Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/121265ed-06eb-3451-8d22-bd386a2c1e53.roa
File: 121265ed-06eb-3451-8d22-bd386a2c1e53.roa (raw, json)
Hash identifier: rXWDCweygVaWu5JZIGYP19kcqkBw1F7HsurrxVXVdGE=
Subject key identifier: 51:53:95:12:00:5D:A1:5B:C0:51:54:0A:59:2D:30:7F:32:FA:DC:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15BCE91C26B3B796146C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/121265ed-06eb-3451-8d22-bd386a2c1e53.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36630
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5b:ce:91:c2:6b:3b:79:61:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=3efafd34-626e-4948-b5ef-b34bf2944eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:67:4d:98:d0:2e:4e:25:09:9e:c1:1e:da:
4d:e7:be:1c:cb:ff:a2:db:85:41:39:42:1b:71:d4:
a2:68:61:e8:0d:20:e3:85:20:a7:13:d5:67:8e:ce:
d1:cf:e0:56:d8:73:c5:d3:79:61:82:bc:0d:08:ab:
ed:d6:e8:00:9d:e7:47:cb:88:ee:52:78:53:9e:23:
42:79:e4:5d:41:db:75:1b:e1:2e:39:19:ab:aa:c9:
4a:da:81:75:25:80:69:6c:bf:7e:38:58:cc:9b:a0:
ca:2a:37:a4:51:a9:1b:40:bd:ba:a9:06:5c:d3:72:
6c:f8:62:ab:96:fd:58:d3:62:f9:f9:5f:48:36:6f:
55:be:68:32:4d:3a:7f:e7:c4:39:88:2e:ad:4f:09:
18:06:fe:f7:93:04:5c:e4:49:71:8b:63:29:02:45:
92:fd:9d:21:43:a1:e7:71:a6:36:89:93:7e:17:b2:
b8:a1:29:89:c9:53:42:5f:45:f9:bf:03:e3:f0:bc:
40:ff:f2:6b:ae:1a:80:e6:de:44:16:69:05:72:82:
53:45:41:5d:a6:07:be:b0:71:11:74:96:e1:70:ed:
62:02:54:04:9a:21:51:5e:e0:8e:af:17:84:ba:b7:
30:76:6a:d3:d2:1a:4d:b5:5f:dd:6a:b5:43:37:b0:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:95:12:00:5D:A1:5B:C0:51:54:0A:59:2D:30:7F:32:FA:DC:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/121265ed-06eb-3451-8d22-bd386a2c1e53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:02:3a:2c:3a:e3:d7:14:1d:b8:bb:a0:f6:1a:bc:de:0e:3a:
5c:45:dd:83:13:b3:77:a9:0a:fa:23:00:6f:28:c7:04:60:f4:
f1:6e:4b:a3:2b:e5:09:2f:8a:d4:fa:b3:cd:9c:84:56:87:68:
73:8d:e0:54:71:5a:1c:09:82:c3:1f:b7:91:2f:27:60:0e:67:
55:ee:67:a6:c1:4a:3b:f8:82:36:5d:9a:fa:e4:d9:0d:1a:cd:
48:9c:31:da:b8:5d:1f:b5:d8:74:3d:27:7d:a4:71:c6:cf:ae:
a1:cc:c6:69:23:68:c4:b3:14:d0:be:97:d3:93:f0:9d:3a:1d:
bc:46:34:d4:e6:02:9e:06:ce:21:04:cc:60:67:34:9c:97:96:
44:b4:48:51:9c:93:d6:4a:20:89:2b:3f:0d:27:e0:a9:24:38:
13:30:42:28:30:c3:d2:50:8b:59:fd:90:ad:bf:1d:c1:39:54:
46:35:3f:fa:f8:2c:fe:20:0c:53:8b:b3:86:4b:a1:09:23:54:
d5:3b:9b:69:47:36:ee:4e:54:1e:74:ca:d7:45:fd:64:1f:fa:
34:7e:7f:40:82:75:d2:61:10:a3:16:fb:76:1b:43:b4:bd:3d:
a4:cb:f1:d6:13:62:21:1c:10:f2:fd:38:06:59:ea:ca:0b:f6:
40:38:40:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:37 2025 by rpki-client