2:DB:FD:75:45:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:35:28:00:a9:ec:52:4a:f0:c5:39:ac:d1:e0:41:b6:87:71:
1f:3f:28:a7:64:59:c4:c1:e2:f2:8a:77:3a:34:ce:25:75:be:
6f:9e:3d:43:ae:6c:19:9b:02:b1:6b:b0:90:f4:f7:39:6a:09:
e3:bb:b6:32:fa:81:b5:4f:81:67:94:e1:75:53:92:b5:07:ee:
a9:50:f0:f0:50:f5:28:fb:c7:77:6e:a3:5b:1b:32:91:2f:b2:
3d:83:5c:c0:92:9a:90:6c:8c:ce:c9:55:57:d9:7d:b0:4d:71:
76:da:55:45:f4:3a:e5:35:85:95:a7:fb:9f:37:f9:36:23:cc:
01:7f:fb:8b:1e:27:73:35:21:a0:8e:6d:d4:45:69:7c:56:19:
53:6f:3b:ac:fb:98:9f:3e:79:2e:d7:78:a2:39:84:d3:b0:7f:
a2:6d:0d:ca:9e:48:e4:4a:c2:85:97:bc:d6:5f:16:db:28:b9:
ac:b0:e7:e6:e2:a0:0b:85:8d:de:71:c8:d8:9f:cd:59:96:ce:
a6:9d:98:ed:63:d7:ca:6f:32:e6:52:ab:ab:f4:7e:aa:8b:ec:
1a:57:12:aa:59:f5:1e:5f:48:a1:9a:5e:fd:6f:41:bd:de:22:
a9:39:22:76:89:b6:5f:e4:61:ab:26:68:ee:1f:fb:00:f3:da:
6d:0c:d3:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKv1ptpgWf9vCdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDQ3MzhjM2QtN2NlMi00OGU2LTg1Y2MtZTJkODA5NzhmYWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6dQ6i3M1vOG9t5yCB6BmkHOyRCkzEbMpK5j
bQOaurzF3RBRIXhZhY+Zfw2svbxZvD9q8vi+jVGU3y2tmg2Of8ePS0u8JTWS4MzE
O2V5Q+chBBDCai0fwQO9cSpyC30nx5j6LMZ9w8ab8xa0jeQB8LqPzWD2N0EYat12
ej6INAWZHdOmhfgfSsUoGxXaeFuMbDzXQuG5CBG1AXNjxO3b/b3bXjJ8T8D6iCGD
nAGB9UjvNXIclDNu3f1n62HHFBSzeWmpPf0OPP/85MIJXpw+OGPN/RjPDfg3hh50
0HgA1vPSyzNTHt6Xw+LvLvvbC42k+iudux8S8Uv4TqT2+tDNDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIamAc9tPgouT9BlDOmp8tv9dUV4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Y1MTY3NmUtOTA4ZS0z
MjM5LThjMzktZDYzOTUzMmFkZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo1KACp7FJK8MU5rNHgQbaHcR8/KKdkWcTB4vKKdzo0ziV1vm+ePUOu
bBmbArFrsJD09zlqCeO7tjL6gbVPgWeU4XVTkrUH7qlQ8PBQ9Sj7x3duo1sbMpEv
sj2DXMCSmpBsjM7JVVfZfbBNcXbaVUX0OuU1hZWn+583+TYjzAF/+4seJ3M1IaCO
bdRFaXxWGVNvO6z7mJ8+eS7XeKI5hNOwf6JtDcqeSORKwoWXvNZfFtsouayw5+bi
oAuFjd5xyNifzVmWzqadmO1j18pvMuZSq6v0fqqL7BpXEqpZ9R5fSKGaXv1vQb3e
Iqk5InaJtl/kYasmaO4f+wDz2m0M0wM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:58 2025 by rpki-client