Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54de2eba-7777-39e4-b791-23015475fa5d.roa
File: 54de2eba-7777-39e4-b791-23015475fa5d.roa (raw, json)
Hash identifier: o9stQDL0/WAljN4Bx/sqUweD1tC5Q7gwm/tjLdwocfU=
Subject key identifier: 4B:85:9B:2E:C1:92:07:71:A7:13:63:56:69:8F:FD:74:5C:34:36:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB149C09A446451AC13E4E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54de2eba-7777-39e4-b791-23015475fa5d.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 397203
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:49:c0:9a:44:64:51:ac:13:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=171477f0-3b15-415d-92a1-c67ef0f4cb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:97:f4:bf:5f:9a:a5:77:f1:7d:01:8a:41:
4d:be:ad:67:14:70:99:b6:cc:13:43:d3:27:91:25:
9d:27:8e:26:57:83:c4:e4:1c:3c:c7:c3:b4:a8:db:
5a:e3:cb:19:4f:30:ad:7b:fe:b5:62:83:c5:3d:90:
6a:64:32:d2:39:93:6f:00:5f:49:09:f6:dc:47:69:
e2:e5:58:b8:0c:dd:58:3b:9a:2b:cb:a8:11:fe:05:
c8:59:5a:08:6f:20:fd:6c:7b:b0:31:72:da:8f:83:
76:f4:5e:60:a3:1f:5b:c6:1b:80:94:9a:dc:7d:b2:
e2:3e:ce:d2:65:48:ab:68:08:5c:da:ee:d6:db:92:
c4:a1:9f:51:aa:66:4b:90:57:87:03:b7:54:92:5f:
17:64:13:49:0a:96:22:ff:ea:23:7e:ad:89:6f:a3:
dd:88:31:75:b7:21:59:a0:85:7e:ad:a4:65:23:06:
a6:22:0e:9c:b9:2d:84:aa:b0:88:98:39:52:dc:73:
e2:56:fa:a2:f5:e3:a9:cf:c2:01:38:df:ac:37:44:
a1:7d:c4:71:80:40:6a:57:de:69:a7:f4:43:d1:82:
07:e0:76:58:a9:b1:e6:eb:4d:37:b5:f3:93:df:c9:
44:d2:5c:10:31:63:23:44:79:87:8d:72:2b:4e:72:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:9B:2E:C1:92:07:71:A7:13:63:56:69:8F:FD:74:5C:34:36:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54de2eba-7777-39e4-b791-23015475fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:4e:b3:6a:f6:44:a3:37:8e:82:92:ce:b4:ee:b3:39:18:ac:
43:b6:cf:57:62:11:f0:ef:5e:cc:4a:02:5e:02:18:92:10:4d:
05:80:fa:66:10:5a:7d:ad:5d:01:cf:4c:f3:d0:5b:87:fb:55:
58:fe:ee:a7:b0:30:d1:51:8f:24:20:cb:b0:03:31:05:9f:c4:
86:07:d9:03:87:b5:e7:07:73:9e:e1:38:21:61:4a:10:29:f6:
b4:aa:c9:17:e5:ec:50:ed:ed:8b:fd:e6:15:46:6d:0a:d8:45:
9c:0a:5d:ef:42:81:b5:39:5d:b7:aa:27:1c:e6:20:68:25:d7:
f8:fb:40:6c:56:15:4f:fc:c3:fb:ef:d6:ba:08:10:b1:47:41:
bf:5c:d5:f6:81:ea:c0:58:c4:bf:71:94:a7:07:18:6c:39:e8:
e9:cc:6e:63:bd:bb:01:de:4f:7c:3e:e3:86:d3:a2:6b:30:94:
ae:2b:8b:6f:93:db:4f:4b:f2:ed:bb:1f:11:29:01:d0:ca:3b:
38:3c:cb:ff:15:04:ef:28:73:e0:32:1c:6c:c8:35:5b:86:8a:
ba:d3:fc:3e:9f:9a:36:a9:b2:75:32:e7:3d:6b:30:d3:1b:ec:
e8:ec:6d:9e:dd:ce:ac:60:c1:38:f2:66:40:bd:a0:5d:9d:7a:
2f:47:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:24 2025 by rpki-client