Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1389f524-729f-360b-94e5-e3e07f22c332.roa
File: 1389f524-729f-360b-94e5-e3e07f22c332.roa (raw, json)
Hash identifier: WgHHS6/WQAHi92RLaSlNRSbA9CDyp+GBL7RkZUdXmrE=
Subject key identifier: B9:0F:B2:F3:C1:D5:C7:22:0F:65:46:2A:88:7B:09:03:1A:F5:0C:C9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB154476CD0743DAEF5BA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1389f524-729f-360b-94e5-e3e07f22c332.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36624
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:54:47:6c:d0:74:3d:ae:f5:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=57ad1a35-bd1d-4703-be92-f0af1ec7446c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:b8:39:8e:72:c7:19:3e:0d:da:82:34:42:
0c:54:cb:d6:a8:60:6e:22:98:3d:04:da:f1:c3:02:
4d:b8:19:e4:91:25:9a:2a:33:0f:71:94:3a:10:64:
37:7e:bc:13:d2:92:ba:b5:f3:d3:e5:bf:2d:1e:3b:
ad:9e:26:de:4e:d6:24:5e:42:fa:1e:d1:e5:32:0a:
59:04:89:8e:6a:55:81:24:f6:5d:23:84:17:08:60:
8f:2b:78:4e:51:82:af:3c:43:af:ee:2e:d5:73:5a:
3b:8e:0b:ea:7a:da:89:17:2f:0d:42:dd:7b:d9:90:
81:be:88:67:f9:12:b7:5c:b1:08:60:f3:36:39:84:
3e:c8:be:0f:95:b9:42:a1:6e:c7:79:2a:cf:83:d7:
a0:ff:aa:36:ce:2e:2b:3b:cd:09:19:c4:5f:d0:bd:
0c:af:3f:f7:58:b1:8a:db:40:88:c9:d5:7d:03:1e:
98:e6:fd:97:cb:a3:5b:d8:c4:7f:45:1f:95:1a:3a:
e1:4b:f1:84:5c:0f:09:43:06:e9:de:52:2c:b4:7a:
be:5b:6a:06:73:2e:54:7a:bb:fe:96:bd:02:bc:c7:
96:49:c2:12:72:ed:f2:74:b5:ad:b5:b1:65:46:25:
0c:73:d2:fc:be:62:cf:f8:97:9f:d0:23:33:80:5d:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:B2:F3:C1:D5:C7:22:0F:65:46:2A:88:7B:09:03:1A:F5:0C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1389f524-729f-360b-94e5-e3e07f22c332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:1d:47:a8:8a:e5:06:15:07:c2:9e:8e:d0:b6:98:fa:51:4c:
84:48:5d:b6:fb:a4:78:27:fc:74:39:d5:4c:a4:82:3d:ed:2f:
7a:2e:0c:34:63:c2:d6:43:ad:9e:74:35:6c:8a:9f:86:a7:5b:
8a:07:0c:3f:38:08:79:26:b3:dc:b6:2b:85:9f:43:6d:55:f8:
d7:2b:b9:48:2e:79:f6:9c:82:8f:2f:f0:49:56:82:d4:f3:7c:
3b:71:55:60:6c:62:fa:05:b9:a0:33:20:89:97:4d:eb:87:5e:
69:c1:fa:96:c5:32:2a:e4:8f:39:48:ff:ed:e2:96:02:56:e5:
85:c5:07:c4:44:14:f9:2d:33:6c:bd:1e:20:0b:96:1b:35:27:
66:1e:2e:e9:41:c3:80:bc:ef:21:c3:16:fd:61:24:13:14:11:
a7:b7:ef:1e:b8:d4:12:fd:a7:3a:4b:8f:5f:c5:f7:e1:6c:27:
58:3e:a0:49:06:e7:7c:1a:25:e1:05:2e:4e:71:ba:e9:95:9c:
71:ec:4b:b3:1d:da:8a:73:f3:ba:40:07:d7:99:4d:cb:58:e8:
de:41:c8:9f:ec:c9:52:b7:58:14:b3:3f:2f:5a:9e:54:4c:3e:
5a:c5:9a:e4:37:fa:a4:15:f0:47:a5:57:a5:32:80:01:93:4b:
4b:0e:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:21 2025 by rpki-client