Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34691c49-a338-36f9-b289-f73d59945cb4.roa
File: 34691c49-a338-36f9-b289-f73d59945cb4.roa (raw, json)
Hash identifier: /1Q1QrKJjh96eZiCPTZBrCPeKfKCvv336CsvtmnzwS4=
Subject key identifier: 10:08:11:80:AF:2A:31:87:9A:50:2D:CE:BD:5B:8B:80:37:3B:3C:D1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494CC949A73600FE2F5B47C240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34691c49-a338-36f9-b289-f73d59945cb4.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 199.7.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:49:a7:36:00:fe:2f:5b:47:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=9744545b-8405-4697-bd7e-18743e7a536a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:e0:55:e5:3d:e7:1d:85:50:9a:91:8e:04:
bd:4c:07:66:9a:c5:b0:35:12:d3:b4:3a:af:3c:13:
88:0a:6c:4c:ec:0a:24:51:8d:52:c5:b8:07:5a:a8:
c2:12:fe:b5:67:25:d1:de:86:7d:ef:82:9f:2f:ce:
8f:db:b4:f7:80:d9:f7:12:ed:d2:b6:40:ab:a0:d0:
48:81:0a:af:30:a7:52:d7:1f:cf:45:a7:5f:f5:d8:
b0:ef:1a:73:b7:2f:0c:f2:50:7a:b1:02:df:8f:3b:
ea:a9:f3:8d:9c:66:75:30:b8:b5:a4:61:ac:79:c5:
09:8c:3e:f8:56:5b:d2:b6:83:d1:9f:74:5c:dd:9c:
88:4a:f3:57:97:e5:15:a3:16:14:b6:23:59:1d:0d:
c3:81:ea:bd:d0:e0:bd:2a:e0:b2:64:09:0d:e9:63:
fd:79:ca:01:13:18:79:b1:cf:3e:53:d5:f9:4c:de:
3a:cd:6a:7b:88:f6:9e:38:50:63:8c:7c:43:3c:ec:
6c:b2:d7:97:5d:96:cd:ff:e0:d0:34:ef:9f:9f:9a:
89:68:a8:df:9d:40:80:47:47:96:22:49:97:c9:e6:
67:3c:74:3c:ea:95:22:a4:af:57:29:0b:0e:74:cf:
05:15:f7:a0:74:21:c4:af:20:20:ee:41:a1:57:4b:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:08:11:80:AF:2A:31:87:9A:50:2D:CE:BD:5B:8B:80:37:3B:3C:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34691c49-a338-36f9-b289-f73d59945cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:52:d4:c7:0d:d7:1d:46:52:92:04:2c:48:6b:ed:28:3d:9b:
a2:e7:86:9a:ac:ee:4e:ba:bb:ed:29:d1:d3:d2:73:73:a6:83:
db:83:ed:0f:1d:cc:6b:fc:4f:70:c3:dd:01:b4:c0:c4:25:c5:
4d:4b:89:22:35:83:07:43:48:91:6c:60:fd:d0:db:a5:c3:86:
bc:6e:a7:cc:0e:52:f2:66:d1:00:cc:9d:e6:e1:81:fb:2b:0e:
58:72:eb:b2:c7:cb:e0:57:84:05:88:7b:dd:d2:14:82:90:33:
76:b0:62:35:d7:e1:6e:2d:ba:d7:ba:cb:9b:83:2b:58:73:7f:
01:58:b6:d6:67:5e:37:10:05:cc:a0:30:2f:a9:b7:2b:d7:db:
ea:bf:0a:a5:2c:a7:55:45:c0:a0:b8:81:8f:ce:67:98:98:01:
88:a5:8b:ae:6d:f5:4b:70:7e:82:74:a0:d9:cc:b9:e2:db:2b:
ab:80:e0:10:36:99:03:f3:6f:b1:a3:5e:92:ef:64:ce:62:29:
98:4c:40:44:74:38:44:20:0f:55:b5:8d:f3:b0:e4:8d:d8:03:
f3:25:af:59:72:70:00:26:ad:ed:26:dc:f3:b2:5e:4a:6a:2b:
d6:e4:18:d2:8c:3d:fc:ec:12:2b:52:57:26:52:fa:f4:20:87:
46:b8:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:24 2025 by rpki-client