Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa
File: 324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa (raw, json)
Hash identifier: vo3eSDeb8iWgZ+c0LezaoMrGFqNmE6wxXhiPxywG1Oc=
Subject key identifier: DB:34:7B:44:55:68:69:99:E4:6C:49:22:96:60:CC:64:50:19:3D:2F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14534BC6DFCA46752DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396551
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:45:34:bc:6d:fc:a4:67:52:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=2914f4ae-5948-4658-a646-33468b102ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:68:66:92:bb:37:be:83:45:d5:d5:49:63:
5f:4f:f0:43:b1:69:8d:4e:bb:4f:2c:c7:7a:0f:bd:
c3:54:05:de:38:4c:9f:66:74:ec:b6:57:6b:c0:15:
c4:f2:4b:56:ab:3e:42:80:3f:1d:15:a1:bf:0c:e5:
cf:5c:8e:b1:31:68:43:59:e3:50:fb:00:52:a6:5b:
d1:c1:7d:f3:0a:05:74:93:66:c4:ea:8d:7d:ae:74:
13:0e:3f:e2:c7:24:98:83:72:57:f6:c5:62:dc:52:
3b:db:1a:a3:a4:b3:3a:af:20:26:02:40:78:0d:13:
1e:e9:28:4c:15:99:2e:e1:b6:62:5f:ef:3b:69:bf:
f4:2c:5c:c1:76:be:27:de:eb:b3:c1:30:28:08:a4:
b5:4b:f5:b6:cd:b0:de:6c:6e:f0:b1:79:e4:fa:b7:
dc:a7:bd:b0:a1:ce:cf:57:eb:06:30:69:bf:18:67:
cc:de:74:07:24:02:d9:13:b3:bf:cc:6e:24:b3:e2:
62:0c:d7:bc:03:9c:86:fc:f0:25:a5:c5:69:c1:38:
69:c0:24:dd:33:b0:e3:d7:83:ff:e4:5e:cb:f6:ce:
45:9c:a9:69:0d:f5:4f:47:bd:0b:a7:97:db:f4:3c:
34:2c:45:09:61:73:7e:0d:15:dc:20:88:54:97:0a:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:34:7B:44:55:68:69:99:E4:6C:49:22:96:60:CC:64:50:19:3D:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:b2:ae:e6:d3:c6:2d:b4:d8:d8:1a:b8:1a:e8:2c:ed:d3:fa:
19:41:01:5f:2e:1a:8d:eb:4f:bc:bd:47:d7:a5:44:92:46:ed:
90:3a:95:91:d1:b1:34:8a:d0:91:e0:a4:0f:80:6d:4f:a3:37:
44:6b:cc:29:69:e8:06:46:32:9d:79:6f:11:70:95:b5:ab:26:
89:8e:66:fe:9b:8e:9b:18:9b:fe:cf:23:c6:c5:8a:70:17:31:
4e:a0:d0:05:f6:40:73:c1:3f:6b:de:47:97:43:37:93:e8:c7:
87:ab:ae:1b:d5:98:ac:96:f6:d8:14:5a:8d:a6:6e:aa:bc:36:
54:50:02:c2:30:8f:e7:78:c0:c5:e4:cd:67:55:83:58:f4:4a:
63:80:d0:ef:3e:74:8a:8b:a9:72:7e:8e:a3:fe:e9:e5:01:00:
5b:9c:f3:91:db:1f:0f:df:2f:8b:72:2e:9f:a2:73:ae:32:9a:
8e:5c:2c:4a:cc:81:c7:d8:b8:fa:9e:ec:35:6c:9c:d2:76:a5:
0c:1f:0b:cd:56:1b:8c:70:05:60:0d:fa:4a:f5:ee:0c:13:29:
81:27:6d:be:f1:b3:1c:90:78:b4:f5:32:9f:c3:27:64:83:16:
d5:5d:b6:ac:2c:1b:70:3a:73:97:d5:d8:d2:9c:a4:83:df:6c:
f8:c4:4b:f2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsUU0vG38pGdS3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MjkxNGY0YWUtNTk0OC00NjU4LWE2NDYtMzM0NjhiMTAyYWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQBoZpK7N76DRdXVSWNfT/BDsWmNTrtPLMd6
D73DVAXeOEyfZnTstldrwBXE8ktWqz5CgD8dFaG/DOXPXI6xMWhDWeNQ+wBSplvR
wX3zCgV0k2bE6o19rnQTDj/ixySYg3JX9sVi3FI72xqjpLM6ryAmAkB4DRMe6ShM
FZku4bZiX+87ab/0LFzBdr4n3uuzwTAoCKS1S/W2zbDebG7wsXnk+rfcp72woc7P
V+sGMGm/GGfM3nQHJALZE7O/zG4ks+JiDNe8A5yG/PAlpcVpwThpwCTdM7Dj14P/
5F7L9s5FnKlpDfVPR70Lp5fb9Dw0LEUJYXN+DRXcIIhUlwpbFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNs0e0RVaGmZ5GxJIpZgzGRQGT0vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI0YzhhZjctNmQzMy0z
YTZlLWI4NGYtM2NjZWM0ZGFmZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0sq7m08YttNjYGrga6Czt0/oZQQFfLhqN60+8vUfXpUSSRu2QOpWR
0bE0itCR4KQPgG1PozdEa8wpaegGRjKdeW8RcJW1qyaJjmb+m46bGJv+zyPGxYpw
FzFOoNAF9kBzwT9r3keXQzeT6MeHq64b1ZislvbYFFqNpm6qvDZUUALCMI/neMDF
5M1nVYNY9EpjgNDvPnSKi6lyfo6j/unlAQBbnPOR2x8P3y+Lci6fonOuMpqOXCxK
zIHH2Lj6nuw1bJzSdqUMHwvNVhuMcAVgDfpK9e4MEymBJ22+8bMckHi09TKfwydk
gxbVXbasLBtwOnOX1djSnKSD32z4xEvy
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:22 2025 by rpki-client