Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf2d336-57a1-36e4-a957-ee222a4c2f83.roa
File: 5bf2d336-57a1-36e4-a957-ee222a4c2f83.roa (raw, json)
Hash identifier: yBa5IJFk3gPuZGOpXgR+g1NXQz/3llKmHNCOY/iHFtQ=
Subject key identifier: 38:24:86:B3:DB:7C:6B:59:F6:08:EC:A4:17:9D:77:90:86:AB:E2:E6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73DFC3493B8A7C3BF4F54C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf2d336-57a1-36e4-a957-ee222a4c2f83.roa
Signing time: Fri 29 Nov 2024 13:58:27 +0000
ROA not before: Fri 29 Nov 2024 13:58:27 +0000
ROA not after: Thu 27 Feb 2025 13:58:27 +0000
asID: 36623
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:df:c3:49:3b:8a:7c:3b:f4:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:27 2024 GMT
Not After : Feb 27 13:58:27 2025 GMT
Subject: CN=289e071e-7a01-4614-b6d5-905fd5841c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:f3:5e:86:22:7c:bc:df:43:79:e7:cd:12:
f3:04:58:a1:a2:e7:16:4d:63:93:9d:0b:10:c7:5c:
26:4f:05:28:2d:4a:04:a9:3c:11:f6:40:12:33:72:
cb:fe:13:3d:3d:df:25:cb:22:49:02:f8:ff:24:60:
94:28:cc:4d:dc:47:e0:e6:71:ad:eb:8d:d9:ab:26:
40:93:29:bc:1d:5a:05:69:1d:6d:49:a1:7c:3b:74:
db:a4:c1:c0:3d:d0:13:7e:33:0b:82:20:77:db:8f:
b6:a1:dd:6e:a9:f2:4a:c7:cd:8d:4d:2d:9e:6d:98:
fd:e3:19:d1:f9:5b:3f:f9:55:99:5b:27:dc:b0:43:
70:a6:ad:6c:9d:d7:c2:7c:2c:55:0e:61:ee:78:c9:
b7:f0:44:d8:a2:43:df:51:5b:57:82:d7:b6:c7:92:
ca:bf:9b:7e:15:fa:87:f4:d1:64:b9:d2:4d:c2:90:
5b:d8:4f:53:ea:9b:ff:c2:ab:d9:e6:c2:fc:45:38:
ab:c3:47:6c:e4:5b:02:03:a5:fe:61:0e:e4:50:40:
f4:b8:ff:1e:5d:68:10:7d:de:6d:01:ec:7b:f1:5e:
dd:69:71:30:bd:01:58:ce:17:62:2e:d6:05:23:5e:
73:72:6b:63:62:e8:c5:dd:b3:87:6a:b2:dc:f9:a6:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:86:B3:DB:7C:6B:59:F6:08:EC:A4:17:9D:77:90:86:AB:E2:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf2d336-57a1-36e4-a957-ee222a4c2f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:86:d2:1f:a1:54:ad:78:ad:44:92:88:cb:8c:ee:b8:45:fb:
de:3b:7b:53:7a:25:13:0d:0f:38:fc:e3:c4:d3:fc:93:9a:d6:
8a:9c:fb:10:84:27:b0:4a:10:c4:6c:6f:f2:94:ba:19:b6:bd:
6f:7a:03:9c:68:6c:23:b8:99:40:fb:11:4d:c2:5c:65:a3:99:
f1:9a:5c:c8:ab:a6:29:b9:66:6c:d2:3c:fe:16:cb:47:f0:3d:
72:29:3d:d2:06:5a:c6:08:84:7a:e8:96:99:ce:22:77:08:bd:
55:cb:c5:2e:25:20:7b:2b:7e:ba:f3:7d:90:62:99:b2:47:b8:
12:4e:9c:d7:e6:a9:d7:05:34:06:e8:f1:1f:e9:30:ff:cc:4b:
03:c8:0b:4d:40:7b:f0:87:87:ab:76:90:8b:37:b5:3e:49:08:
9c:83:1f:26:94:93:83:df:2f:18:69:42:4f:fc:bd:2f:a3:82:
28:74:b1:9e:08:74:d7:55:b5:37:61:1c:c9:e6:61:56:4f:e8:
30:55:d7:f7:08:0a:76:f8:3f:95:72:ac:ef:9e:f5:7f:b2:9e:
d5:15:ad:b3:92:0d:95:9b:26:52:d5:84:ce:ca:f6:dc:68:d2:
03:91:52:d9:95:e7:1a:58:d4:13:1e:8e:d4:71:c4:81:a9:8d:
cc:74:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:50 2025 by rpki-client