Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3372a4-9c27-33b6-85d9-f0bf78ee720f.roa
File: 0f3372a4-9c27-33b6-85d9-f0bf78ee720f.roa (raw, json)
Hash identifier: k3+NRQ2snnFrUcmd849+5x7H+XMRyY633PMx3w9cZjA=
Subject key identifier: 33:DF:AD:BC:52:57:6E:52:4A:EA:5C:64:9F:82:FD:08:11:25:3E:45
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73EF918C41163B9DA69F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3372a4-9c27-33b6-85d9-f0bf78ee720f.roa
Signing time: Fri 29 Nov 2024 13:58:34 +0000
ROA not before: Fri 29 Nov 2024 13:58:34 +0000
ROA not after: Thu 27 Feb 2025 13:58:34 +0000
asID: 396581
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:ef:91:8c:41:16:3b:9d:a6:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:34 2024 GMT
Not After : Feb 27 13:58:34 2025 GMT
Subject: CN=0abb6741-8787-4812-9494-f5040007d6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:11:7d:7a:7f:fe:40:be:f4:54:8e:3d:a7:
e3:bf:bc:7d:13:f3:56:a5:6e:86:4d:35:14:e0:6c:
82:ce:0a:9b:f2:3e:51:d8:96:91:0a:0f:20:0a:bf:
ac:4f:1d:56:87:72:95:6b:d1:d8:1c:bf:3d:83:45:
97:8d:26:6a:9a:5f:49:ab:c9:aa:97:d0:84:d7:6e:
9b:ab:ab:02:cf:da:1b:23:66:a0:dc:b7:c4:f9:57:
5f:49:35:f1:d2:fa:48:dc:1c:04:05:fa:8e:5f:18:
5a:3b:97:a2:5a:07:69:63:d8:be:91:6d:e9:80:e1:
49:57:c0:27:49:87:1e:0a:80:71:c7:55:27:4f:30:
e3:f9:bc:f6:a8:b4:a4:83:b1:d2:a1:dd:f5:ec:ea:
9a:74:ac:e5:01:a5:7f:35:32:d8:4f:9d:04:0c:f3:
b3:c1:02:12:14:37:2d:cd:1b:2d:73:42:98:1a:fa:
18:9f:a8:ce:d1:ef:11:07:6c:0b:28:c6:75:43:0b:
b1:9d:87:ae:3d:f6:18:a9:81:58:98:95:e4:2b:c9:
1c:e1:dd:ca:a1:56:f4:46:f2:0b:0a:bd:26:0f:ac:
6c:74:28:70:1b:0f:c6:10:06:75:4a:05:07:23:44:
cd:ac:1d:a8:db:a4:c7:0d:43:5a:9f:cf:16:2e:bc:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:AD:BC:52:57:6E:52:4A:EA:5C:64:9F:82:FD:08:11:25:3E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3372a4-9c27-33b6-85d9-f0bf78ee720f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:75:88:95:48:c6:75:39:63:eb:34:d3:02:26:e4:07:bd:3a:
85:61:d6:1b:e5:02:43:9c:f2:64:4a:60:9d:48:52:95:14:22:
d1:03:a0:e8:07:86:5c:72:f5:97:1a:ec:a2:73:af:fa:50:55:
8e:c8:e8:94:0c:0a:a3:d0:06:fb:da:9c:0d:7f:85:7e:48:df:
bf:21:24:51:d3:70:4c:5f:74:48:b7:24:ea:84:1f:67:0a:d9:
d8:97:12:2e:46:ee:bb:00:e9:fa:42:b6:0a:7b:fe:5b:aa:45:
98:36:a4:7c:38:b1:7f:97:88:08:ae:87:96:bf:aa:65:99:15:
17:e5:79:49:7c:47:bb:bd:36:dd:7a:a1:bf:f6:d1:da:73:a6:
31:f8:ae:6a:cb:29:70:84:95:17:68:33:cd:cd:73:85:50:a8:
de:c8:36:91:75:52:29:b4:b4:03:bd:aa:86:db:80:b8:64:22:
44:fc:44:82:86:2e:23:1c:e5:cf:74:e8:4c:b5:73:96:c9:14:
94:5d:25:57:b8:55:61:17:38:bd:7c:8a:b1:e8:7e:62:3c:e8:
c0:83:6b:91:b6:48:8d:78:95:e0:56:26:ed:47:06:1e:ea:10:
42:7e:5c:bb:e5:fe:42:2b:7c:1a:0d:15:cb:bb:8d:95:56:4e:
75:2f:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:02 2025 by rpki-client