Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/767a5ee9-7203-3966-9b60-838055102ccc.roa
File: 767a5ee9-7203-3966-9b60-838055102ccc.roa (raw, json)
Hash identifier: SsfaTGTTCTc7wJIPAvgctNiR8oGtDv62l3UUkuGsEVs=
Subject key identifier: 00:3B:BE:BB:BD:62:85:38:4E:0E:BB:7D:E5:92:A5:B4:B2:93:2D:65
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1478E7808A0A812B76680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/767a5ee9-7203-3966-9b60-838055102ccc.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 27544
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:47:8e:78:08:a0:a8:12:b7:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=1eb61304-e066-4280-bb65-cc486eed714b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:4f:3f:cb:86:21:34:30:f7:b3:c9:81:ea:
54:68:1d:69:97:55:a0:62:07:b3:e7:16:53:e3:ff:
c1:75:26:75:10:b0:50:b1:c4:3e:a9:46:ac:fe:52:
5b:f6:24:4d:13:de:40:64:0c:6e:04:5b:f1:16:da:
fe:58:34:29:63:1b:c4:8c:af:13:71:64:c1:1b:2d:
07:3e:be:29:68:b1:d1:bd:5b:83:5d:57:0f:4f:7d:
b6:4f:3d:01:58:c7:00:12:69:9a:6e:f3:a4:ae:70:
9f:9f:03:e9:f2:7d:65:88:34:a1:50:62:a3:a4:9f:
e4:85:3a:50:7a:d2:cd:a6:04:2b:7f:95:e8:cf:bd:
04:39:e6:f1:d0:3e:fc:88:f2:2d:b3:3b:13:eb:16:
67:64:6f:0f:6f:90:34:7a:a4:6b:71:6e:39:cf:d7:
73:8f:6f:03:0a:79:ab:34:22:ad:13:d9:34:2b:d4:
6b:1f:33:b0:1a:06:45:8c:d9:0d:2d:40:70:aa:14:
b6:08:b0:ee:8d:4e:6e:c0:bb:73:af:fa:56:b1:40:
e9:6f:23:a0:ec:e8:9a:b5:7f:f5:32:1d:d2:07:72:
b1:75:f4:a8:53:d3:9c:90:4f:09:ba:e3:54:9a:97:
b5:0b:f9:0b:f6:08:8b:fa:31:5a:3c:79:ac:98:b6:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:BE:BB:BD:62:85:38:4E:0E:BB:7D:E5:92:A5:B4:B2:93:2D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/767a5ee9-7203-3966-9b60-838055102ccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ea:b5:56:e2:c4:cd:e5:6b:90:f5:f7:c7:d0:f3:9d:1a:de:
2c:8c:e0:da:56:ba:80:57:06:f5:a1:f1:63:26:c1:e6:26:88:
6a:a4:fe:66:e2:21:66:5f:67:ac:a2:fa:e8:d2:dd:c5:65:7e:
d2:aa:e2:10:a5:87:19:16:a6:94:fc:b4:50:c2:7f:78:34:ca:
cb:56:dc:c6:f7:f4:f6:72:bd:c6:ac:64:bd:19:c0:32:c6:80:
71:1f:6d:66:64:0f:61:df:c0:51:19:67:9f:1a:5a:cb:50:1e:
86:83:b0:7e:b1:82:02:d0:35:7a:dc:fb:e5:d3:2a:6b:bf:9c:
75:43:40:90:88:23:27:bf:de:6f:95:7b:8d:de:54:e6:81:9b:
ba:fb:68:95:b5:48:11:04:cd:de:0c:98:0f:f7:00:09:a0:26:
2c:14:72:d6:52:9b:d2:a3:c6:63:f9:45:32:df:60:3d:5d:2f:
5b:7c:45:24:c7:58:cc:cc:e1:da:d3:f0:54:d4:ad:45:fc:61:
84:31:0e:8e:da:7e:77:74:58:44:28:4c:bb:a2:d2:76:f4:8a:
89:ad:10:1e:64:61:36:1b:0a:51:b3:cc:9e:db:53:f5:27:60:
9b:6c:df:cb:54:9a:a3:ef:e1:a7:ae:2d:e5:c0:c8:48:46:62:
f6:45:69:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsUeOeAigqBK3ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MWViNjEzMDQtZTA2Ni00MjgwLWJiNjUtY2M0ODZlZWQ3MTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0xPP8uGITQw97PJgepUaB1pl1WgYgez5xZT
4//BdSZ1ELBQscQ+qUas/lJb9iRNE95AZAxuBFvxFtr+WDQpYxvEjK8TcWTBGy0H
Pr4paLHRvVuDXVcPT322Tz0BWMcAEmmabvOkrnCfnwPp8n1liDShUGKjpJ/khTpQ
etLNpgQrf5Xoz70EOebx0D78iPItszsT6xZnZG8Pb5A0eqRrcW45z9dzj28DCnmr
NCKtE9k0K9RrHzOwGgZFjNkNLUBwqhS2CLDujU5uwLtzr/pWsUDpbyOg7OiatX/1
Mh3SB3KxdfSoU9OckE8JuuNUmpe1C/kL9giL+jFaPHmsmLZHiQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAA7vru9YoU4Tg67feWSpbSyky1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzY3YTVlZTktNzIwMy0z
OTY2LTliNjAtODM4MDU1MTAyY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBO6rVW4sTN5WuQ9ffH0POdGt4sjODaVrqAVwb1ofFjJsHmJohqpP5m
4iFmX2esovro0t3FZX7SquIQpYcZFqaU/LRQwn94NMrLVtzG9/T2cr3GrGS9GcAy
xoBxH21mZA9h38BRGWefGlrLUB6Gg7B+sYIC0DV63Pvl0yprv5x1Q0CQiCMnv95v
lXuN3lTmgZu6+2iVtUgRBM3eDJgP9wAJoCYsFHLWUpvSo8Zj+UUy32A9XS9bfEUk
x1jMzOHa0/BU1K1F/GGEMQ6O2n53dFhEKEy7otJ29IqJrRAeZGE2GwpRs8ye21P1
J2CbbN/LVJqj7+Gnri3lwMhIRmL2RWl/
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:09 2025 by rpki-client