Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa
File: 03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa (raw, json)
Hash identifier: mxrrpb4LB8pdmZE094EWHOP2sH8CIVV0FfdoN5Xv+jg=
Subject key identifier: 9C:3F:AB:D4:D1:25:DD:0D:CD:6A:0C:34:48:09:16:CC:DC:09:DC:D6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14C6F762983AA55920040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 25485
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4c:6f:76:29:83:aa:55:92:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=27203d9a-80a5-449d-a56b-38a707d86f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:4e:7a:6d:75:e8:01:8c:24:7b:98:46:34:
dd:80:05:08:d1:ef:58:ec:c4:b8:80:fe:ea:56:8d:
42:a6:f8:63:66:45:45:e1:91:55:16:9a:a9:27:7d:
1a:fe:14:d4:03:d2:d5:b6:3d:6a:05:2d:40:ad:5b:
b4:75:b3:c1:0e:78:dd:10:0b:9a:10:77:ee:90:1d:
a3:27:a7:97:19:c8:f8:9e:5a:ab:7a:22:69:33:76:
8c:f6:02:9f:4d:02:63:8b:b3:be:32:ed:8c:65:45:
2e:aa:c0:95:0c:b9:7f:95:66:76:49:91:94:6d:d2:
aa:52:9d:04:00:bb:62:45:ed:6a:e6:27:69:ac:99:
7b:59:cf:cc:87:b2:4a:db:f9:2d:60:e3:0c:a5:78:
05:70:7d:ef:c6:c8:58:cb:47:88:5a:95:b5:14:ad:
53:fd:42:57:fd:55:13:fe:b1:5b:02:b6:d6:56:2d:
42:48:ca:bc:f0:a7:2a:d8:9f:b1:70:6e:9a:d8:a5:
be:4e:35:12:f3:9c:26:dd:b7:2c:21:82:60:cc:a5:
79:f5:59:7c:db:b7:c3:bd:3a:1a:0f:93:bb:1c:2a:
75:4a:95:44:84:9a:78:e2:9b:80:75:36:da:42:01:
bb:23:76:d0:8b:bc:f8:cd:5b:2c:b9:63:65:cc:ab:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:AB:D4:D1:25:DD:0D:CD:6A:0C:34:48:09:16:CC:DC:09:DC:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03cf468d-c9e8-3921-86a7-ac28e5e9702e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f6:30:7b:9a:4d:79:60:c3:06:04:f5:6f:cd:67:46:93:fb:
72:53:d7:e4:23:98:dc:73:45:4c:43:d8:52:ef:f4:aa:6f:38:
bd:93:2e:81:5e:35:0b:ca:4a:6e:01:aa:eb:63:dd:89:2d:5a:
c0:14:9f:e5:d4:94:fd:a7:9f:17:3d:ff:96:2d:df:2a:b5:55:
f8:e9:aa:21:ec:5e:f4:c7:8e:0b:08:cd:00:1a:9b:35:4e:b5:
e2:4e:db:0b:7a:69:bf:c8:b2:9b:57:b0:29:9e:e7:0a:e8:18:
91:66:9d:ff:b3:72:67:28:c0:b5:a6:29:99:fb:96:e0:f5:0c:
6e:a1:a6:ba:12:74:4a:58:0d:38:8f:85:ed:49:0d:6a:17:92:
ca:a9:da:c2:be:eb:b6:24:c8:69:97:82:39:c3:18:5d:12:6b:
82:58:89:b1:3c:2e:d3:e0:d4:80:47:64:63:b3:40:5d:7c:06:
ba:46:4c:9f:f3:77:81:89:f3:30:9a:97:c5:65:9e:72:af:18:
7b:f9:60:28:d9:98:c3:f9:d5:99:4e:75:b6:ab:d9:2e:b0:9c:
a9:3e:6d:1e:dd:dd:6a:0d:2b:ff:6b:0d:e6:c4:21:25:ed:5b:
5c:0c:7f:43:95:c2:71:46:60:a2:54:5b:90:41:8b:98:69:25:
30:59:64:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsUxvdimDqlWSAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MjcyMDNkOWEtODBhNS00NDlkLWE1NmItMzhhNzA3ZDg2ZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlROem116AGMJHuYRjTdgAUI0e9Y7MS4gP7q
Vo1CpvhjZkVF4ZFVFpqpJ30a/hTUA9LVtj1qBS1ArVu0dbPBDnjdEAuaEHfukB2j
J6eXGcj4nlqreiJpM3aM9gKfTQJji7O+Mu2MZUUuqsCVDLl/lWZ2SZGUbdKqUp0E
ALtiRe1q5idprJl7Wc/Mh7JK2/ktYOMMpXgFcH3vxshYy0eIWpW1FK1T/UJX/VUT
/rFbArbWVi1CSMq88Kcq2J+xcG6a2KW+TjUS85wm3bcsIYJgzKV59Vl827fDvToa
D5O7HCp1SpVEhJp44puAdTbaQgG7I3bQi7z4zVssuWNlzKulyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJw/q9TRJd0NzWoMNEgJFszcCdzWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDNjZjQ2OGQtYzllOC0z
OTIxLTg2YTctYWMyOGU1ZTk3MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/2MHuaTXlgwwYE9W/NZ0aT+3JT1+QjmNxzRUxD2FLv9KpvOL2TLoFe
NQvKSm4Bqutj3YktWsAUn+XUlP2nnxc9/5Yt3yq1VfjpqiHsXvTHjgsIzQAamzVO
teJO2wt6ab/IsptXsCme5wroGJFmnf+zcmcowLWmKZn7luD1DG6hproSdEpYDTiP
he1JDWoXksqp2sK+67YkyGmXgjnDGF0Sa4JYibE8LtPg1IBHZGOzQF18BrpGTJ/z
d4GJ8zCal8VlnnKvGHv5YCjZmMP51ZlOdbar2S6wnKk+bR7d3WoNK/9rDebEISXt
W1wMf0OVwnFGYKJUW5BBi5hpJTBZZAQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:57 2025 by rpki-client