Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ee3775-a2f9-370d-a777-d66bfbee9201.roa
File: 59ee3775-a2f9-370d-a777-d66bfbee9201.roa (raw, json)
Hash identifier: co1iZNDQ3bz0wayvIeGFshnbJ4bKHE730Sj5LhmCWBk=
Subject key identifier: 68:4F:BF:C8:77:E6:38:BB:F7:04:67:09:7A:61:64:CA:C7:2C:95:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15FACFEE1710A43F8D200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ee3775-a2f9-370d-a777-d66bfbee9201.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 397204
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5f:ac:fe:e1:71:0a:43:f8:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=7f16eacb-58c9-46fe-8fa4-ac5f76bb1230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:8a:3f:1c:a5:be:12:2f:64:ea:b2:ec:13:
bc:b6:eb:b5:95:8c:3b:0c:b8:57:a1:99:d0:42:a8:
b4:d6:8c:87:d8:c2:65:e8:c3:8d:5a:35:14:3b:85:
37:41:5a:cc:65:0c:3b:d5:9a:ed:8d:12:5c:18:cf:
d5:33:15:20:f0:7e:72:77:e7:e1:88:7c:2d:eb:f3:
26:1f:58:5f:a8:37:a6:c1:eb:ec:86:82:9a:68:37:
d0:65:03:d4:55:9a:e9:d2:73:85:1f:37:ae:c7:2f:
0c:3c:36:44:ad:35:b7:30:ad:80:d0:c7:63:8e:49:
a7:bc:4a:a5:ff:30:b9:d2:1f:43:e3:b5:45:f6:f9:
0f:fd:27:8e:9d:e5:64:ee:3f:f6:a2:f2:58:62:4a:
83:e1:f0:2b:d4:2d:b8:42:1c:7a:0a:27:12:11:89:
6b:bf:27:f5:df:97:a6:61:bd:db:d7:e9:0f:f3:63:
a5:e3:55:57:e5:29:ea:3d:a1:2c:9c:a9:7d:a0:8c:
87:70:35:1b:56:ca:9d:71:24:8d:14:b8:1a:c9:1e:
11:52:97:c1:eb:ca:c6:f1:59:ba:e3:14:38:47:78:
c4:f8:5e:89:50:93:ac:9b:4f:34:3b:0a:b2:cb:17:
93:b6:62:e9:c2:c4:92:ad:2f:7a:9e:ac:37:a2:d7:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4F:BF:C8:77:E6:38:BB:F7:04:67:09:7A:61:64:CA:C7:2C:95:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ee3775-a2f9-370d-a777-d66bfbee9201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:c8:28:ff:b7:cf:3b:d6:74:ee:66:1a:da:fd:78:90:4a:3e:
38:21:88:2e:1d:f2:c4:e0:c9:d8:e0:1d:2f:ad:6f:db:4d:78:
c5:12:7a:28:cb:c1:49:19:bd:9b:32:02:f7:c8:36:6e:02:44:
15:af:e3:a6:a2:48:01:76:56:7a:fd:96:34:e2:1f:11:52:08:
81:6c:12:c3:58:0e:6e:ca:59:e6:45:73:4a:08:11:a5:3d:c9:
e4:01:83:3a:8f:41:b4:ee:30:34:b0:5d:b9:da:13:67:6f:f0:
64:26:ff:63:ae:90:34:be:04:45:0a:19:17:f9:c3:3c:de:a4:
b7:31:89:65:f3:e5:63:ce:0d:bb:a0:07:fd:dc:97:89:f4:4d:
f6:a6:2e:bc:6e:f6:5f:e0:71:e2:cd:3f:6d:a8:e8:b6:43:90:
28:d1:1d:2e:5f:f2:d5:43:e0:f8:d2:c9:4e:a3:22:33:45:f6:
50:20:db:85:cc:62:6d:14:0c:36:2d:b0:8d:bd:cb:58:20:b8:
fb:16:ce:79:62:2a:6b:d4:f0:e5:a4:d4:9b:24:79:be:17:0a:
1b:44:6a:9a:c2:24:4b:d0:cd:5b:b4:c0:e1:f2:37:53:ff:7e:
c1:09:a9:8c:13:36:59:87:29:c0:f3:79:fb:5a:9b:fa:38:31:
3b:aa:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:54 2025 by rpki-client