Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b55f21-ab91-3046-8822-b5f6ac643fab.roa
File: 19b55f21-ab91-3046-8822-b5f6ac643fab.roa (raw, json)
Hash identifier: NAId33AWsq4AVviSFwlHGnJY1bbI4P+BZKygqell6G0=
Subject key identifier: 2F:30:1C:0E:84:F6:9B:48:8D:60:4D:41:23:34:E3:AA:4C:1C:BC:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15009912AE0C5CEA562C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b55f21-ab91-3046-8822-b5f6ac643fab.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396568
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:50:09:91:2a:e0:c5:ce:a5:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=a6999872-5bdf-48db-bf2a-4313bf22c7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:a0:ef:b6:2f:27:68:0f:99:7d:62:e8:e9:
17:bf:c6:ac:5a:66:d3:2d:6c:bf:c0:40:08:07:d4:
5b:12:0a:fa:1b:b7:2a:a7:8b:dc:d3:6f:ca:3f:aa:
7f:e4:12:c4:77:6e:18:bd:8a:a7:7e:a2:b1:c4:82:
73:f1:b6:0b:8a:e5:db:95:7e:dd:ab:6e:34:d6:5a:
9a:fd:0d:bb:7d:dd:70:4a:75:a5:e6:2d:79:89:9c:
d0:ee:e1:7a:c9:88:ea:62:c0:07:7e:bd:83:53:c4:
72:10:73:2f:e0:0c:f1:92:bf:45:c2:26:4f:d1:56:
4b:14:9f:6e:43:e1:2a:2a:c7:71:73:c8:d2:b8:ea:
08:a6:0b:f5:cd:81:7b:f3:74:04:4f:68:03:78:16:
4e:fb:13:99:fc:ec:4a:a1:6a:44:a1:a8:0e:10:48:
c5:4c:42:0a:ac:c3:8f:cf:38:3b:d8:8d:ea:82:ed:
6f:a0:3c:2c:ff:08:31:3d:be:81:b7:57:b1:1e:c9:
5b:7f:b4:a1:01:8c:32:2c:19:fb:93:ae:90:a3:50:
6b:cf:73:6c:15:e0:a5:8e:03:bb:55:2e:f0:cb:b9:
b6:3e:0d:c1:99:8c:c6:92:92:77:71:f0:3f:af:cc:
43:78:08:a2:db:4d:c7:b9:e0:9c:9f:94:37:9a:50:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:1C:0E:84:F6:9B:48:8D:60:4D:41:23:34:E3:AA:4C:1C:BC:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b55f21-ab91-3046-8822-b5f6ac643fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:18:67:9b:13:55:6f:94:e3:f4:f2:8b:e8:d9:b7:4a:25:9c:
9b:83:a5:f9:f1:4b:27:bd:10:8c:1d:49:1b:d4:ca:e1:56:29:
d4:53:34:82:87:a9:97:cb:56:10:e1:c4:4a:0b:69:c8:f3:13:
1f:a3:0b:a8:56:6c:08:bd:97:aa:9e:b8:c0:2d:f5:f2:9f:38:
fe:6a:01:c4:9f:5a:ea:55:04:d7:35:b2:89:fc:0c:c2:a9:bd:
e5:9f:5d:2f:77:58:40:9c:2f:5b:75:99:f5:2c:19:94:00:a6:
98:ee:b2:8a:1a:fa:b2:7a:f8:10:37:75:5d:f4:ec:88:55:51:
b3:12:31:32:52:a2:ef:94:d1:e2:b5:5a:11:e0:56:b4:4a:10:
ae:d5:45:2e:fb:01:8f:06:26:af:ed:eb:ee:03:fb:4a:43:5f:
df:16:df:30:7f:ba:d3:df:a4:9a:e7:66:86:54:36:f4:5e:a5:
e8:1d:f0:45:82:e3:e7:00:fd:cb:fe:1c:12:16:22:36:08:73:
d6:a0:cb:ff:d8:73:19:89:ed:0f:7d:96:93:14:75:67:91:37:
9d:a2:8d:1e:8c:45:16:6f:c2:5a:91:43:ad:2c:cf:10:fc:c3:
78:f7:34:56:54:fd:ef:03:dd:50:9b:dc:a7:ae:f5:45:c7:dd:
40:5d:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:01 2025 by rpki-client