Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa
File: 7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa (raw, json)
Hash identifier: 8QAl4KPE4QxTDp06KSKFM5Fq5/AS/D3L1ooy3ToSoNo=
Subject key identifier: B8:58:93:0C:F9:4C:6E:C3:62:C8:9E:CB:F3:60:7E:75:F0:F4:81:05
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1580663F542ABCD84D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396580
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:58:06:63:f5:42:ab:cd:84:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=de8e2462-b3d4-4bef-8ca4-83e8f2ae5e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:14:60:0a:7b:48:41:c5:6a:40:a1:8b:0f:
c8:55:17:6b:54:e1:7e:16:81:0a:3b:88:f9:5a:14:
91:e9:d9:95:a1:ba:c9:a7:3c:33:28:e3:8f:d1:b0:
df:92:a6:e3:82:03:a7:a1:1c:a1:d9:62:9d:8f:f7:
d3:f0:5f:1e:56:8f:39:30:6b:48:67:53:de:b9:d8:
eb:5e:3b:da:62:d8:6b:fc:a5:13:f9:24:ce:9d:1f:
ea:2f:8f:fd:fb:a3:ad:ec:14:45:7d:18:5f:4c:44:
fa:68:59:f9:74:28:df:35:80:b0:23:eb:0d:9b:7d:
b5:fe:1f:7f:30:75:51:02:85:54:ff:ed:9b:d5:c4:
9a:24:44:d4:11:87:97:12:22:df:1e:ac:34:c1:e4:
f6:6e:d2:2e:92:ae:f9:2e:78:6e:1b:08:16:57:84:
bd:a7:b7:a8:e5:46:44:82:2c:65:91:02:49:1f:86:
dd:53:e1:44:47:58:47:56:44:a2:03:e6:07:75:e9:
87:9c:a3:43:ec:fe:5e:c8:2c:0d:1a:d4:11:d5:92:
11:dc:74:b2:fb:40:f7:0d:1a:f3:4b:99:1f:86:9a:
e1:90:90:8b:37:9d:95:47:90:23:8e:78:1d:94:db:
8b:9e:bc:61:58:5a:44:84:f9:50:0b:b2:70:1f:01:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:93:0C:F9:4C:6E:C3:62:C8:9E:CB:F3:60:7E:75:F0:F4:81:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7553a9c9-e0e0-33f7-aa62-a65a191f34f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c8:05:b6:90:b1:ec:a1:e2:14:ba:6e:72:64:be:3b:54:4f:
92:50:4e:bc:37:e6:5d:62:29:d0:33:47:80:13:57:5e:a0:b5:
60:d9:49:c6:d2:9b:02:49:ff:59:3a:b1:bf:98:c9:9a:25:52:
5f:94:22:b3:6c:f4:15:13:bb:cb:d9:52:d8:7c:e9:a2:57:38:
73:72:cf:b2:25:1a:60:fc:6c:bc:25:a3:6a:ce:19:2b:a4:f5:
3c:8b:e4:96:35:cf:64:2d:15:28:80:f3:d3:cb:bb:e3:e6:bc:
7d:67:42:dc:55:05:01:4a:1a:f0:1f:42:32:b4:0e:e7:8e:20:
77:6a:5f:eb:cf:e0:23:f3:12:66:d2:a6:dd:97:da:6b:25:0c:
2f:28:b3:cb:7a:32:02:d1:e3:41:7f:6d:b6:7f:ba:de:53:83:
62:b0:ad:a6:5b:0d:8b:0e:94:02:cb:fd:76:c9:b9:4b:c6:e4:
d2:06:84:a2:d4:83:70:f3:76:af:04:d3:13:a4:5a:0d:89:4b:
b7:2f:ce:ee:aa:f8:02:51:c7:2f:47:fb:b1:e5:ec:a0:eb:65:
40:2d:dc:7d:b5:1d:39:d0:42:ab:53:ca:b4:3f:30:57:86:b6:
77:06:e6:8b:e7:40:fc:7d:5b:6b:54:bd:8b:d4:69:d7:ec:ed:
e5:cd:a7:56
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsVgGY/VCq82E2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
ZGU4ZTI0NjItYjNkNC00YmVmLThjYTQtODNlOGYyYWU1ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY8UYAp7SEHFakChiw/IVRdrVOF+FoEKO4j5
WhSR6dmVobrJpzwzKOOP0bDfkqbjggOnoRyh2WKdj/fT8F8eVo85MGtIZ1Peudjr
XjvaYthr/KUT+STOnR/qL4/9+6Ot7BRFfRhfTET6aFn5dCjfNYCwI+sNm321/h9/
MHVRAoVU/+2b1cSaJETUEYeXEiLfHqw0weT2btIukq75LnhuGwgWV4S9p7eo5UZE
gixlkQJJH4bdU+FER1hHVkSiA+YHdemHnKND7P5eyCwNGtQR1ZIR3HSy+0D3DRrz
S5kfhprhkJCLN52VR5AjjngdlNuLnrxhWFpEhPlQC7JwHwEsDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLhYkwz5TG7DYsiey/NgfnXw9IEFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzU1M2E5YzktZTBlMC0z
M2Y3LWFhNjItYTY1YTE5MWYzNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA+yAW2kLHsoeIUum5yZL47VE+SUE68N+ZdYinQM0eAE1deoLVg2UnG
0psCSf9ZOrG/mMmaJVJflCKzbPQVE7vL2VLYfOmiVzhzcs+yJRpg/Gy8JaNqzhkr
pPU8i+SWNc9kLRUogPPTy7vj5rx9Z0LcVQUBShrwH0IytA7njiB3al/rz+Aj8xJm
0qbdl9prJQwvKLPLejIC0eNBf222f7reU4NisK2mWw2LDpQCy/12yblLxuTSBoSi
1INw83avBNMTpFoNiUu3L87uqvgCUccvR/ux5eyg62VALdx9tR050EKrU8q0PzBX
hrZ3BuaL50D8fVtrVL2L1GnX7O3lzadW
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:36 2025 by rpki-client