Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c5995c-8fdc-3e0a-88a8-714f48b79785.roa
File: 24c5995c-8fdc-3e0a-88a8-714f48b79785.roa (raw, json)
Hash identifier: 65w+aRq9o2I2qiEBE8JxmG2um4tE+VQpA1Avs5fFlU0=
Subject key identifier: 89:C8:07:AA:D6:06:CE:96:0B:B5:D6:68:9D:7B:3F:CB:DE:6F:9B:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14BDBFD1DBEE5F56E78E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c5995c-8fdc-3e0a-88a8-714f48b79785.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 21313
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4b:db:fd:1d:be:e5:f5:6e:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=5f4efaf2-0ef0-44b9-8f37-4b24ff058012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:36:01:b6:a8:f6:1e:46:e4:59:b3:eb:4b:
63:64:ee:31:c6:ac:f3:ac:0a:30:77:66:0d:37:49:
2d:b0:1a:a5:77:a2:ce:36:2d:6e:94:9a:43:bc:6d:
f2:1b:14:c3:dc:f8:b4:e3:c9:9d:b5:f7:18:7a:6d:
40:48:4c:07:a3:f7:41:c5:53:aa:28:3c:d4:fd:5c:
fe:e9:d2:8a:55:c2:e3:e0:b9:05:27:89:62:ef:44:
ba:12:00:c0:56:85:f0:2a:53:17:0c:45:35:e7:fd:
42:b9:05:ac:c5:68:07:24:34:ef:01:be:fe:ee:50:
3d:60:5b:f3:8e:12:3b:24:d1:b1:d0:23:a5:e9:f8:
65:17:46:66:7b:e9:e3:70:db:4f:38:76:ec:ca:2e:
92:ad:23:4e:07:71:af:29:29:e2:d6:85:c3:5b:a4:
93:28:a7:94:4c:7f:36:3d:d4:48:28:a2:33:34:e3:
57:c9:fc:9e:0b:a1:39:bb:8a:ba:09:ba:b3:12:0d:
62:70:af:d4:ef:b2:4b:28:3a:32:8b:94:07:bd:50:
7f:5d:79:31:c6:1a:db:44:58:43:61:ca:eb:73:81:
3c:20:8e:d8:e8:10:2a:77:c0:89:6c:68:bf:15:31:
39:45:de:d2:b2:5e:d9:c4:7f:b7:cd:b1:40:df:72:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:07:AA:D6:06:CE:96:0B:B5:D6:68:9D:7B:3F:CB:DE:6F:9B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c5995c-8fdc-3e0a-88a8-714f48b79785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:04:bc:fb:29:bd:33:e2:41:d5:b6:6f:fc:d0:b2:c3:9e:89:
63:c3:ca:1d:7f:06:99:6f:87:27:07:7f:c9:79:71:d3:e1:fa:
3c:d8:19:2a:04:e8:b7:2f:66:bf:07:23:41:39:60:04:d6:f7:
bb:86:29:db:7a:06:a6:80:10:3e:c8:73:87:fc:4d:c3:d9:83:
7b:7d:7e:8b:48:a3:06:12:88:d8:3c:91:5e:80:0c:d2:be:f7:
37:50:e5:79:4c:96:d4:8b:ae:76:76:97:cb:b1:c9:29:95:7e:
4b:8c:a8:5a:c5:98:a5:52:66:72:76:fb:73:40:99:11:22:71:
f3:3f:ce:ed:73:0e:3f:63:85:e8:b1:93:09:60:6c:93:c9:63:
13:e7:e6:ec:42:0d:b5:7b:50:3c:5d:79:4a:6c:08:b8:0d:9e:
75:aa:79:25:02:44:6c:d0:e1:48:0b:0e:d6:23:72:3a:80:46:
2b:3d:f4:60:a1:89:36:d0:03:f7:93:09:6a:3c:d9:c9:15:0c:
32:f1:fd:4a:24:13:61:0b:62:95:63:61:86:c1:22:9f:fe:b1:
ee:a8:30:0a:ec:d8:1b:cd:0e:3b:f6:7b:4c:55:d3:51:35:f7:
6a:4e:96:dd:e9:3a:53:c1:e5:a6:c4:69:20:c7:a3:7e:6e:38:
03:fd:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:04 2025 by rpki-client