Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa
File: 4c9999d1-b4ac-325f-9815-e7468b499fee.roa (raw, json)
Hash identifier: d1AJUjX0YKPH88ncuuC6f5jzPCA0KRNfdTHJkUaBdf0=
Subject key identifier: 77:22:8B:D2:EB:CD:A5:80:A8:CB:C6:C6:54:42:EE:40:6E:CD:6E:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15276CB029266A5738882
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396603
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:52:76:cb:02:92:66:a5:73:88:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=58c26300-7bb3-42c5-8813-82c83469631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:33:c6:01:c1:07:5b:14:f6:a1:7f:74:70:
2b:e2:7d:09:c0:00:4e:20:73:10:e2:40:f3:18:01:
44:47:c5:dc:97:2c:17:f8:e6:0a:b8:ca:a1:30:b7:
a3:90:18:6b:87:19:80:19:b8:b1:02:8c:93:5c:c7:
f2:db:8f:1c:8d:fe:da:48:39:99:46:f8:65:a6:ab:
59:63:1f:84:aa:96:33:da:01:3e:52:86:04:61:a6:
33:cb:db:d5:64:eb:ca:86:71:1a:06:57:63:6b:61:
dd:60:3c:ce:9d:4f:4e:93:8b:6e:f5:3b:1b:18:0e:
7c:58:f9:aa:51:d1:83:1c:10:29:3f:41:be:b2:4a:
88:2b:68:73:9b:d7:e8:20:82:a2:37:43:ff:9c:fb:
92:dd:76:72:cf:5d:73:2c:32:4a:c4:e9:f8:1a:d6:
29:b1:75:19:7d:35:cb:41:d0:75:26:cc:1a:9f:8c:
ad:15:a3:28:ba:1a:5a:2a:9a:5c:a7:a9:7d:30:ff:
fc:28:f6:b1:51:1e:e0:7b:85:04:b0:23:44:10:5e:
14:85:31:13:ef:7c:8b:6b:46:e6:99:35:e7:c9:fe:
58:ba:54:89:38:50:52:2d:c6:25:69:a1:5e:f0:08:
56:01:9a:fe:da:4a:57:7e:af:78:60:3a:5b:39:b4:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:8B:D2:EB:CD:A5:80:A8:CB:C6:C6:54:42:EE:40:6E:CD:6E:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9999d1-b4ac-325f-9815-e7468b499fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:8b:77:6b:96:43:02:90:c0:15:b1:27:cf:d9:44:98:97:06:
cf:55:e2:32:8d:e2:00:25:28:75:15:81:76:f1:cd:91:82:6d:
1c:ee:88:dd:c5:6d:98:60:d1:34:f8:35:6b:9b:c9:20:f3:7e:
24:56:96:d7:d8:ce:ae:bc:30:68:b8:c3:a0:dc:d6:db:96:3c:
86:e2:fd:88:d5:11:e0:1b:ac:8a:3d:ab:71:6b:87:c2:16:62:
5e:09:02:2e:29:ff:60:f7:bb:06:6c:e0:8a:bf:76:cf:de:42:
65:6f:e7:8c:fa:b7:c2:c2:39:f2:3d:91:9f:60:5d:8d:6b:84:
96:48:cf:e1:cc:8e:da:a4:48:78:78:a8:1d:c1:7d:8b:29:c8:
96:1c:8f:8e:0a:6b:8b:31:5c:58:0d:fd:c4:55:2a:01:dc:c6:
99:ac:b3:f1:5f:37:19:20:9c:db:54:95:63:88:06:1d:96:a3:
71:0e:3f:6c:11:c2:f4:a8:41:9b:7c:b8:f8:b1:fe:51:49:b0:
01:01:29:37:08:7c:83:ce:e3:9e:ee:bb:3e:3c:74:db:01:a9:
7b:44:28:21:92:21:15:29:f4:c8:0f:bc:1e:0e:0b:f7:ef:4f:
0d:12:6b:80:b5:47:82:bd:9e:2b:32:f8:94:1f:4c:a4:d0:46:
80:30:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:27 2025 by rpki-client