Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34f69673-ceea-396e-94ad-f9de6c880e17.roa
File: 34f69673-ceea-396e-94ad-f9de6c880e17.roa (raw, json)
Hash identifier: cZSrAcwrgcl75KjD/4/WX/W/tyhCLdPRCkcCdOUV+Uo=
Subject key identifier: 54:56:83:1E:50:8C:7D:1D:DF:8B:1C:93:4B:0B:5D:DD:90:6B:5E:BD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E75779D1F10A405B47A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34f69673-ceea-396e-94ad-f9de6c880e17.roa
Signing time: Fri 29 Nov 2024 13:58:30 +0000
ROA not before: Fri 29 Nov 2024 13:58:30 +0000
ROA not after: Thu 27 Feb 2025 13:58:30 +0000
asID: 396586
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e7:57:79:d1:f1:0a:40:5b:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:30 2024 GMT
Not After : Feb 27 13:58:30 2025 GMT
Subject: CN=c7b3e03f-f178-4414-8df5-607eadd66afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:d3:91:94:ae:b0:5e:d5:08:e8:56:88:88:
09:55:c5:03:20:20:0b:51:34:39:c5:07:5c:fe:66:
ac:60:d2:81:c6:41:62:7a:17:5c:09:6c:dc:83:ac:
4c:69:c3:e5:1e:a1:99:54:90:bc:ae:7a:7f:39:53:
bb:2e:62:cc:4c:4d:48:8b:74:e5:d4:9b:13:8f:92:
d6:2c:70:41:c1:6d:52:67:bc:24:00:cf:37:45:b8:
4a:3c:06:84:58:11:0b:f2:b5:ac:21:46:07:0e:d4:
4f:32:31:de:38:e2:de:34:cd:dc:51:88:7f:ae:7d:
68:f5:43:73:c5:a9:40:99:1a:8f:29:83:af:10:7a:
ad:ba:be:01:48:18:01:cd:17:f3:b0:d1:9c:70:b4:
47:31:d3:03:74:5f:76:57:d5:c6:8b:f2:ca:28:ff:
84:a3:d0:51:77:bc:c5:3a:9a:ca:ed:20:55:e3:62:
90:b2:ac:27:df:07:62:cc:cf:bf:16:17:f4:25:49:
96:e5:09:0e:0a:04:6e:0b:39:4a:23:14:dc:8e:fa:
13:19:8e:20:0e:44:03:44:fd:9c:ff:10:d4:dd:0f:
8b:b6:e5:21:23:3f:6e:08:1a:ae:89:4c:04:02:d8:
c2:00:4b:db:fc:1f:2c:2a:f2:c4:f7:ab:eb:cc:bf:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:83:1E:50:8C:7D:1D:DF:8B:1C:93:4B:0B:5D:DD:90:6B:5E:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34f69673-ceea-396e-94ad-f9de6c880e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c4:90:89:eb:11:98:3e:92:5d:6f:7c:a5:1c:ec:d8:44:e9:
bf:ad:34:37:32:16:0f:c0:c5:27:20:d7:69:bc:2b:91:44:0f:
26:f0:1d:11:5f:b0:6f:2e:a8:09:c4:c6:36:b4:a0:21:d2:18:
73:91:fd:c7:83:9e:b9:55:66:89:85:d6:21:ff:c3:ec:c4:c7:
24:25:2c:7d:d0:64:78:cf:0c:88:5c:93:4b:54:24:af:2b:5c:
e2:1a:1d:0d:07:33:b4:1f:b9:f3:ca:74:1c:ef:16:2a:8e:a7:
e9:4f:33:36:77:2f:71:b0:5c:0c:68:9b:e9:ae:57:e1:98:1f:
42:32:a8:ca:49:d7:db:6e:31:a7:3b:5f:9b:65:3d:ec:f5:97:
10:4b:a3:99:e4:32:e9:c9:a5:d5:26:23:f1:f7:19:27:73:40:
a6:5b:44:b2:0c:81:cf:92:7e:20:aa:ca:c6:df:5d:92:91:3c:
26:e5:91:af:dd:b6:36:35:e1:05:87:7b:1c:2e:cb:70:a4:65:
00:52:8d:74:f0:a7:e3:18:65:0b:38:6c:66:e9:7d:ee:91:ff:
3b:82:99:09:60:ef:fe:50:df:e2:9d:b9:88:71:be:52:a8:bd:
a4:a7:5f:24:a8:bf:7f:6a:17:55:76:14:0b:5d:06:34:e9:be:
05:6d:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:19 2025 by rpki-client