Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fdabff0-357b-3ef2-9030-d907f257be48.roa
File: 3fdabff0-357b-3ef2-9030-d907f257be48.roa (raw, json)
Hash identifier: cnM7hCKZPo9BZ4Fp6kJCB1MINZy4jEUSLqUhcuZRc4Y=
Subject key identifier: C1:23:6D:CB:5B:27:5F:06:75:E9:0C:5A:F2:4D:09:72:89:EC:4D:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15146B5CA4C752D45FC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fdabff0-357b-3ef2-9030-d907f257be48.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396554
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:51:46:b5:ca:4c:75:2d:45:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=d0451732-b97d-4496-a590-5ef6ef7bf2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:1b:66:0c:c9:6d:c7:fe:a4:ae:c8:37:a0:
87:3c:54:49:a6:e8:28:58:f6:3a:69:6e:18:d2:33:
bd:4e:1e:24:82:22:8b:d7:ab:78:00:ef:fe:6a:b2:
c4:44:cd:41:bb:bf:93:a7:1b:e0:98:89:ef:15:c1:
29:d5:bf:7b:43:c9:99:b6:19:3e:6f:8f:ca:de:eb:
1c:6b:6a:34:27:ad:c9:18:9d:92:a5:e7:ee:84:74:
af:cb:75:eb:f1:5e:9e:b5:7c:30:cf:68:a9:07:e4:
86:ba:c5:2b:ea:58:6a:2f:af:13:7c:75:e9:e2:6b:
8e:d4:fd:f6:2b:7b:7d:0b:a6:91:8c:06:10:9e:32:
4a:d8:d5:25:23:65:69:51:a6:09:6b:4c:c2:a5:de:
d6:bc:60:2e:65:52:bc:59:45:2b:ca:97:0f:fc:c7:
01:c5:fa:c2:b3:2c:c0:e2:98:51:6d:ab:c7:ca:0f:
49:0b:98:a6:f9:73:22:21:b2:98:56:0a:8d:1d:da:
a7:c0:09:3f:74:f9:66:c0:a4:aa:27:3d:a7:83:5b:
60:74:db:8a:85:e2:bb:0c:da:da:2d:ea:d9:fe:dc:
60:dd:24:74:26:bb:84:2c:db:2e:e4:79:1f:14:d7:
ed:79:9b:2c:1b:5f:e0:f9:62:37:a7:24:ea:77:88:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:6D:CB:5B:27:5F:06:75:E9:0C:5A:F2:4D:09:72:89:EC:4D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fdabff0-357b-3ef2-9030-d907f257be48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e9:1c:54:53:96:55:e0:5b:06:cd:65:ba:26:36:8a:99:8f:
27:19:6e:c3:16:9d:a9:dd:a9:60:0a:a7:26:69:47:d6:46:70:
23:62:e7:45:c5:9b:e6:36:41:d8:2e:39:b1:a1:ee:e4:20:2f:
da:82:1a:f7:54:a7:a0:07:b1:2b:a3:71:5b:3d:72:9d:72:bc:
a5:83:eb:0b:68:d7:f5:4b:29:38:3d:c9:68:ba:c4:e5:59:ce:
eb:23:c9:c7:cc:56:ad:1e:1d:76:95:c1:25:ca:c7:f3:5d:6f:
ac:8e:9d:9a:05:86:a4:b7:94:83:7c:b9:53:72:67:ee:6b:04:
db:17:73:1d:19:35:52:8c:ce:48:9b:86:83:7b:88:d5:a8:e2:
1a:63:f2:2c:20:b2:98:b8:22:88:b0:ac:97:af:52:ac:66:d2:
b0:3b:d1:e0:6a:fc:71:29:77:5a:93:84:5f:54:d6:04:67:41:
cf:91:17:15:02:f6:b0:b8:f1:6e:30:b9:26:02:7f:83:a5:1d:
36:64:dc:8b:49:40:05:56:01:a7:a9:22:66:8c:c9:e9:0c:7e:
3d:da:28:85:0d:d4:9d:fc:05:18:02:4a:13:49:e7:16:6e:a8:
88:50:cd:74:1e:0c:3a:a7:6c:a1:74:69:5f:18:48:68:b7:9b:
93:09:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:19 2025 by rpki-client