Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603fff42-1e9c-36ef-9996-f7651cb4f853.roa
File: 603fff42-1e9c-36ef-9996-f7651cb4f853.roa (raw, json)
Hash identifier: ehKrQROnT0MNZm/w0NTOTvsJUz03D/31vQ7ecMmUdG4=
Subject key identifier: E2:51:DF:D2:F5:88:96:66:4C:DB:9D:EF:29:7C:0D:A8:ED:2A:35:59
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15AC4F525DD6E3661F600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603fff42-1e9c-36ef-9996-f7651cb4f853.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 397202
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5a:c4:f5:25:dd:6e:36:61:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=0d5ee283-2b9c-4453-8312-74b2db4dbbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:b2:95:e8:02:85:67:02:98:a8:ed:0d:bd:
92:db:1f:84:91:08:10:8f:b7:79:6b:da:bc:d7:91:
ed:b8:d0:8f:0f:68:93:77:16:c8:55:3d:0e:94:c3:
f0:56:1b:8f:07:4d:79:2b:c5:fa:84:ec:34:71:b3:
fb:61:72:6c:e7:ea:4b:b0:6a:29:c2:9e:9f:b6:be:
f4:06:3e:89:0c:8c:4e:61:78:0e:01:e0:7d:12:f0:
68:e9:26:00:d1:ab:b8:ff:29:08:8f:e4:8d:15:63:
68:17:4e:94:02:07:5c:67:8f:17:21:93:66:ae:63:
cf:86:e6:5a:16:04:f0:c9:37:14:66:22:b9:12:24:
22:24:02:62:8b:3e:81:08:6a:7c:8e:fa:48:dc:13:
30:88:53:f9:38:67:26:11:70:d2:7f:3f:11:96:ff:
9b:b0:67:db:29:ee:a7:5f:5e:ed:01:97:68:22:e1:
ee:69:48:e4:ae:83:77:89:d8:3b:a7:dd:7e:95:93:
19:c4:09:5d:ef:b2:64:df:2b:65:47:3c:5a:a1:7b:
22:5a:3b:e2:f0:a1:a6:61:6c:83:8d:82:a3:8a:89:
97:28:b4:3a:7e:3c:6d:89:52:93:38:9c:fc:30:7e:
7f:75:e8:8d:a2:44:39:7f:72:14:0e:d5:3f:1d:ce:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:DF:D2:F5:88:96:66:4C:DB:9D:EF:29:7C:0D:A8:ED:2A:35:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603fff42-1e9c-36ef-9996-f7651cb4f853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:40:02:62:1d:ae:82:c7:33:a0:ac:fb:53:7d:3b:4a:10:0a:
27:3b:56:9b:32:81:2a:96:e7:28:ec:55:ca:14:de:b9:47:bd:
92:2c:97:b7:a3:f7:9d:75:ec:a5:78:9c:81:49:bf:35:fb:ab:
2d:8e:ed:47:ea:31:6b:b4:ba:d4:40:20:e8:ff:d0:fe:b5:61:
b6:17:80:e0:ee:b0:2a:fa:f5:46:a3:5f:37:3e:70:13:b2:9c:
93:0d:c4:53:a1:03:6b:b8:1e:5d:d0:d5:40:dc:31:4d:be:5e:
15:d7:71:27:4c:c5:d7:5b:ca:28:01:40:e4:91:aa:53:9a:42:
bd:d4:44:2c:3b:60:53:75:75:de:2b:2a:4b:e3:5c:e1:c6:c6:
b7:ab:23:f6:5c:b2:4a:dd:6c:d8:b2:25:74:06:96:49:e8:4f:
91:e2:e4:57:fb:14:b4:ea:48:7b:60:ca:42:e0:8d:22:fc:f8:
4b:7b:55:ba:63:95:79:e4:8a:86:46:2f:0d:c9:78:63:44:11:
41:67:2b:62:1d:4b:23:fe:65:fb:64:d9:6f:9d:f5:8c:6f:08:
be:55:6a:48:c3:c6:41:86:2a:61:6a:13:71:49:c0:69:87:63:
06:fb:4c:3e:71:ca:53:7a:6e:ee:cf:58:7c:52:28:53:bb:1b:
f6:20:25:e8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsVrE9SXdbjZh9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MGQ1ZWUyODMtMmI5Yy00NDUzLTgzMTItNzRiMmRiNGRiYmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjWylegChWcCmKjtDb2S2x+EkQgQj7d5a9q8
15HtuNCPD2iTdxbIVT0OlMPwVhuPB015K8X6hOw0cbP7YXJs5+pLsGopwp6ftr70
Bj6JDIxOYXgOAeB9EvBo6SYA0au4/ykIj+SNFWNoF06UAgdcZ48XIZNmrmPPhuZa
FgTwyTcUZiK5EiQiJAJiiz6BCGp8jvpI3BMwiFP5OGcmEXDSfz8Rlv+bsGfbKe6n
X17tAZdoIuHuaUjkroN3idg7p91+lZMZxAld77Jk3ytlRzxaoXsiWjvi8KGmYWyD
jYKjiomXKLQ6fjxtiVKTOJz8MH5/deiNokQ5f3IUDtU/Hc59PwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOJR39L1iJZmTNud7yl8DajtKjVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjAzZmZmNDItMWU5Yy0z
NmVmLTk5OTYtZjc2NTFjYjRmODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAUQAJiHa6CxzOgrPtTfTtKEAonO1abMoEqluco7FXKFN65R72SLJe3
o/eddeyleJyBSb81+6stju1H6jFrtLrUQCDo/9D+tWG2F4Dg7rAq+vVGo183PnAT
spyTDcRToQNruB5d0NVA3DFNvl4V13EnTMXXW8ooAUDkkapTmkK91EQsO2BTdXXe
KypL41zhxsa3qyP2XLJK3WzYsiV0BpZJ6E+R4uRX+xS06kh7YMpC4I0i/PhLe1W6
Y5V55IqGRi8NyXhjRBFBZytiHUsj/mX7ZNlvnfWMbwi+VWpIw8ZBhiphahNxScBp
h2MG+0w+ccpTem7uz1h8UihTuxv2ICXo
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:54:06 2025 by rpki-client