Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/216b65ec-1074-34ec-87c8-13fbd4457b12.roa
File: 216b65ec-1074-34ec-87c8-13fbd4457b12.roa (raw, json)
Hash identifier: ZjdVhY8WLskb4S277RyrEOd5XmzQMtuW1f30ew9Vnqg=
Subject key identifier: 61:51:02:EA:84:22:A7:E2:99:D4:C6:94:7A:74:A5:91:BD:18:41:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1577CB02BE84B59611980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/216b65ec-1074-34ec-87c8-13fbd4457b12.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396591
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:57:7c:b0:2b:e8:4b:59:61:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=7eaa2035-7f31-41d3-9c4f-2360386a83ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:73:72:82:97:0d:83:ff:c1:f1:7c:43:91:
1f:61:70:50:23:ec:9c:59:3b:35:4e:be:24:fa:4e:
dd:b7:ac:63:30:30:d5:83:ab:7c:75:ef:2d:92:f1:
8c:54:ed:32:1f:e0:3d:84:fc:a0:4b:93:53:c1:4b:
ee:b8:90:a0:a7:39:91:13:f4:2e:ad:f1:22:ab:e1:
57:e7:04:4d:7a:51:94:54:03:82:c6:55:25:c9:2a:
6c:f6:7a:72:d4:50:12:1a:57:24:96:e7:93:b0:39:
87:02:97:72:d8:0c:ff:ed:9e:39:b6:23:6a:d8:18:
9e:93:57:53:35:b9:1f:45:bb:32:93:b8:c9:89:56:
ce:16:b4:b7:7e:83:eb:ee:87:3d:97:c7:4d:9a:51:
67:51:67:f1:20:38:68:9d:13:15:18:f3:64:45:fc:
8c:d0:3a:84:95:b9:fc:f1:81:6d:df:59:6a:2a:bb:
9a:3b:64:20:97:d3:f6:b5:69:4d:50:c1:45:49:aa:
4e:c1:34:e5:52:81:0a:1d:5e:7d:e9:77:a7:04:ca:
c4:38:c2:f8:4e:54:0e:a0:6b:a1:d9:d3:3e:31:46:
d4:68:ae:39:e5:d5:9d:0f:82:a0:20:b8:02:bd:c3:
22:51:23:57:4e:4b:f3:e6:39:bc:46:5b:51:41:d5:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:51:02:EA:84:22:A7:E2:99:D4:C6:94:7A:74:A5:91:BD:18:41:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/216b65ec-1074-34ec-87c8-13fbd4457b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:91:66:b2:7c:3b:9e:ed:95:d9:d8:47:28:db:38:4a:ef:b8:
d1:d7:c1:79:a7:88:0e:c0:97:11:db:7a:17:0b:a4:a7:0a:b2:
fb:23:d2:cf:ff:37:0d:6e:2e:34:96:79:0f:ae:80:d7:50:39:
ea:36:18:a6:54:ad:03:5b:08:26:9c:95:0f:54:3c:82:4f:f0:
38:2a:42:ac:86:f7:b0:ec:f0:d4:f8:4e:e8:7b:e0:e1:59:00:
ec:09:d6:7f:f9:a6:96:09:a3:07:c4:45:cc:9e:9b:6f:e6:03:
35:5e:2b:12:a3:1b:01:10:24:b3:71:f3:9b:ad:87:b9:85:25:
73:6f:29:86:a5:13:7f:f5:fd:7d:1f:f4:61:64:50:7a:ed:5d:
35:0b:4a:52:f8:df:b9:80:10:1a:0d:64:c0:b3:8e:da:ee:33:
0e:e5:f1:a4:a7:70:18:fb:b5:fb:c1:66:a7:25:d2:9e:a2:28:
72:79:5b:46:5b:22:89:11:c5:36:40:dc:f9:93:ec:4b:4d:96:
6b:f7:88:d0:d8:ad:56:fb:4f:f8:d4:4e:b2:71:e6:b9:1c:d7:
e6:db:86:cd:40:f1:e6:43:ca:94:c1:99:64:78:8a:7e:92:2b:
37:c5:43:9d:79:d0:11:b0:64:8a:95:58:c4:be:44:47:e9:41:
ec:1a:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:56 2025 by rpki-client