Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b1ac0d0-fdca-3f34-bb0b-a1ecc26cda9c.roa
File: 8b1ac0d0-fdca-3f34-bb0b-a1ecc26cda9c.roa (raw, json)
Hash identifier: /JK6kOQfO4clfN8RFsi1J4pcCVj5mB8UpdllWALHM3c=
Subject key identifier: E0:FF:34:D1:92:29:71:E1:2D:35:07:87:01:63:84:5A:07:63:D8:82
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73ECCA4E9F7B1066DD46C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b1ac0d0-fdca-3f34-bb0b-a1ecc26cda9c.roa
Signing time: Fri 29 Nov 2024 13:58:33 +0000
ROA not before: Fri 29 Nov 2024 13:58:33 +0000
ROA not after: Thu 27 Feb 2025 13:58:33 +0000
asID: 36632
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:ec:ca:4e:9f:7b:10:66:dd:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:33 2024 GMT
Not After : Feb 27 13:58:33 2025 GMT
Subject: CN=1c05f844-6fbc-4863-8c1a-e10ac8f37c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:eb:19:8d:dd:fe:2b:ff:b3:d0:ad:f7:c2:
89:33:6f:f9:b0:92:95:b6:e5:88:89:91:f9:fa:d0:
e6:8a:71:a8:c8:fe:4e:3a:b1:b2:70:0d:ec:f3:88:
ae:11:4e:cb:63:8f:2c:b4:ca:54:59:b6:cd:4e:15:
32:24:5d:ed:55:b2:af:26:75:21:58:f9:ec:7d:83:
2a:85:c9:5b:11:c1:31:a1:3f:98:d3:c2:0a:19:a4:
3c:b7:84:09:0a:bb:46:a6:61:37:0f:78:38:e3:77:
cf:0a:e3:40:74:bd:91:d9:db:ee:2d:08:d2:81:69:
41:66:d3:50:21:eb:50:ca:3e:9f:d6:45:f5:7a:b7:
1f:4a:22:48:94:5d:8c:51:fe:e4:58:c2:a6:e5:65:
6b:89:c3:40:10:80:6f:cf:01:ae:e7:ca:f5:8d:e8:
09:96:76:02:ae:8e:49:1e:2e:79:94:59:be:ce:83:
85:4e:44:0c:ce:1b:d2:0e:12:eb:05:72:b8:82:fd:
39:5c:f6:09:b0:d0:59:b2:9d:4c:f3:f9:c4:23:d3:
68:52:45:86:45:05:bf:93:60:a2:67:42:c2:b0:83:
4c:3a:8a:33:93:ad:ef:b8:49:c2:df:81:ed:32:f3:
dc:9a:17:3c:0b:29:c5:81:bf:0b:02:41:e5:66:93:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:34:D1:92:29:71:E1:2D:35:07:87:01:63:84:5A:07:63:D8:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b1ac0d0-fdca-3f34-bb0b-a1ecc26cda9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:10:6d:90:ed:98:e0:d4:f1:37:d4:57:92:70:12:2b:7a:6d:
f9:fc:ae:18:87:06:24:ee:0c:25:b2:da:2a:4f:ce:58:a5:61:
6a:ed:b7:cb:ff:5b:f0:b0:c1:d0:c1:b8:60:4d:9b:22:ce:0a:
9e:3b:ca:43:d9:32:3d:16:25:aa:7c:52:a9:10:72:dd:97:41:
a3:b6:50:0d:9e:34:5f:1f:eb:95:b7:b6:d5:13:5f:5c:66:ed:
47:0d:fd:92:47:a8:ce:01:e9:df:5d:4e:90:b9:1c:b9:7f:ac:
f5:57:95:53:9b:20:87:88:fe:c9:bf:99:54:34:9d:23:ca:49:
07:bd:b8:2e:09:5d:78:4a:25:12:c1:52:9f:6c:d7:56:d3:c9:
49:2a:bc:2a:8d:dd:2d:d9:ca:e7:34:96:6a:e7:22:06:30:22:
0a:23:62:80:95:fa:f2:94:e8:3b:a1:b6:2c:a7:a5:8d:03:fb:
de:8a:a8:3d:5a:ab:bc:f0:4d:a6:68:98:04:8a:cb:27:70:30:
9d:f0:72:e9:e1:48:c2:b7:6a:f9:f2:6e:01:3a:e5:49:1a:20:
84:ba:cf:ce:5b:83:f0:e2:5d:c9:a1:69:ba:d9:54:61:43:e9:
fe:0d:95:42:2f:54:a1:ff:0d:bd:0e:92:38:45:13:4b:1c:a6:
a8:b3:00:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKc+zKTp97EGbdRsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzM1oXDTI1MDIyNzEzNTgzM1owLzEtMCsGA1UEAxMk
MWMwNWY4NDQtNmZiYy00ODYzLThjMWEtZTEwYWM4ZjM3YzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs/rGY3d/iv/s9Ct98KJM2/5sJKVtuWIiZH5
+tDminGoyP5OOrGycA3s84iuEU7LY48stMpUWbbNThUyJF3tVbKvJnUhWPnsfYMq
hclbEcExoT+Y08IKGaQ8t4QJCrtGpmE3D3g443fPCuNAdL2R2dvuLQjSgWlBZtNQ
IetQyj6f1kX1ercfSiJIlF2MUf7kWMKm5WVricNAEIBvzwGu58r1jegJlnYCro5J
Hi55lFm+zoOFTkQMzhvSDhLrBXK4gv05XPYJsNBZsp1M8/nEI9NoUkWGRQW/k2Ci
Z0LCsINMOoozk63vuEnC34HtMvPcmhc8CynFgb8LAkHlZpOECwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOD/NNGSKXHhLTUHhwFjhFoHY9iCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGIxYWMwZDAtZmRjYS0z
ZjM0LWJiMGItYTFlY2MyNmNkYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcQbZDtmODU8TfUV5JwEit6bfn8rhiHBiTuDCWy2ipPzlilYWrtt8v/
W/CwwdDBuGBNmyLOCp47ykPZMj0WJap8UqkQct2XQaO2UA2eNF8f65W3ttUTX1xm
7UcN/ZJHqM4B6d9dTpC5HLl/rPVXlVObIIeI/sm/mVQ0nSPKSQe9uC4JXXhKJRLB
Up9s11bTyUkqvCqN3S3Zyuc0lmrnIgYwIgojYoCV+vKU6DuhtiynpY0D+96KqD1a
q7zwTaZomASKyydwMJ3wcunhSMK3avnybgE65UkaIIS6z85bg/DiXcmhabrZVGFD
6f4NlUIvVKH/Db0OkjhFE0scpqizAGk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:52 2025 by rpki-client