Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa
File: 2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa (raw, json)
Hash identifier: QmG5hhC+93usJGhs70wSru2iKYGFXRZcTr/sjY2BK5E=
Subject key identifier: 12:16:7E:FA:7A:A1:E0:C1:FE:F8:CD:7B:ED:79:14:08:24:02:FE:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB160CD5C0FDAEA3DD6C6C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396541
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:60:cd:5c:0f:da:ea:3d:d6:c6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=769cbbdd-3657-4bb1-b220-ce60f973afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:c8:9d:4c:c6:ca:53:b9:b1:e6:39:65:69:
ac:ed:ad:65:ca:25:5e:c3:28:bc:fa:58:03:65:82:
ec:04:2b:9f:b9:5e:0d:7c:0c:5b:9f:d3:70:2d:00:
f7:49:fc:75:a9:e8:16:d6:cc:f7:78:8a:9c:40:fb:
71:c7:41:5a:53:e8:b2:a5:d1:53:21:d3:59:d8:43:
08:cc:21:81:b2:73:6b:d9:51:c0:d2:ef:14:1e:89:
ce:74:76:45:e8:cc:76:2e:7c:69:f9:f2:5c:21:22:
d7:3e:68:c1:bc:b7:e9:1c:89:c0:08:4d:b0:ef:60:
36:02:aa:bf:80:b9:22:a4:b9:0f:df:27:8e:65:0b:
38:59:bb:6f:45:8b:5a:c1:de:7a:f6:b9:fb:1c:dd:
c8:1a:76:9c:e2:14:54:9a:3b:30:98:5c:91:4d:e1:
8f:95:2f:88:7e:0f:d1:0e:5f:f8:2a:96:32:23:e7:
62:13:1e:e3:f9:8d:f4:cd:2f:1a:50:2b:95:e1:cf:
4c:18:7e:f8:ad:56:54:b3:73:58:97:1f:79:64:5a:
72:3a:22:49:5e:e9:9e:6b:a2:50:c3:90:69:64:4d:
9c:53:36:ad:a1:a2:3c:fa:7d:88:55:8f:42:6d:5e:
e8:6d:bf:19:7a:09:73:3d:3f:43:d0:ca:19:c7:35:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:7E:FA:7A:A1:E0:C1:FE:F8:CD:7B:ED:79:14:08:24:02:FE:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:8b:f0:bf:11:33:9a:90:96:57:a7:e5:a8:1c:da:f2:48:28:
69:05:5a:2a:4b:48:77:24:15:a1:47:2b:3e:45:7c:a0:69:9a:
27:ba:00:72:86:26:14:87:12:b1:49:00:eb:92:cc:93:f8:60:
a8:68:7b:cd:2b:eb:0d:cf:59:84:6f:1d:77:0b:19:a2:f7:ca:
56:7b:ab:d0:2e:ed:79:74:73:3c:ca:d4:f7:3d:fd:19:d6:a2:
7b:ea:11:60:5c:79:20:f9:5c:0f:47:2a:8a:0c:23:4d:bd:ed:
f3:29:e0:b7:25:24:4f:8c:a8:a0:97:ef:dc:c3:a6:39:3d:ae:
50:a8:0c:22:1c:73:73:15:76:04:0f:71:89:33:0a:89:70:0e:
38:8b:71:1a:c8:ea:cf:a9:18:af:dd:8d:5a:3b:36:f8:8a:b7:
a8:ab:13:ad:7c:08:cc:4f:5f:d5:5f:8b:f4:da:bc:a1:e2:bd:
4d:76:91:45:4f:a6:a7:50:26:f9:34:76:4c:93:85:59:20:28:
d6:4f:d9:16:4e:da:12:1c:95:14:c6:3b:30:37:b4:0c:eb:a1:
7c:9a:e9:e3:e4:31:a8:86:f7:dc:36:98:79:07:db:eb:40:a1:
c2:f4:00:b9:aa:eb:17:1a:90:56:f4:91:f1:4b:de:cd:51:d9:
ec:69:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:34 2025 by rpki-client