Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa
File: 58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa (raw, json)
Hash identifier: hzo22NA0CT+czR6dbogUT/oF+Ib53Dc7jarROhxra48=
Subject key identifier: 70:24:F1:2F:D0:89:34:E4:F7:2A:E4:AD:66:67:38:B6:B3:18:54:15
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1497B3D32FE50E90B0B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396710
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:49:7b:3d:32:fe:50:e9:0b:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=b35e54ef-76f1-4c78-922b-f64e150497e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:e0:71:ce:0f:64:92:23:26:ad:02:0d:9c:
b1:71:b4:65:3b:c8:26:0f:28:97:84:5d:79:b0:f3:
41:57:ed:8c:fd:50:ac:e7:ff:a9:c0:5b:b4:71:22:
3a:e9:db:4a:bb:a4:ea:63:77:7a:a4:5b:38:56:f8:
72:e6:47:44:b1:23:ea:92:4e:64:4c:2e:d2:a1:77:
7f:c7:ac:8d:36:15:4a:20:e8:53:e7:d9:7b:43:f9:
1c:ca:24:b7:c4:33:cb:9e:e6:be:45:df:95:a8:f6:
5e:7d:f1:1e:ee:5b:32:6f:43:53:83:48:05:cb:8a:
5c:37:58:fa:7c:b1:b9:0a:ef:15:04:ce:72:50:aa:
9b:f1:56:3f:0e:cc:ae:91:ba:8f:30:20:25:d3:95:
dc:20:13:35:6d:91:7c:30:9e:fe:4a:97:b1:b9:93:
cf:20:98:7a:c8:8e:af:e1:a2:c3:e1:0c:ed:af:b1:
ae:d7:bf:92:b5:76:d6:a3:ed:a1:ca:67:f1:0e:14:
c1:74:3f:d5:ea:57:af:36:bd:52:7f:10:36:07:57:
33:3b:71:e2:0b:1c:91:03:78:a6:5d:9e:29:d5:58:
b7:30:a9:cc:7e:fb:56:0f:67:24:78:81:b4:12:be:
05:09:d3:16:1e:10:94:fc:35:7d:d2:18:53:e8:fb:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:F1:2F:D0:89:34:E4:F7:2A:E4:AD:66:67:38:B6:B3:18:54:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:16:2c:0e:69:56:a0:cd:b8:54:9a:05:88:63:20:9a:ce:4e:
8e:23:f3:3c:88:b1:94:e6:76:32:72:57:72:ee:62:28:0f:a7:
6b:2d:3a:82:6b:fa:82:5c:15:e0:f3:70:79:34:b9:ac:39:00:
9b:65:89:32:b3:b3:2e:86:98:5e:c6:17:2f:80:77:71:c1:5c:
91:9d:35:fa:18:4d:3f:10:47:e3:00:82:ae:b4:5a:fd:82:0a:
a2:28:85:1a:2a:2f:1a:38:ee:02:b5:2d:77:8e:e8:c7:0e:fe:
d6:4a:90:84:27:ab:30:4f:53:3a:fd:37:e8:2f:a8:d9:b4:3c:
0c:3c:90:4b:7a:a7:82:94:2e:7d:57:91:2e:db:33:ff:3f:c1:
69:7a:39:81:29:0b:14:61:d2:eb:7a:e8:d0:dc:e7:f5:a5:ee:
8c:1c:ea:ae:22:42:26:60:2f:3a:93:de:67:bb:43:02:01:6d:
d8:e0:27:fc:7e:f9:79:8b:be:a1:d5:6d:e3:a7:65:b4:53:c5:
53:df:5b:4b:f5:17:79:8a:d2:f1:4b:0e:09:8d:56:0c:8a:92:
63:0c:80:14:79:cb:5f:22:3a:b1:67:78:30:18:45:13:1a:3c:
e0:51:d3:5f:bf:58:8c:87:36:fa:b0:bd:32:d3:50:25:1b:3d:
f6:43:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:46 2025 by rpki-client