Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
File: ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa (raw, json)
Hash identifier: 9bNvjPkSkEVuBKhC4z4HQKnLt239n00tlVABo5ks3Qo=
Subject key identifier: 28:24:1C:C4:C2:6D:32:BE:D5:9C:F6:88:A7:19:FC:0F:3C:F4:B0:2D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849350EBC816AFE23078C487B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 7342
IP address blocks: 199.7.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:bc:81:6a:fe:23:07:8c:48:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=30235854-a677-413e-bf9e-f8542830c5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:1d:2b:8c:3d:4b:85:39:91:f5:cd:bf:46:
dc:0d:56:66:3d:eb:f9:06:8f:04:26:3f:03:7a:74:
b0:50:97:bc:d8:ea:33:73:d9:7e:3b:e4:4b:34:6e:
44:49:fc:a1:dd:b6:9f:73:9a:56:f6:4b:48:af:7a:
bc:d2:08:e5:41:e0:34:da:d4:87:1a:33:c2:b8:06:
73:ba:28:99:17:12:31:07:0d:a6:69:15:7c:d6:6d:
d5:d4:92:b8:1a:6b:19:b3:d3:ed:a5:dd:29:50:6a:
3b:c6:58:4e:ef:78:0b:26:9f:1a:4b:9c:c2:15:4f:
a0:21:f9:66:b7:61:b9:66:d1:1f:f8:08:86:21:29:
5a:63:a0:d0:91:13:c1:ec:94:11:8b:3b:ec:f0:37:
c0:e6:2d:fc:6f:b0:fd:0f:52:be:6d:f1:00:02:4f:
66:61:2d:d3:63:a5:27:56:02:92:5c:22:8b:dd:52:
aa:92:bb:f6:92:d5:57:20:cb:00:b2:2e:da:39:6a:
8a:05:ab:49:aa:8e:98:72:f0:06:70:fe:4d:80:b8:
83:34:26:3c:3a:7b:78:7b:bd:bc:2f:f0:44:c4:ce:
6a:a6:09:fa:f8:f4:75:89:4f:dc:5b:9c:7d:ff:b6:
d9:84:93:80:9e:2b:86:40:fb:f7:d5:41:7b:62:92:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:24:1C:C4:C2:6D:32:BE:D5:9C:F6:88:A7:19:FC:0F:3C:F4:B0:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:67:86:d9:f5:a3:11:d1:04:2c:d6:14:cf:55:50:16:dc:74:
72:48:12:ce:9b:34:f6:fd:6f:75:96:a6:e2:2f:66:92:ac:36:
0e:e4:ae:1a:af:cf:99:93:c7:d0:e9:15:71:0c:56:60:c5:31:
ee:dd:bc:f6:35:62:a7:7e:0b:4e:0a:84:0c:e8:d7:1b:88:12:
c0:2d:2f:57:1d:c8:bd:f3:f9:85:8d:94:06:9c:19:7a:d2:27:
5a:3c:60:4c:e8:cf:38:bd:bd:9a:59:dd:42:a6:5d:c5:d1:ba:
3d:a7:55:b2:70:c4:49:bc:bc:9a:c9:50:65:dc:ad:66:9a:2b:
a3:9c:27:54:d9:d0:7d:e4:db:d6:2b:74:66:b2:08:38:8e:7d:
b4:db:2f:21:e9:ed:44:9f:c6:f4:37:04:47:85:d7:87:9f:53:
bd:7a:95:5f:6a:ea:a8:c6:79:bd:13:30:df:e3:e2:ff:cf:b6:
49:af:a2:9f:dd:14:7c:4e:45:db:83:d8:85:64:d7:64:e4:12:
1c:59:01:99:a1:7d:aa:56:36:74:23:a8:f0:7b:c2:41:4d:83:
bc:a3:52:d9:cc:c5:95:b0:d8:34:e0:ee:05:56:d8:d7:6e:bc:
0a:b1:01:94:98:b3:6b:5a:d0:2b:65:d2:25:8b:bd:f9:ca:82:
0a:ba:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:18:43 2025 by rpki-client