Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa
File: f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa (raw, json)
Hash identifier: 9AmHo0yBamoBExu/YrQV1VtzDkHVor60OV4yaTs6khM=
Subject key identifier: C8:31:91:EA:6C:17:B1:0E:06:72:A8:9C:E3:C4:25:FB:23:2B:6F:4C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AFC2B8763D360E5575380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 99.197.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:fc:2b:87:63:d3:60:e5:57:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=2670c1a3-0aa0-48a7-9690-be45c7692acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:5c:ad:69:d0:cd:c8:ce:c0:b6:9f:64:43:
7f:08:b5:31:a6:58:93:65:a8:0e:96:60:0e:a2:d2:
4d:af:be:d4:3b:f4:d7:fc:f1:67:8f:11:9f:ea:07:
e1:83:0c:a7:dc:0d:4b:52:c2:c5:54:0a:70:24:f1:
13:f0:5a:cc:17:a2:01:ce:2f:5d:aa:64:ac:ce:cc:
c5:8d:0e:2d:2b:ea:f0:3c:78:80:ad:ff:3e:7f:29:
5a:98:bd:f4:78:ee:68:70:78:9c:e4:cf:26:e1:ef:
cf:fe:f9:c2:53:bc:af:ea:9f:9a:e6:5b:f8:69:4f:
d9:1c:55:98:bb:31:87:26:f7:32:70:95:23:89:c7:
16:dd:20:82:8a:00:cf:1d:64:be:64:91:1e:5b:d3:
ed:df:ed:ee:c2:7a:7b:26:c3:ab:2e:de:50:8c:ae:
0b:88:0a:22:36:68:7a:1a:ed:03:e3:29:1f:cb:1f:
5c:b9:12:7f:f3:14:45:3f:45:11:9d:ae:d6:45:9c:
4e:eb:47:89:87:a9:97:4c:a9:1e:41:d8:aa:5b:82:
29:b9:6f:d8:9d:f0:9d:ee:07:bf:de:4b:47:05:4b:
2b:de:4e:09:5d:a8:fd:9c:cc:df:49:9d:70:42:44:
af:c0:38:0f:a6:ce:b0:80:ad:3f:96:a4:44:69:ce:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:91:EA:6C:17:B1:0E:06:72:A8:9C:E3:C4:25:FB:23:2B:6F:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5f0ad86-47d4-3af6-a5ab-239c749634ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:64:e6:aa:8b:96:e4:86:ed:27:eb:c4:fb:61:b8:fd:8f:d4:
1d:b8:3c:cd:72:a5:12:02:e4:71:79:fd:20:ea:53:e3:56:60:
c5:6b:ed:44:41:2d:69:ae:53:98:a8:4a:9d:29:b5:27:0c:6b:
12:df:4e:d5:09:e6:9d:1d:7e:82:7b:cf:8a:60:6d:88:40:56:
46:ba:87:9e:a3:e3:cd:7a:cf:74:e0:56:44:48:cb:15:2b:3e:
2e:2c:4e:82:df:f0:96:c5:10:9a:3f:54:94:ac:7a:da:53:b2:
18:85:af:ed:19:1e:9a:33:c4:62:68:c4:62:57:1c:e6:6f:74:
43:8a:a0:17:b0:ce:23:d1:0b:bd:f4:90:5f:84:ec:8d:5a:42:
81:36:61:00:45:62:37:86:b1:28:e7:f7:73:aa:97:fb:2f:18:
b7:f2:17:ce:0e:8d:34:23:46:44:19:4f:a0:60:e8:b3:51:a9:
87:4f:2f:35:bc:07:d3:8b:b7:a0:96:68:a9:ac:8e:75:f5:d5:
32:23:79:e3:71:65:1a:85:53:c0:e2:5f:ab:e3:d0:25:4c:2e:
4a:19:6e:51:f3:49:f2:3c:18:f7:84:15:71:41:51:ed:f7:8d:
cc:50:9e:41:2c:25:90:c0:4e:be:8e:57:03:e5:a9:1e:74:83:
a8:02:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:35:59 2025 by rpki-client