Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa
File: 3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa (raw, json)
Hash identifier: 3bVGKCiusT3rKTvSZd4jFegwtvNZ1qUvPhQlDbl5tcc=
Subject key identifier: D6:3D:5F:2E:33:91:E2:EB:94:92:44:89:39:BA:44:C4:EC:5C:C4:50
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494B641E5E92AF6627C976B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 0
IP address blocks: 199.7.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1e:5e:92:af:66:27:c9:76:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=8d624861-42f9-4c89-96a3-25f6e70a1593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:68:93:8e:cc:0c:75:aa:7b:5b:1b:76:d9:f4:
15:27:df:38:35:fb:ce:c7:3d:02:ef:08:0b:82:51:
cc:41:e9:9a:a6:c1:07:87:85:03:0e:0c:21:60:2d:
9b:94:47:77:31:9c:e9:4f:cc:36:4c:d4:27:34:16:
5c:d0:f1:65:0d:5f:a2:73:86:ec:34:64:d7:51:f0:
9c:1c:52:91:92:4f:5b:d8:1b:71:cb:a6:bd:5b:47:
70:e4:a4:b8:4d:f6:85:19:a0:c2:dc:f2:7e:ad:8e:
83:1e:d4:a9:0c:72:fa:cb:ab:ec:08:cd:a0:4c:39:
ff:74:78:ff:6d:d6:1c:bb:cd:46:29:6d:a3:45:34:
58:c9:37:c7:1d:33:19:27:c6:ce:57:01:2a:06:80:
04:aa:c7:b1:cf:cb:a7:25:71:a8:3d:f6:93:90:57:
67:fd:03:93:97:93:97:bb:8f:c8:b6:09:b5:55:bb:
44:97:68:c5:6d:7e:8c:6f:24:d0:d4:80:87:d7:80:
40:90:62:a8:0d:67:39:08:9f:61:24:08:f4:1b:c7:
cb:18:28:2b:3e:20:2c:9c:02:71:bc:20:bc:6d:e5:
eb:6e:0c:80:d1:72:48:09:e6:3c:90:09:60:86:04:
1d:55:8d:9d:73:a3:3b:96:7d:b4:18:08:9f:c7:89:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:5F:2E:33:91:E2:EB:94:92:44:89:39:BA:44:C4:EC:5C:C4:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ec4675b-c032-3663-8ba7-b236e2fb82cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:3d:1e:22:57:15:cc:9c:52:f6:32:c6:b8:c3:ac:59:7d:e6:
b5:ed:f8:18:26:0a:c2:ae:d4:56:fc:07:d4:96:29:ee:15:6e:
92:83:fd:57:22:aa:86:3e:d2:8d:5f:a3:41:90:64:07:b1:41:
72:01:b6:d2:da:67:9b:0b:b5:95:43:e6:c0:e8:e0:5c:f1:23:
41:28:44:7a:bd:ae:60:a8:6f:75:1c:ad:5e:ab:cd:a8:c7:83:
72:9f:9e:b3:9b:91:97:e9:e3:b8:90:bc:9c:c4:08:dd:78:af:
2c:21:3d:e5:c9:e9:f2:62:23:5a:3f:e5:d0:52:49:ac:4e:30:
e5:3a:c5:3c:89:9d:27:33:bf:8e:3b:b1:4e:ca:a9:0b:49:a3:
62:44:c9:99:f2:3d:03:48:f8:a4:c6:2c:2f:09:fb:52:0a:70:
1c:5b:d3:6b:72:b4:82:14:59:30:09:c1:91:13:e4:f9:55:a6:
4d:a5:23:e7:85:15:35:0d:a1:b3:a1:86:ee:5f:33:69:24:10:
bd:3d:19:0e:04:b5:3c:f0:6c:11:a5:3a:3f:c1:4e:d8:93:a3:
04:3a:17:28:31:e3:0e:6b:27:26:48:4f:29:25:d0:dc:69:e1:
c7:1f:63:13:d4:da:c8:8f:a2:e0:35:a9:b3:83:da:9b:5b:af:
03:2f:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:34 2025 by rpki-client