Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa
File: da23e1f8-f0dc-391d-b86d-a240967db45e.roa (raw, json)
Hash identifier: CnUQuz5qV7u16TllLpwmAAaLhwWvmDv43NCDDbT6wyw=
Subject key identifier: 0C:B5:C4:04:A5:6E:60:F5:FB:46:85:87:09:5A:20:6D:F2:99:E0:2D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A689CD9C89AF4CDB81A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.197.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:68:9c:d9:c8:9a:f4:cd:b8:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=49309322-379b-4e97-a87a-f5c29c0905b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:99:16:07:57:88:cf:00:26:bb:bb:b8:af:
8c:a2:37:0b:33:1c:df:7c:b3:b9:ea:ae:2a:91:c6:
ad:92:fd:56:53:6f:6b:61:de:3a:02:e4:5d:5a:53:
04:cc:ff:17:23:e5:44:05:4f:ad:01:0e:0e:2a:5d:
d3:f1:6b:ff:89:96:9b:30:99:17:83:54:39:06:20:
19:c4:aa:af:42:a0:0a:03:51:04:78:b7:e1:da:4d:
1d:0e:47:1a:b2:12:0e:a7:ae:d8:c7:b0:e8:b7:ed:
35:c3:70:81:a7:01:9c:2d:56:ea:f4:ee:19:2b:73:
ad:18:9a:e3:e3:2a:1c:77:42:bd:02:89:54:31:db:
f2:06:23:5b:e8:cf:a7:db:03:8a:ac:0f:87:18:5d:
0a:8f:07:8f:7f:13:36:d1:a7:e0:9e:e7:2f:c1:1a:
35:90:4e:ba:5f:fb:52:fc:39:cc:00:df:2d:95:36:
5c:5d:f4:4c:59:12:99:50:9d:61:90:bb:14:b9:ca:
95:09:92:ed:dc:71:8a:20:ff:65:1d:df:11:40:23:
4d:91:22:86:5b:0d:d9:08:9b:28:3d:e0:4a:bd:7e:
de:dd:5b:56:9b:75:bb:fc:d0:c7:3f:71:d6:55:0c:
40:ff:c9:b3:fb:49:bb:a8:e4:b9:99:11:fe:45:7d:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:C4:04:A5:6E:60:F5:FB:46:85:87:09:5A:20:6D:F2:99:E0:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da23e1f8-f0dc-391d-b86d-a240967db45e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:9e:60:5a:0c:d5:28:96:98:87:ed:88:52:a6:fe:75:5f:3f:
bd:8f:4f:8a:f7:e8:29:b1:d6:da:0c:b0:61:c4:a2:f0:96:3a:
97:9d:5c:81:8a:9c:d3:25:d3:67:41:21:c2:14:fc:9a:8c:88:
08:87:d2:8f:24:8a:2e:33:1c:5d:d8:64:f5:f0:c7:3f:3b:1a:
e7:98:a7:7e:a7:e1:a7:47:fc:a1:dc:8d:42:f6:96:a3:21:5c:
ba:d8:86:ba:98:a2:01:ef:3c:58:1c:d8:1c:eb:e8:2d:8d:4d:
18:62:d6:8c:0d:61:24:f4:d3:ca:98:5c:fb:25:da:a2:9c:e9:
21:8e:2e:77:eb:c9:a3:f6:af:8c:74:e5:04:ef:9f:2f:d2:a0:
56:ee:0d:a6:9a:cb:33:a5:03:72:02:6f:ae:51:d4:04:aa:7b:
db:e8:46:ab:d6:f5:4b:44:66:19:6e:ab:16:a2:8b:d4:b2:0b:
4f:0c:af:6b:7e:3e:f6:cc:0c:e4:60:08:8e:54:20:aa:5f:47:
8a:31:47:3e:7f:b5:0f:ae:4d:00:5e:d5:c0:61:93:27:53:40:
d3:25:18:c3:56:33:ad:f4:5a:b5:27:4f:1e:af:cb:1c:6d:c2:
33:3d:c9:3d:e4:23:22:58:19:21:69:2a:b1:6d:b0:4a:a5:f3:
35:ce:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:52:17 2025 by rpki-client