Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
File: fffb3a75-4857-35c7-8f76-62ff04d1e698.roa (raw, json)
Hash identifier: +N4h50jxBcf1sxtSEAr1jYMwjB+xOM85VqRGLcfO4PM=
Subject key identifier: 21:6B:BD:53:A3:DE:1F:DC:5F:4B:EB:F5:0A:52:FA:1F:4D:40:6B:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584913AC3F71230D2D22E970CC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 7342
IP address blocks: 199.7.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3f:71:23:0d:2d:22:e9:70:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=2c4ff694-fabd-4c1d-90d6-0c76115e9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:05:25:16:54:b6:28:50:71:73:c2:fe:61:
8d:15:50:74:40:07:78:88:33:4b:0c:51:4f:48:10:
d0:ff:6f:3f:31:7b:b0:99:c8:5a:8d:ef:7b:55:d8:
62:8b:7e:9d:92:e8:fb:2e:76:1f:95:3e:35:7c:54:
d0:66:8d:ec:df:45:04:48:e2:a9:33:25:31:ab:56:
1a:5f:c9:20:d6:ed:90:87:76:69:44:29:8f:9c:86:
12:c0:f1:f7:eb:fa:13:d5:6e:86:65:78:1c:8f:55:
54:5d:22:7e:73:15:35:16:af:bb:ac:39:b3:df:cf:
57:42:8a:68:9d:00:f0:bb:15:c1:00:17:38:5d:71:
e3:8a:e3:a6:a7:62:fd:e5:69:86:47:13:2f:c1:03:
92:f3:e0:e0:d7:37:59:12:48:90:fc:6c:4b:11:16:
ed:0e:77:6c:d2:c5:00:d8:b3:24:3b:22:35:e5:54:
e4:df:cd:c5:31:8c:c2:09:00:77:e4:a6:ed:8f:ae:
c7:48:10:f6:93:65:d2:4f:45:12:06:cf:42:69:36:
b2:6c:95:45:20:d4:61:02:1f:9b:d8:1f:04:be:15:
7b:e7:43:04:06:d2:07:0d:12:3c:17:61:54:e8:fa:
6a:9b:a6:01:ac:4e:a6:26:02:33:a8:65:b1:eb:50:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:BD:53:A3:DE:1F:DC:5F:4B:EB:F5:0A:52:FA:1F:4D:40:6B:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:e5:84:2b:a7:cb:68:f8:ca:a6:9a:48:24:b0:a7:86:ab:aa:
ea:53:40:b3:21:f5:3a:65:1f:35:7b:99:fb:89:20:e9:68:15:
f8:04:b2:a1:66:04:e2:62:d0:7b:10:91:7c:ad:f9:50:86:3f:
78:bc:12:2e:1b:74:a0:4f:6d:92:a7:6a:e0:dc:53:74:79:61:
76:b7:84:37:fb:5a:c5:fa:fd:12:68:fe:2a:64:09:5f:5a:56:
62:fa:5c:53:8f:36:7e:7f:f6:6d:a7:7d:8b:f5:b1:e6:fa:31:
bc:04:e5:ae:f0:42:6b:1f:8e:1f:a9:8e:40:b9:14:7d:3c:d5:
aa:44:39:da:af:29:6d:fc:b2:c6:df:3e:69:0f:74:a4:bc:64:
40:00:25:c5:0b:fe:8b:bd:fa:62:0e:d2:22:d0:09:ec:40:83:
3e:63:c5:53:5d:b7:09:f7:18:df:fd:28:1b:54:a9:3d:ad:5d:
2b:b8:0d:a8:96:b8:ca:ca:68:87:95:01:c5:66:e5:eb:52:3e:
d1:2a:9b:f6:98:e6:1d:80:f0:95:e7:d0:36:7f:18:4b:09:4d:
32:80:c8:90:c3:17:a4:b6:c1:d0:2a:5d:60:4a:fb:38:55:34:
b8:81:ed:bb:6b:72:7f:25:3e:bd:c6:0a:9d:bf:55:23:25:33:
67:b0:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:13:38 2025 by rpki-client