Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/829616f3-98d2-3d2a-b0b9-ca83fab5e24c.roa
File: 829616f3-98d2-3d2a-b0b9-ca83fab5e24c.roa (raw, json)
Hash identifier: Davl+wYhUaUtRPKOMKlJm++8CH+3KmNF7WdpVhSwNjc=
Subject key identifier: AD:61:7A:AB:03:48:9A:59:66:17:AB:70:B0:37:95:36:0A:A8:7A:A7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E9EF8C5BDC4ECCBA7F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/829616f3-98d2-3d2a-b0b9-ca83fab5e24c.roa
Signing time: Fri 29 Nov 2024 13:58:31 +0000
ROA not before: Fri 29 Nov 2024 13:58:31 +0000
ROA not after: Thu 27 Feb 2025 13:58:31 +0000
asID: 396564
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e9:ef:8c:5b:dc:4e:cc:ba:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:31 2024 GMT
Not After : Feb 27 13:58:31 2025 GMT
Subject: CN=204116e1-e985-4713-9dcc-19574303a94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:97:ed:91:d5:da:18:89:f4:8e:2a:e7:ac:
57:77:85:84:5a:0c:f0:a8:96:b1:44:18:c7:ae:84:
fa:b4:42:b4:5b:67:26:59:51:62:f0:93:34:92:ed:
5d:c1:6a:13:d6:46:66:d1:fd:23:33:b4:4f:28:09:
01:e0:7f:dc:2a:7a:7c:26:da:b6:9c:06:e4:f8:53:
31:f1:55:23:b4:05:4d:2d:3d:2f:d2:85:ce:b5:1e:
8d:0e:9f:09:a9:20:03:d5:81:03:61:b1:20:58:64:
cf:5d:54:8c:b5:ba:4c:fd:32:3d:ae:10:d5:0a:51:
a4:ec:4a:0d:e1:db:83:88:e1:8b:fe:4e:b9:60:50:
16:e9:dd:ab:c8:df:09:b6:a0:4e:11:13:ab:4f:24:
4a:0f:47:ff:53:42:a8:bc:aa:79:42:e5:e0:6f:22:
52:f2:40:ac:aa:42:32:99:89:14:e2:83:98:ca:b1:
27:2f:72:ce:63:7a:04:e8:c6:86:ef:9a:58:9d:66:
25:b5:e1:83:29:2f:34:ce:d3:6e:72:c0:f5:f8:b6:
7a:82:4c:9f:9b:a6:46:24:d1:91:ee:3d:59:47:bb:
e4:3d:36:de:d2:0d:98:05:da:89:fa:f0:03:13:c2:
43:0b:0e:d6:db:8c:99:6e:a4:25:73:ce:c2:61:c8:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:7A:AB:03:48:9A:59:66:17:AB:70:B0:37:95:36:0A:A8:7A:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/829616f3-98d2-3d2a-b0b9-ca83fab5e24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:41:b0:47:6a:37:d9:a7:4c:35:0c:a6:e5:f4:95:bc:11:6c:
99:3c:83:ec:de:60:e8:b4:09:56:dc:f9:ff:38:6f:83:8e:6f:
24:26:1a:0d:b8:38:7b:1e:37:69:66:57:0e:c8:41:29:bd:46:
e5:0c:bb:36:cd:56:2d:57:32:61:e8:f8:f3:13:3f:92:93:95:
6f:b6:75:a4:34:db:34:1e:31:98:c9:73:24:b8:0d:7a:3e:9d:
9b:3e:39:6f:16:fa:11:d0:ed:33:9a:91:dd:55:1d:9f:36:30:
70:ca:55:5d:d5:5f:fa:e9:3a:5b:1f:0f:64:9a:08:d0:4b:3c:
3f:91:47:c9:c3:fb:3e:7f:06:6c:c8:bc:2b:03:8e:1e:d6:8a:
26:2c:85:c3:b3:1d:57:b2:5f:8a:b8:ae:75:fb:26:63:6c:17:
f6:53:4f:a7:fd:dd:3c:d6:55:dc:e4:d7:35:c9:a7:58:12:44:
1f:6a:be:98:2d:26:5b:1c:70:7c:87:e9:58:bb:3d:5e:81:35:
01:26:b2:bb:6d:64:34:54:36:a7:4b:99:8d:d8:cb:b7:56:c0:
65:4b:b0:86:4a:25:f7:4f:ff:0a:3a:e6:d2:a1:e8:e9:65:f7:
bf:18:13:04:3f:a9:d3:1d:a3:26:1c:52:b3:45:b6:18:9a:27:
06:8d:bd:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKc+nvjFvcTsy6f0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMVoXDTI1MDIyNzEzNTgzMVowLzEtMCsGA1UEAxMk
MjA0MTE2ZTEtZTk4NS00NzEzLTlkY2MtMTk1NzQzMDNhOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduX7ZHV2hiJ9I4q56xXd4WEWgzwqJaxRBjH
roT6tEK0W2cmWVFi8JM0ku1dwWoT1kZm0f0jM7RPKAkB4H/cKnp8Jtq2nAbk+FMx
8VUjtAVNLT0v0oXOtR6NDp8JqSAD1YEDYbEgWGTPXVSMtbpM/TI9rhDVClGk7EoN
4duDiOGL/k65YFAW6d2ryN8JtqBOEROrTyRKD0f/U0KovKp5QuXgbyJS8kCsqkIy
mYkU4oOYyrEnL3LOY3oE6MaG75pYnWYlteGDKS80ztNucsD1+LZ6gkyfm6ZGJNGR
7j1ZR7vkPTbe0g2YBdqJ+vADE8JDCw7W24yZbqQlc87CYcjUgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1heqsDSJpZZhercLA3lTYKqHqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODI5NjE2ZjMtOThkMi0z
ZDJhLWIwYjktY2E4M2ZhYjVlMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRBsEdqN9mnTDUMpuX0lbwRbJk8g+zeYOi0CVbc+f84b4OObyQmGg24
OHseN2lmVw7IQSm9RuUMuzbNVi1XMmHo+PMTP5KTlW+2daQ02zQeMZjJcyS4DXo+
nZs+OW8W+hHQ7TOakd1VHZ82MHDKVV3VX/rpOlsfD2SaCNBLPD+RR8nD+z5/BmzI
vCsDjh7WiiYshcOzHVeyX4q4rnX7JmNsF/ZTT6f93TzWVdzk1zXJp1gSRB9qvpgt
JlsccHyH6Vi7PV6BNQEmsrttZDRUNqdLmY3Yy7dWwGVLsIZKJfdP/wo65tKh6Oll
978YEwQ/qdMdoyYcUrNFthiaJwaNvXg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:13 2025 by rpki-client