Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa
File: 40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa (raw, json)
Hash identifier: ita5PFuydYdfgef5d3vvD0cl9gZDo/h9kVjCpuiYyQg=
Subject key identifier: C9:44:99:5B:5B:49:B8:EC:9E:4F:9A:3C:CA:B7:56:B8:38:2D:64:F1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494B641E8A71AF8A8C74E1DCE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 0
IP address blocks: 199.7.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1e:8a:71:af:8a:8c:74:e1:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=005d94b9-0ead-4ecd-a744-b08781d19747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:02:d1:5a:90:c1:d4:35:4b:a8:13:c2:cf:
a3:45:71:c3:24:fa:19:9f:3f:17:66:fb:08:2d:7c:
33:53:ce:ed:f3:fd:dc:79:a3:23:87:59:c2:fd:70:
d2:f8:ee:60:a9:03:18:f4:5b:0a:bb:56:27:e8:90:
9f:76:9b:58:af:93:e6:b7:a9:70:c5:ce:95:9f:48:
4d:e5:38:9d:ae:bd:4d:52:c0:a6:38:38:b4:d4:27:
41:b1:37:8b:6c:0f:a1:f6:52:56:38:4d:23:d4:90:
b9:90:03:00:ab:59:ec:2c:58:f8:ce:68:e6:9d:52:
9e:b7:1d:93:50:cd:56:0b:80:bd:99:b8:c9:09:75:
ff:7b:6a:53:79:9d:6e:c8:94:ca:d4:44:20:b8:e7:
fe:a2:5c:67:a5:b5:87:5c:58:96:2d:87:a6:80:e8:
b7:bd:4c:72:ef:01:58:42:d9:47:fc:da:97:94:2a:
ad:f1:13:95:16:9a:cf:74:7d:92:e6:44:55:3f:c7:
18:af:32:bc:07:69:16:fb:4e:a5:c6:d2:6a:71:ab:
1e:79:4d:03:6a:12:0b:4f:1c:70:3b:59:78:4e:fc:
77:94:37:ef:70:df:87:81:71:0e:36:e8:6f:40:90:
fb:e3:80:f1:4a:ea:4c:10:41:96:74:51:6c:a6:16:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:99:5B:5B:49:B8:EC:9E:4F:9A:3C:CA:B7:56:B8:38:2D:64:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:da:66:d4:95:ac:a2:59:f4:29:81:4d:9a:b0:2f:97:e1:41:
bb:a4:d1:06:cd:22:1f:1a:c4:f6:7c:f7:6b:a7:d1:8b:ca:4b:
e9:f9:c1:41:da:76:97:1c:e0:0c:fa:c0:09:98:22:b8:cc:f0:
79:1a:5e:3e:54:8b:bb:ed:b0:91:de:97:7c:e8:fc:47:44:d8:
29:fd:00:67:a6:90:91:89:e5:b9:a3:ec:f7:92:eb:26:6e:14:
03:70:3f:c1:8a:aa:7c:09:ed:e0:87:db:a7:77:19:ac:36:f5:
a7:62:98:9e:fb:16:b4:04:59:d1:dc:e1:16:2f:d7:d0:56:bc:
fa:7f:3e:9b:b6:dd:ba:80:f0:ca:52:6b:2f:12:9f:35:93:71:
12:c1:38:2f:07:f3:14:b9:81:b7:fd:07:39:c1:74:1d:cf:38:
bf:19:88:e3:19:32:af:91:73:9e:ff:98:42:3b:fb:fe:5f:c6:
c9:f4:7f:fd:43:2c:44:a8:31:2a:67:8e:a1:c4:31:4a:dc:6b:
f3:41:98:52:4b:04:a3:ef:5f:2c:61:1b:2b:48:5a:45:27:36:
0d:58:b4:76:6d:c8:81:03:bc:27:38:d6:d5:a4:6f:ac:a6:67:
57:fb:47:7d:4d:fa:e2:83:31:6c:72:b5:4d:dd:1b:7d:a6:b7:
e3:8a:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:46 2025 by rpki-client