Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa
File: d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa (raw, json)
Hash identifier: IO1s6+XvjqR2nRLN0Scvu7QAZdFTyYwwn7G7CNYxETA=
Subject key identifier: 27:C5:3E:A5:35:28:35:0A:CB:48:F8:9C:40:48:CC:01:60:1D:2A:8E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AF75925046B4F7D70AFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.197.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:f7:59:25:04:6b:4f:7d:70:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=1796b99b-2156-46d5-8408-b7da51a6ad09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:56:7c:08:a6:d1:08:d8:ee:4e:ac:d8:2d:
04:ee:b3:3e:85:4a:2d:32:2e:9b:64:74:c0:9b:d2:
0b:be:c4:ad:2e:e7:81:2c:c0:76:8c:40:5c:0a:b8:
63:86:9d:92:f7:43:df:ad:b4:ee:2c:c4:9a:e7:d8:
c4:ec:83:e7:40:fa:ad:44:88:a6:bb:5a:92:d7:5d:
92:fa:99:c0:94:3e:77:5c:e7:f8:eb:cd:b9:e2:d0:
d1:19:08:c2:21:1d:bb:9c:c9:9c:94:72:44:9b:12:
bb:9a:fe:69:ba:5e:ef:47:1d:8f:a3:56:8c:d0:b9:
be:5a:f3:99:42:23:db:47:b1:83:68:11:0e:c7:84:
f8:eb:99:e3:4d:b0:89:b0:35:6a:e2:6c:8f:c3:ba:
c7:a0:67:cb:8a:8e:e8:0c:60:34:ca:59:78:7b:fc:
b2:e4:91:f0:85:ff:13:6f:22:4b:6e:94:dc:8d:37:
8b:cd:0b:62:81:a2:e3:2c:1e:53:f2:cc:16:38:eb:
54:56:d9:d7:56:9b:26:45:0a:9a:8f:5a:2f:9f:63:
fb:91:18:e3:45:f7:71:28:e7:e2:bc:a7:74:8e:26:
d1:eb:98:82:b7:c8:36:3a:64:74:c9:4c:92:97:0d:
ce:5c:83:8a:12:65:09:89:39:e1:b2:53:46:fc:e6:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:3E:A5:35:28:35:0A:CB:48:F8:9C:40:48:CC:01:60:1D:2A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3f2aa8c-63ba-3ee4-b5d1-d7d2c08f145b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:38:27:2e:38:63:63:3e:ff:31:95:dd:5a:f0:f2:3e:89:dc:
79:c5:75:a2:63:9c:7b:42:5d:77:27:2e:0b:85:82:5b:05:e1:
54:56:06:12:4b:36:43:af:4f:28:82:ee:3e:1b:f5:1e:47:ef:
c6:71:7e:e7:26:f2:a1:86:34:a9:97:e7:91:84:a9:c9:5c:9f:
eb:e0:ed:4e:f8:b0:11:3d:55:62:bf:ab:5b:d3:51:de:8c:36:
ff:4a:01:23:6b:35:fe:d6:e8:94:54:21:ae:e3:86:19:44:b8:
6b:f9:19:14:b8:9c:67:e9:77:7e:46:5b:e1:06:4c:fc:1e:82:
80:df:99:e4:fa:59:0a:d2:e6:93:b9:8b:bd:7c:9e:e4:d2:13:
67:00:60:2e:59:46:04:72:a9:e8:31:4c:3b:36:a2:9c:3a:86:
42:0b:db:57:df:5b:c4:9e:20:22:bf:79:30:e8:ee:1e:21:b4:
b7:52:e6:fc:da:d8:85:ff:d5:d4:88:b9:42:ce:c0:df:1e:28:
76:e9:2c:cf:cb:10:e0:72:1d:38:42:32:8c:a8:b7:27:b6:15:
b0:0c:e9:8b:1e:ca:6f:d0:15:0c:cc:28:50:c7:03:7f:9b:bf:
47:80:ba:7d:12:35:5c:14:b8:24:45:7b:68:c4:90:cf:06:ab:
3b:d0:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:32 2025 by rpki-client