Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b01ad38-f899-3591-a402-40d972fb0dc9.roa
File: 1b01ad38-f899-3591-a402-40d972fb0dc9.roa (raw, json)
Hash identifier: uZwD9qaxUu2vCHgyz3sO6sbBB3gs+jWYzo0MesS6Mj0=
Subject key identifier: 61:2B:D5:4A:A8:96:A5:97:DC:D1:68:68:EC:5E:DB:16:92:C8:B3:C2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1463FF7979A6A3B313DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b01ad38-f899-3591-a402-40d972fb0dc9.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396616
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:46:3f:f7:97:9a:6a:3b:31:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=9e1fbda3-6881-494d-afff-6ad0978e55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:01:65:d3:7c:00:c2:fe:e6:c5:e0:98:ae:
69:6e:6c:b0:b9:ad:f7:20:4c:07:e6:25:3c:f7:02:
46:22:c4:12:6b:f2:55:6d:fa:3f:30:2e:86:3e:c0:
f8:5a:5a:7e:3f:07:53:ef:f5:6e:e5:13:ae:ca:aa:
50:1d:3b:c7:ca:83:e9:f3:55:15:06:ba:b9:8f:4d:
5b:36:c8:fe:80:b7:5c:af:7a:bf:ca:b4:6e:1c:99:
ba:1b:28:27:e6:65:01:a7:b5:95:7e:14:63:7a:d6:
a6:6a:4e:93:3c:0c:28:b4:90:fa:df:06:b4:ed:88:
f3:b9:6b:a2:6b:04:a3:8d:fd:87:81:4e:10:ce:ed:
18:60:12:19:cf:14:fc:25:18:47:6b:41:77:78:59:
2d:9b:37:5a:65:05:72:7c:7b:c0:bc:1d:59:a3:8d:
e3:06:f6:0f:d6:6f:51:a3:87:4f:7e:d5:af:1a:fc:
5f:67:9f:55:eb:5f:d1:68:5e:df:97:c6:ac:6e:56:
c3:bd:1c:c1:28:82:82:3c:00:b9:68:0d:1c:a7:f6:
98:98:99:23:00:04:78:f2:bd:bd:73:33:39:93:76:
e4:e2:87:1a:4f:1e:2c:5f:34:34:a1:f4:e8:69:41:
00:b1:4d:44:ac:8c:13:63:3d:02:75:03:96:0e:a3:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:D5:4A:A8:96:A5:97:DC:D1:68:68:EC:5E:DB:16:92:C8:B3:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b01ad38-f899-3591-a402-40d972fb0dc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:50:1b:f1:7c:8f:ed:07:08:e9:90:47:53:38:5f:cd:82:96:
ab:26:7a:4a:7b:91:95:58:34:1a:9b:0a:3f:92:01:42:c1:30:
3e:1c:d0:f3:e6:43:65:ad:1d:92:57:ae:eb:82:05:8c:0f:9b:
84:20:3f:83:86:c7:3b:0a:a1:70:f4:76:c4:71:02:24:91:c1:
9b:04:a5:80:1c:cf:8d:64:1f:75:a4:3b:eb:52:7b:7b:bb:c6:
73:b6:cc:68:58:36:e8:28:e9:90:6c:72:cc:d0:29:3f:1e:2b:
59:e7:d8:6b:13:50:8c:fd:10:5a:73:9b:62:90:74:e3:7b:04:
56:3f:51:2c:e9:88:8d:bd:69:69:3f:47:22:e1:64:22:87:36:
49:88:c6:9d:c5:d2:a1:85:7d:e9:48:fd:76:14:02:6d:af:1d:
f9:3b:bc:24:39:51:f8:fe:9c:de:3f:d1:2c:b8:8e:11:3b:b0:
ec:7f:00:b6:23:f1:cc:3b:28:48:97:66:5d:9e:7d:21:a1:73:
d3:80:5f:cd:58:74:c1:92:fd:7c:8d:61:b9:e0:bc:d7:38:ea:
17:e7:8c:af:5d:c5:d6:f6:9c:32:27:62:ad:c7:cf:0c:5e:5d:
02:9e:5c:c8:98:05:9c:a9:c4:77:b3:35:73:ab:97:09:e6:a7:
51:9a:ac:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsUY/95eaajsxPaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
OWUxZmJkYTMtNjg4MS00OTRkLWFmZmYtNmFkMDk3OGU1NWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wwBZdN8AML+5sXgmK5pbmywua33IEwH5iU8
9wJGIsQSa/JVbfo/MC6GPsD4Wlp+PwdT7/Vu5ROuyqpQHTvHyoPp81UVBrq5j01b
Nsj+gLdcr3q/yrRuHJm6Gygn5mUBp7WVfhRjetamak6TPAwotJD63wa07YjzuWui
awSjjf2HgU4Qzu0YYBIZzxT8JRhHa0F3eFktmzdaZQVyfHvAvB1Zo43jBvYP1m9R
o4dPftWvGvxfZ59V61/RaF7fl8asblbDvRzBKIKCPAC5aA0cp/aYmJkjAAR48r29
czM5k3bk4ocaTx4sXzQ0ofToaUEAsU1ErIwTYz0CdQOWDqNuvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEr1UqolqWX3NFoaOxe2xaSyLPCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIwMWFkMzgtZjg5OS0z
NTkxLWE0MDItNDBkOTcyZmIwZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9QG/F8j+0HCOmQR1M4X82Clqsmekp7kZVYNBqbCj+SAULBMD4c0PPm
Q2WtHZJXruuCBYwPm4QgP4OGxzsKoXD0dsRxAiSRwZsEpYAcz41kH3WkO+tSe3u7
xnO2zGhYNugo6ZBscszQKT8eK1nn2GsTUIz9EFpzm2KQdON7BFY/USzpiI29aWk/
RyLhZCKHNkmIxp3F0qGFfelI/XYUAm2vHfk7vCQ5Ufj+nN4/0Sy4jhE7sOx/ALYj
8cw7KEiXZl2efSGhc9OAX81YdMGS/XyNYbngvNc46hfnjK9dxdb2nDInYq3Hzwxe
XQKeXMiYBZypxHezNXOrlwnmp1GarEQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:00 2025 by rpki-client