Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa
File: 2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa (raw, json)
Hash identifier: UtgzWl29w0ui7pnFJAm99oyRpEl8ZF2MTwCiOYhwz1Y=
Subject key identifier: 0A:FB:16:41:5D:DE:6E:E2:AB:A7:5D:47:F5:09:00:43:C1:C8:68:1B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB16282574A16AEF1321E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396827
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:62:82:57:4a:16:ae:f1:32:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=577ee5a2-5d7e-47fc-95b2-aee5c5dfc32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:f0:48:a6:fa:c2:f5:74:a2:3e:69:b6:ad:
21:44:95:0b:82:26:ee:53:27:3a:bc:10:c0:c4:5b:
b1:7f:42:80:75:9d:bc:87:0a:be:dd:e3:c6:33:5b:
ff:80:d9:0c:80:b7:5e:97:15:6f:c5:8e:ae:5f:14:
c5:3d:1e:af:74:f1:d3:43:bd:21:61:f4:10:c2:9d:
6f:3b:3d:3d:ce:df:88:ff:45:c9:a3:a3:55:a9:6b:
e9:83:eb:7f:6a:5f:fb:59:de:c3:24:de:5f:1d:df:
31:d4:8e:34:12:6a:4c:dc:73:65:42:b7:99:50:7c:
a8:0d:96:80:9f:1e:f8:c0:a6:52:8c:63:b2:8e:a1:
ac:01:c5:91:09:97:53:e6:de:35:ba:30:30:78:db:
de:5a:ba:df:27:30:bc:6e:10:47:2b:ca:08:2b:52:
ff:49:e8:d4:bc:81:1c:3a:cd:97:fd:53:d2:d9:61:
76:18:18:d0:55:65:6e:b7:0e:9c:5f:59:7a:a8:e1:
02:73:55:cc:e5:8a:14:0f:24:b0:0d:ac:06:3a:8e:
e4:33:e9:d7:43:7f:b6:7d:4c:a5:9e:ee:52:4e:71:
7e:62:ef:bd:db:50:7a:14:9e:a7:dc:56:ba:55:ee:
98:e9:f0:07:65:c9:57:99:24:92:03:fe:56:12:d5:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:16:41:5D:DE:6E:E2:AB:A7:5D:47:F5:09:00:43:C1:C8:68:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:bf:e0:53:b1:1c:53:12:ea:56:69:a1:2c:e9:b9:60:c7:fc:
b5:38:46:46:16:37:06:b2:02:61:e6:ce:d6:db:7d:42:ee:33:
a9:3e:be:aa:28:21:5d:45:44:24:5f:ed:af:77:f7:db:2c:0b:
d1:e8:0a:d9:3d:b5:c6:29:d1:20:e7:ca:aa:41:ed:f6:47:7c:
e6:a3:d0:3e:c2:18:4c:f8:f4:31:97:17:56:b3:7b:c6:7b:2a:
28:0d:ee:e1:df:1c:14:af:30:5b:40:20:c1:7a:2d:a5:98:8d:
b2:50:e4:b3:4a:1e:b0:3f:46:0f:2e:c7:01:9d:38:61:21:8d:
87:83:2e:93:4b:44:ed:ff:27:99:97:0a:4f:98:db:57:73:7b:
70:ec:ca:22:3b:00:97:51:6f:36:5a:fc:1e:3e:63:cd:f3:9a:
fa:b2:8b:72:ad:ee:c5:d0:74:52:3b:db:bc:8a:6c:81:02:97:
de:bb:35:09:df:be:3a:3a:e0:be:03:1a:87:1f:bf:b5:99:c1:
e3:65:90:64:48:64:02:de:77:42:a2:55:1d:99:3c:79:99:06:
71:84:7e:39:91:7e:5f:41:58:cd:6b:7e:3d:a5:bc:22:4c:eb:
77:ff:08:16:d6:af:79:72:da:77:7a:27:fa:8d:ac:97:c6:4f:
67:4e:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:11 2025 by rpki-client