Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddd0c28a-4c5f-3822-a14d-17a1253299c0.roa
File: ddd0c28a-4c5f-3822-a14d-17a1253299c0.roa (raw, json)
Hash identifier: TVS+UKKRgqfw7Of9+oWXZthplNqJF8rbEk2z0xmAOo8=
Subject key identifier: 60:A8:90:F4:40:3D:7B:89:AB:6B:E1:EE:44:1D:53:AC:13:7C:D6:BE
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A61385C21AD56F5082D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddd0c28a-4c5f-3822-a14d-17a1253299c0.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.196.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:61:38:5c:21:ad:56:f5:08:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=9dcef519-4d1c-4c8d-b726-ffbd8b2b3548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:d8:fa:34:e6:c0:54:6e:34:9d:8e:5f:d9:
08:3d:94:c2:ed:45:fa:85:66:24:2b:f4:e7:e8:85:
b7:ea:cb:57:02:67:3f:3c:ee:dd:b3:72:4b:78:da:
09:ad:f1:f3:c1:44:47:51:6e:ce:12:6d:b6:12:ba:
f1:22:24:9a:c5:77:1c:71:ae:6c:9d:dc:6d:44:60:
d6:fd:ae:c4:e8:51:43:10:b8:56:1c:fa:88:68:fc:
5a:9f:d7:9f:3b:d9:e2:01:59:bb:c1:41:8c:09:6e:
ba:6d:df:5b:85:3d:89:c9:5f:c2:38:da:dd:b8:20:
b8:c5:94:3f:0f:f1:c2:a9:24:55:8f:53:d6:69:e4:
ac:df:26:68:d5:1a:a0:37:e0:25:6e:29:79:46:c4:
c1:34:81:f8:fc:fe:8d:ee:32:44:7b:1d:35:d8:55:
b8:00:51:c6:9e:f5:e4:5b:25:5a:fc:29:73:21:a2:
7c:77:90:e8:81:40:fa:3d:61:44:03:13:1a:69:b4:
a8:8b:3d:cb:6b:90:fc:bb:39:6e:44:42:99:42:ad:
7f:a8:cb:a9:a5:9e:43:b0:c0:ae:66:db:b4:ff:6c:
88:22:71:d9:6f:63:bd:fd:2d:9e:58:38:e4:e8:ca:
50:b5:94:17:1c:aa:58:5f:b4:47:21:ba:d8:a3:92:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:90:F4:40:3D:7B:89:AB:6B:E1:EE:44:1D:53:AC:13:7C:D6:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddd0c28a-4c5f-3822-a14d-17a1253299c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:bc:35:d6:56:32:21:67:67:7f:c9:cb:8f:4e:c3:84:1d:a8:
02:62:00:a4:b3:e9:62:d3:56:ac:d7:9c:6d:c0:2b:2a:0d:de:
ed:fe:88:a9:32:fc:01:d3:0b:1d:0a:6c:61:48:f7:1c:33:6f:
36:71:f0:ce:80:d8:48:85:7f:9a:af:38:a2:2c:e4:17:30:61:
93:02:85:b3:8e:bd:d5:b8:f1:df:af:26:10:f7:8b:09:64:f8:
08:f0:e6:ba:7e:c4:e4:5c:c9:a8:20:4c:5d:be:e7:51:35:1a:
4f:d2:ac:a7:fd:d7:85:35:86:01:fd:32:49:ef:00:4e:08:8f:
eb:83:10:a2:57:d7:7e:4e:46:91:0b:4f:3d:f0:45:22:c6:50:
c1:7d:56:5e:a5:c4:af:ec:99:ef:0d:e6:c1:68:9b:06:94:91:
e3:13:33:c3:a8:7a:30:76:43:26:b6:84:4e:fe:5a:a1:81:88:
32:e5:c7:9c:31:e8:ff:ba:89:14:6f:fc:81:9d:9e:cc:6f:a3:
c0:b2:82:f9:0d:b6:b2:16:53:2d:1f:8a:7d:4d:f3:75:bb:c5:
99:78:88:1c:b4:66:6a:8a:d0:35:93:9b:f2:3e:21:97:ce:19:
33:60:a9:18:d9:21:84:0f:04:96:7e:47:0d:dd:f6:8d:b2:0e:
b4:4e:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:08 2025 by rpki-client