Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
File: 974c2192-c59c-3fff-b629-b9a8fdf3b787.roa (raw, json)
Hash identifier: IJ+U+RSi7WtPmSatcDkwH9yO/X0YRb5JtMzp5WoPy4A=
Subject key identifier: FC:3B:5A:D1:E5:F6:45:7A:81:DA:AB:90:BB:8C:2C:9F:33:53:D8:24
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14E482DCC596F4BBB9100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396597
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4e:48:2d:cc:59:6f:4b:bb:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=9c069d66-a8e0-42ab-8f2f-88ff925ce678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:a6:8b:3e:2d:3d:a0:6d:8b:a4:34:2a:b7:
1e:aa:fd:ec:9a:ea:21:51:f5:97:37:90:04:c2:b8:
97:fc:1b:fc:05:d6:27:f8:23:99:5f:d3:57:cf:02:
5f:a5:31:29:f7:56:d3:11:ed:80:4e:c9:74:fd:0a:
63:bf:d1:94:ac:d9:3f:a1:0d:55:90:dd:8b:17:f4:
5e:ce:2e:e7:dd:56:08:c9:27:1b:f7:b8:c3:71:0f:
29:d6:a6:e1:ac:b8:99:bd:d4:9d:bc:ea:85:6a:85:
39:d0:dd:8c:5b:ea:14:aa:28:ab:43:16:4b:d2:b0:
fa:2d:63:c4:d3:fb:36:30:5c:71:2b:db:2b:7c:56:
07:f5:9a:45:1c:e8:2b:5f:78:3b:01:dd:f8:ba:ce:
cf:c9:09:b3:7a:67:30:33:4a:90:85:67:b7:4f:a0:
63:70:3e:cd:3e:48:c2:42:49:bc:c6:60:8b:d1:2e:
bc:95:5c:59:78:18:3e:5a:1b:f6:83:ce:4c:f9:25:
f4:8c:33:67:60:8b:4d:90:3e:93:63:86:69:64:52:
66:2d:70:ca:05:61:6e:bb:7b:22:59:53:fb:6d:32:
14:49:75:14:21:1c:64:af:25:0c:2e:de:6f:4d:93:
c7:a7:12:c3:f8:c2:6c:c5:d4:19:fd:25:04:e6:c7:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:5A:D1:E5:F6:45:7A:81:DA:AB:90:BB:8C:2C:9F:33:53:D8:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:50:95:8a:92:42:ca:70:3c:80:30:d2:57:ee:a0:ac:1e:7f:
51:39:0c:5f:db:cb:cb:8e:89:f1:ec:4a:81:32:a9:54:f8:0c:
18:2c:47:42:a6:50:01:4a:93:f5:a0:fb:e9:b0:6a:d6:96:9d:
23:22:34:8a:16:26:35:9b:d3:06:1c:23:e1:0b:77:e6:f6:24:
a6:42:96:b1:86:e5:74:71:fa:62:68:98:08:a7:ae:e7:9b:3b:
7b:7f:1f:61:a6:e2:ca:f1:11:f7:a1:15:aa:f0:9d:9e:33:e0:
ec:47:62:4c:b8:f9:20:5b:68:ec:55:c9:13:5c:ab:be:33:4e:
cf:b1:1c:09:46:2e:1f:10:64:18:aa:07:65:9f:19:0a:cc:16:
20:61:75:9a:11:b9:da:7f:91:b1:3e:18:94:1f:ef:4e:51:e9:
f9:a0:66:95:cb:b4:64:11:e5:76:6e:fa:8e:d4:fe:10:bd:c9:
b7:7d:f1:0e:34:53:ae:0c:7a:0b:ea:e8:c4:ac:01:3b:13:09:
3e:ee:0b:a6:cd:70:e5:76:a1:5e:f1:f6:b7:5e:2c:38:d1:5a:
90:55:e8:60:89:55:18:fc:27:d4:0f:fa:23:0a:3d:6e:04:95:
c6:d9:67:75:b5:b5:3d:d7:1f:ae:35:45:98:48:fa:d9:3b:92:
15:65:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:08 2025 by rpki-client