Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e947b11d-1acd-35d5-9bd3-4c4dca436c02.roa
File: e947b11d-1acd-35d5-9bd3-4c4dca436c02.roa (raw, json)
Hash identifier: ArfKs6tpnqByvx5c3HqWpxWXQymoETMuyJuglpAlULI=
Subject key identifier: 10:D1:BA:76:F0:08:E2:28:B8:F6:60:FC:25:FD:E6:78:FC:95:39:B7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A5D4216A2A28E5FD15180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e947b11d-1acd-35d5-9bd3-4c4dca436c02.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.196.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:5d:42:16:a2:a2:8e:5f:d1:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=917c8e97-2c14-465b-9e6c-e82eeea96dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:6e:2f:2c:df:f8:b6:e1:ce:f5:62:f3:79:
3e:c8:7f:4d:b4:7d:9b:4c:b1:4c:b8:2b:31:93:fd:
b7:ae:bb:56:8b:91:17:35:d8:4e:0e:a1:64:dc:3b:
39:6d:f6:24:e9:cd:e9:3e:44:da:40:d5:4b:e6:1f:
3a:74:b9:95:b8:ba:91:66:bc:8a:2e:85:5b:be:32:
c1:e9:19:2f:79:85:36:72:80:37:6c:ee:b0:fa:ff:
3f:cc:19:76:a6:61:3d:18:1d:24:c4:76:7d:b2:5c:
35:7a:5a:3e:06:1b:50:45:91:d7:be:c8:53:eb:97:
ec:74:7a:14:cb:a7:8d:a2:6f:56:13:4c:4a:6a:7a:
8c:6d:77:e8:7c:29:37:a7:ba:a5:a2:62:53:fe:bc:
62:fc:2b:91:d9:ac:93:53:5f:05:c5:23:2f:fd:52:
a3:e3:41:7f:48:4f:15:be:f1:12:51:ed:1e:3f:71:
2c:bd:40:bc:35:74:dc:ae:19:b3:bc:87:20:30:e5:
e4:5c:49:ed:06:75:6b:8c:4a:ab:1b:e4:fa:50:5c:
06:22:36:7e:b8:13:12:1c:db:d3:23:88:ed:02:e7:
e4:3e:c0:76:21:fb:96:ff:7a:f1:e3:39:9a:61:96:
87:14:e4:6e:fb:31:34:e7:8b:74:ce:3f:b3:46:fc:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:BA:76:F0:08:E2:28:B8:F6:60:FC:25:FD:E6:78:FC:95:39:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e947b11d-1acd-35d5-9bd3-4c4dca436c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:6a:8a:27:73:77:f4:a6:3e:21:d9:59:e2:24:ee:9c:8f:f3:
a2:93:92:d6:0d:db:9d:34:f4:a6:fd:0d:0b:dd:46:5d:ae:2c:
e7:dc:9f:fc:2f:25:a4:8c:c6:e4:3c:24:ad:42:cd:e2:de:d0:
39:dd:66:0c:eb:ab:47:c8:a5:f6:f8:ad:d5:c5:ab:17:3a:93:
a5:0f:0e:77:ce:14:ad:f1:36:fa:f0:9f:c6:95:40:da:60:89:
e3:79:32:23:fd:d6:1c:70:51:a5:5c:a0:81:c5:f0:44:e4:28:
db:54:2d:2b:af:95:27:cd:80:8d:9f:02:c8:a9:1f:78:06:b8:
a5:1b:c4:9f:71:f3:91:cf:40:7a:f6:5f:e3:d5:4d:3e:63:f5:
10:5d:d9:56:3c:ee:dd:aa:ab:1a:7d:52:80:34:6f:a0:98:5b:
7f:a8:43:82:dd:c5:d2:e6:f4:dd:20:eb:3c:de:7a:d0:17:b4:
b1:33:5a:08:d0:7b:8d:72:d8:99:52:4a:67:a8:29:9a:f2:a9:
d7:69:04:2b:83:e8:2c:53:d5:14:41:b9:15:81:5c:c7:db:17:
d5:9c:68:87:75:8f:9a:2d:c3:5a:a9:81:5e:47:8b:8b:ad:c7:
58:20:cf:eb:04:1c:c8:91:82:38:bb:e1:cb:e1:b2:f5:68:57:
f2:f8:22:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKl1CFqKijl/RUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTE3YzhlOTctMmMxNC00NjViLTllNmMtZTgyZWVlYTk2ZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozVuLyzf+LbhzvVi83k+yH9NtH2bTLFMuCsx
k/23rrtWi5EXNdhODqFk3Ds5bfYk6c3pPkTaQNVL5h86dLmVuLqRZryKLoVbvjLB
6RkveYU2coA3bO6w+v8/zBl2pmE9GB0kxHZ9slw1elo+BhtQRZHXvshT65fsdHoU
y6eNom9WE0xKanqMbXfofCk3p7qlomJT/rxi/CuR2ayTU18FxSMv/VKj40F/SE8V
vvESUe0eP3EsvUC8NXTcrhmzvIcgMOXkXEntBnVrjEqrG+T6UFwGIjZ+uBMSHNvT
I4jtAufkPsB2IfuW/3rx4zmaYZaHFORu+zE054t0zj+zRvwxZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDRunbwCOIouPZg/CX95nj8lTm3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTk0N2IxMWQtMWFjZC0z
NWQ1LTliZDMtNGM0ZGNhNDM2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9qiidzd/SmPiHZWeIk7pyP86KTktYN25009Kb9DQvdRl2uLOfcn/wv
JaSMxuQ8JK1CzeLe0DndZgzrq0fIpfb4rdXFqxc6k6UPDnfOFK3xNvrwn8aVQNpg
ieN5MiP91hxwUaVcoIHF8ETkKNtULSuvlSfNgI2fAsipH3gGuKUbxJ9x85HPQHr2
X+PVTT5j9RBd2VY87t2qqxp9UoA0b6CYW3+oQ4LdxdLm9N0g6zzeetAXtLEzWgjQ
e41y2JlSSmeoKZryqddpBCuD6CxT1RRBuRWBXMfbF9WcaId1j5otw1qpgV5Hi4ut
x1ggz+sEHMiRgji74cvhsvVoV/L4Itk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:12 2025 by rpki-client