Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa
File: d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa (raw, json)
Hash identifier: qGeqxL/zQXg7w4r7juXcZ+xU8sMvL8hdYMSOvoWynIc=
Subject key identifier: 8D:F7:E9:01:0A:38:4C:A1:71:58:A9:29:9E:9B:6C:6E:AC:1A:44:0C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A669D1641816414C9FF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.197.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:66:9d:16:41:81:64:14:c9:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3dd1ae22-24e7-413c-bc95-f001b56d9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:08:ec:82:b6:6c:0f:01:ad:02:d8:a2:42:
6d:8c:6a:28:d5:98:26:c2:fa:ef:e6:1e:d5:dd:49:
b7:40:9b:8c:f8:bf:f8:ac:e4:21:ce:47:5a:41:24:
ad:22:8f:ee:bc:fa:26:82:c4:49:6a:bf:a8:30:5f:
42:72:9f:f8:06:ed:ce:c6:37:02:f4:8a:ab:ff:57:
0f:83:5a:de:47:a4:6e:aa:17:fc:c4:00:ee:65:c2:
bb:cd:80:92:ae:71:7a:a1:ef:48:f7:83:b2:5c:51:
2a:6a:ad:f0:2a:48:bf:b2:97:c9:17:a3:cb:fd:a5:
57:db:43:03:3c:2a:e4:e0:0f:99:c7:9c:b2:f7:63:
53:db:bd:5e:26:72:a3:bf:68:fc:6d:9c:eb:3d:39:
20:e4:25:90:2f:6f:17:e6:2b:fd:78:13:f3:9d:7d:
37:73:a3:5b:c0:ba:a0:f1:07:c8:c2:36:17:16:1d:
4f:54:4b:00:5b:85:3b:2c:01:97:bc:c0:a6:25:17:
48:25:c8:5e:21:fa:0b:8e:1f:72:8a:f1:db:91:a5:
20:0a:af:39:69:06:f9:73:19:cf:a9:de:00:ff:72:
be:fc:9b:59:1b:51:0a:50:a9:b4:30:ac:21:de:6b:
f4:19:e8:c0:15:5e:52:0d:a0:36:1b:79:84:2f:a9:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:E9:01:0A:38:4C:A1:71:58:A9:29:9E:9B:6C:6E:AC:1A:44:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:98:11:cb:f3:a4:cb:14:6c:d7:8c:f8:0f:c6:19:35:3b:c7:
8f:be:16:69:a6:20:c5:c5:7b:bc:45:7f:4f:63:73:bf:da:10:
5b:a9:7e:1e:c7:67:a1:11:df:59:06:f5:e2:5e:2a:82:f9:a7:
3e:ab:e7:3a:e4:e8:83:f4:93:9c:69:b8:59:1c:c3:ec:ac:7a:
76:5a:ed:bf:60:ed:77:81:6c:b9:c0:01:6f:52:94:5f:74:a0:
98:47:da:8d:e5:79:0d:a6:7c:47:a8:a3:50:93:0b:93:d6:d5:
d8:6f:4c:f5:35:64:27:52:23:f4:84:6c:6d:05:8b:cc:c8:5a:
4d:61:cc:a5:3f:c6:50:30:03:aa:03:ef:67:3d:a5:d2:72:20:
a3:57:eb:5f:29:55:2c:96:eb:53:55:7c:6d:1c:ca:ec:3c:88:
94:4f:ed:60:b5:26:e7:aa:09:80:14:a3:73:b9:20:b6:0a:46:
6f:27:bb:1f:e9:5b:25:64:df:0f:28:24:5f:44:17:85:d1:e8:
3a:f0:4d:ec:2f:0f:6e:41:5b:83:64:08:da:1c:01:4f:18:fd:
85:fe:3a:61:1e:b8:9e:5b:f8:f0:44:0c:73:87:68:4b:bd:49:
27:e1:fc:47:0c:25:9d:59:d3:4f:7e:a5:02:73:86:88:86:92:
46:05:33:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKmadFkGBZBTJ/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
M2RkMWFlMjItMjRlNy00MTNjLWJjOTUtZjAwMWI1NmQ5ZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX8I7IK2bA8BrQLYokJtjGoo1Zgmwvrv5h7V
3Um3QJuM+L/4rOQhzkdaQSStIo/uvPomgsRJar+oMF9Ccp/4Bu3OxjcC9Iqr/1cP
g1reR6Ruqhf8xADuZcK7zYCSrnF6oe9I94OyXFEqaq3wKki/spfJF6PL/aVX20MD
PCrk4A+Zx5yy92NT271eJnKjv2j8bZzrPTkg5CWQL28X5iv9eBPznX03c6NbwLqg
8QfIwjYXFh1PVEsAW4U7LAGXvMCmJRdIJcheIfoLjh9yivHbkaUgCq85aQb5cxnP
qd4A/3K+/JtZG1EKUKm0MKwh3mv0GejAFV5SDaA2G3mEL6m4wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI336QEKOEyhcVipKZ6bbG6sGkQMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY0Y2U0YTktYzVmMi0z
OTIyLWE4M2YtY2VhYTk2ZmQ0Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeYEcvzpMsUbNeM+A/GGTU7x4++FmmmIMXFe7xFf09jc7/aEFupfh7H
Z6ER31kG9eJeKoL5pz6r5zrk6IP0k5xpuFkcw+ysenZa7b9g7XeBbLnAAW9SlF90
oJhH2o3leQ2mfEeoo1CTC5PW1dhvTPU1ZCdSI/SEbG0Fi8zIWk1hzKU/xlAwA6oD
72c9pdJyIKNX618pVSyW61NVfG0cyuw8iJRP7WC1JueqCYAUo3O5ILYKRm8nux/p
WyVk3w8oJF9EF4XR6DrwTewvD25BW4NkCNocAU8Y/YX+OmEeuJ5b+PBEDHOHaEu9
SSfh/EcMJZ1Z009+pQJzhoiGkkYFM9w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:21 2025 by rpki-client