Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
File: 86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa (raw, json)
Hash identifier: wMhXIQ2DgYbdZnVKkoP4y8eXYb/t6Hiajzr5RCutHrg=
Subject key identifier: 06:55:9F:1C:6D:A6:72:BE:69:B8:34:1E:9E:8C:B1:75:24:D2:7F:95
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14EE8177595B668B64400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396563
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4e:e8:17:75:95:b6:68:b6:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=097e1ae2-ef11-4fd0-b086-a58c53831681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:b3:d6:f4:80:b1:a6:86:1d:03:b3:ff:ad:
dd:63:19:72:22:8b:c4:7d:f0:22:9e:d6:78:ab:f0:
fe:03:f7:ad:4d:95:77:54:92:1b:2a:f3:f6:8e:a2:
f6:b5:d0:e5:f6:8b:fa:ad:e8:1c:a6:33:56:62:34:
04:0a:74:16:77:3f:77:2b:5a:43:8a:90:2d:37:c6:
fd:e9:8a:3f:02:66:2c:7c:6c:c5:e0:2b:06:5e:07:
b3:6e:4f:85:59:60:b4:6c:5e:d7:72:48:45:d9:32:
d1:5e:b6:f3:0c:5a:1e:cd:49:51:e2:3b:3b:97:f8:
0a:6f:ba:f1:66:b2:5c:1b:59:a7:a0:ab:df:4a:8e:
5e:68:df:e7:ad:85:04:7d:84:04:25:f7:7e:90:15:
18:dc:b4:a2:cf:c5:fb:33:33:ad:3c:1a:ed:f7:30:
1c:e3:af:4a:12:24:2b:e4:32:e8:42:d7:a1:b8:d3:
35:a1:0a:b2:a2:cf:93:a2:35:4b:dc:62:e6:76:a3:
c4:83:c0:dc:1e:c6:8e:d8:c8:0a:29:d7:2a:17:87:
0c:ee:84:3e:70:c2:1a:ef:c1:02:15:4e:a5:dd:86:
65:7a:1d:3a:9e:9a:d8:fd:08:c8:3f:62:d8:4f:5c:
a2:d7:34:f3:2c:e7:16:ec:69:43:37:2d:13:ea:f9:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:9F:1C:6D:A6:72:BE:69:B8:34:1E:9E:8C:B1:75:24:D2:7F:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:88:ef:50:30:8f:7b:1f:ac:d9:3e:0c:8f:d7:9a:72:11:3b:
a9:f2:22:d3:46:42:79:3f:9a:43:3c:1e:5a:2b:5d:ca:41:e9:
e5:d4:e4:bf:9d:20:c5:77:51:09:2f:2f:3d:c3:a3:07:cc:2a:
84:bb:8a:51:8a:54:b7:71:1b:da:2d:2a:6d:47:9e:56:6c:ac:
9b:90:98:0a:0d:0b:f6:e4:58:93:f4:54:0b:af:2d:3e:a1:93:
9e:51:0c:4e:47:17:86:46:91:d6:16:a4:e2:5c:ed:33:da:48:
89:e6:3c:13:f2:eb:a8:eb:27:b1:34:3d:0a:a2:d4:db:a1:63:
15:c2:50:de:18:0a:b7:83:ed:31:db:92:37:0e:d4:6e:7c:54:
f0:34:1d:50:1b:a9:ae:a7:88:70:8f:05:c7:4f:8a:ec:b3:47:
f2:56:19:5d:84:68:c9:d3:5d:1f:2a:55:9c:72:c8:d4:a5:9c:
25:9e:62:2c:b1:6d:ab:17:f0:97:53:e9:c3:db:a0:e8:66:a7:
6d:c0:a9:8d:73:1d:80:e7:3c:8b:a1:78:df:49:b7:b2:83:73:
5f:ed:3d:73:74:27:d3:fa:a4:0a:f0:ea:6a:71:11:05:e8:e8:
ce:b2:58:1c:6c:26:01:f0:87:ce:93:16:71:d9:a8:09:9f:42:
36:d6:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:27 2025 by rpki-client