Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98da88d4-f7fb-32dc-bce1-023c3cc0c9f5.roa
File: 98da88d4-f7fb-32dc-bce1-023c3cc0c9f5.roa (raw, json)
Hash identifier: U763GWS9DsDVqln0HIRn1e83Ua319wIGrsBjcD6PZM8=
Subject key identifier: 28:C7:98:81:1B:B7:A4:B7:47:D0:C3:2E:AD:8D:7D:CF:2E:49:BC:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15694AEE5D1D79C52BD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98da88d4-f7fb-32dc-bce1-023c3cc0c9f5.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396554
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:56:94:ae:e5:d1:d7:9c:52:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=85a3fe5c-6a72-484e-ac00-edae9485c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:4e:c9:31:c7:bf:42:6a:90:77:95:35:52:
d7:97:42:13:68:16:3f:ab:4d:ea:27:fa:cd:3c:7e:
d8:ce:19:41:28:68:0b:af:92:78:af:78:99:51:2b:
27:c8:9a:cc:22:cd:b1:e9:d2:f3:30:4d:de:97:e5:
ee:98:4a:15:0b:7f:93:1a:6a:d8:06:c5:72:00:17:
33:23:02:e3:2f:1f:de:84:2b:67:39:6e:1f:f2:a3:
ac:ee:08:53:43:02:c1:5f:04:73:17:20:98:c0:54:
91:8d:89:0b:73:66:6d:ee:df:df:bf:52:c4:41:87:
4e:2b:57:1a:d8:29:3b:e9:ff:9e:f6:2b:16:59:85:
ca:86:54:97:23:05:bd:6a:c7:59:a9:bf:9e:1a:bd:
cb:26:8a:36:50:57:f2:6d:ac:61:d4:4e:15:b9:70:
b4:fe:25:4a:4d:0d:a7:99:63:80:60:aa:c5:0b:25:
3d:c0:b0:7a:f9:25:6b:ab:7e:eb:80:32:61:28:aa:
da:71:6c:0f:e3:5c:fa:0a:38:84:a7:93:38:f4:a0:
34:4b:92:ca:0d:e0:fd:a6:fa:1f:6b:42:dc:2f:26:
3d:e0:5a:4c:47:11:84:a7:3b:49:6e:fc:fc:a7:64:
57:7a:3d:94:84:80:5f:33:1e:4e:f5:bc:32:77:96:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:98:81:1B:B7:A4:B7:47:D0:C3:2E:AD:8D:7D:CF:2E:49:BC:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98da88d4-f7fb-32dc-bce1-023c3cc0c9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:27:f4:35:83:5b:52:3b:90:46:b6:3b:2e:96:10:07:e2:f7:
41:66:f7:40:49:3b:8b:60:4f:69:d2:4e:e7:80:a4:09:47:01:
25:f9:57:fe:cd:99:74:83:8b:39:25:b2:ed:4e:22:82:83:74:
62:da:c1:8d:13:b7:5b:98:df:1c:1f:41:15:3c:0a:67:11:36:
18:3f:0d:10:b7:72:5c:20:88:64:13:3d:85:4f:28:82:1a:83:
f8:6b:f9:03:10:0e:9b:ef:03:c2:12:c5:f1:cf:53:14:d3:78:
22:30:15:d2:32:01:35:16:d4:d6:af:9a:0b:09:e2:30:98:ab:
c8:7c:1f:7e:d3:50:20:c7:d2:19:a9:d0:c9:ff:b0:90:95:7d:
b3:7b:22:3f:22:de:3c:bb:59:44:ce:14:eb:40:15:be:2e:3c:
e2:07:23:3c:55:ea:0c:30:24:6c:34:98:ea:27:70:f3:7d:38:
5e:cb:98:10:4f:63:6f:61:7d:47:7d:d2:03:ae:29:8c:39:31:
2b:71:34:8c:ab:1e:56:03:ba:4e:6a:46:eb:f3:7b:0b:66:27:
9a:24:46:95:77:79:74:a9:23:ef:2a:dc:d2:87:dc:ef:44:b0:
29:2c:3a:d2:8f:05:12:d9:81:e7:1b:6a:4d:09:40:49:cb:4e:
e8:47:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:04 2025 by rpki-client