Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa
File: 4050cd37-50dd-3734-94b9-05180dcca1b1.roa (raw, json)
Hash identifier: 41AvMibhzifnFLJrs5WLvv3CkNrPWYQHrh584dqKLyI=
Subject key identifier: D2:E4:AD:0F:54:26:F6:78:00:45:0E:95:CD:0A:97:34:C8:80:C5:86
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB148ED379803966D207D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396555
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:48:ed:37:98:03:96:6d:20:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=661d5c9d-0cef-4bea-a7ee-eb0d45515431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:9f:f2:c3:98:1b:ba:05:65:05:44:d2:ea:
f6:e6:da:e2:73:94:47:c4:84:cc:65:ae:3b:d9:f1:
81:93:cc:fd:5e:6f:e0:cb:d5:f9:f9:0f:8f:41:d4:
06:75:07:ee:27:d8:ac:3d:c0:58:b7:81:dc:72:b0:
f4:4e:02:4c:fb:eb:d6:1e:6d:3e:6d:9e:fc:f4:b0:
b0:89:0a:2b:86:93:c2:26:1c:77:34:2a:7a:2d:2b:
93:3e:3f:82:ad:ad:da:ac:52:e3:f1:44:2c:8e:0f:
d4:2e:b3:eb:ff:71:51:40:2e:35:ef:ad:47:40:ae:
8c:21:a9:93:24:c0:de:a9:51:2d:9f:13:14:e8:2c:
55:7c:ba:7c:ff:16:7d:99:dc:5e:d8:9f:96:76:d0:
a6:99:08:31:4c:dd:50:1b:43:40:da:58:85:d2:05:
95:78:79:13:4b:74:12:9a:f2:5e:51:a2:22:d3:cb:
a2:78:42:6d:d4:ce:b7:d6:65:3d:0a:cb:b4:82:fe:
c7:94:fc:5a:c0:f1:95:9c:1a:29:ce:bc:8c:a2:3a:
da:b0:ec:51:ad:57:15:76:8c:c7:71:98:9d:33:61:
e3:9d:12:17:6c:da:33:b2:9e:e9:b3:97:9d:d8:19:
a2:2f:5e:c6:0d:3d:26:be:5e:56:15:47:d4:60:5c:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:AD:0F:54:26:F6:78:00:45:0E:95:CD:0A:97:34:C8:80:C5:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c2:d9:9c:85:ce:b4:e8:10:b5:16:97:0a:35:41:d1:00:7e:
03:6a:91:b4:a9:76:b9:2f:fa:7b:7d:93:83:58:2c:26:ac:59:
f8:5c:68:2a:12:ae:a2:cd:8e:0b:cd:91:ef:93:f1:56:6a:68:
28:c1:ca:ca:2f:06:14:70:e8:3b:9e:f8:ab:7c:94:36:f7:f1:
cb:df:a9:23:a1:48:90:61:fb:31:e3:c4:ab:a9:b5:db:23:48:
0d:de:0d:bd:66:b1:14:fa:60:77:64:0d:a7:2d:b8:72:6c:55:
ec:32:f2:3e:23:22:5b:76:db:aa:7b:b3:bb:89:a4:4d:ab:b9:
fe:6a:bf:ea:48:d2:9e:55:1a:0d:0b:4d:82:88:91:60:5c:cf:
cb:33:cb:9c:f9:61:65:c5:77:b7:7a:b2:18:5e:a7:69:9f:3a:
28:e1:ab:ae:63:33:e5:09:6b:ad:c1:cf:5d:c2:81:f5:78:31:
da:6d:7a:a1:a4:f9:46:d1:1c:1a:bc:68:cb:7f:e5:bb:10:f4:
0a:79:3d:ad:67:d0:dd:8e:43:8d:cb:7b:56:bc:84:7c:77:20:
2a:07:93:a6:ed:bc:2a:31:1d:d6:11:81:9a:e8:ab:05:86:f5:
d4:71:a8:8f:3b:67:99:5c:8f:8b:b1:02:6b:cf:78:23:94:8f:
24:47:0b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:06 2025 by rpki-client