Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f127237-6a43-3085-bc35-1eef8f1a0075.roa
File: 9f127237-6a43-3085-bc35-1eef8f1a0075.roa (raw, json)
Hash identifier: umI9D+PjlVknxqeCQICpcmjmU5fEN3WcRE4gAr2vkUI=
Subject key identifier: 71:2C:7B:40:A6:89:3C:DA:41:4A:9D:0F:EC:76:23:66:A1:B2:FA:39
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73FE36357B3BA92A6D7880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f127237-6a43-3085-bc35-1eef8f1a0075.roa
Signing time: Fri 29 Nov 2024 13:58:41 +0000
ROA not before: Fri 29 Nov 2024 13:58:41 +0000
ROA not after: Thu 27 Feb 2025 13:58:41 +0000
asID: 20362
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:fe:36:35:7b:3b:a9:2a:6d:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:41 2024 GMT
Not After : Feb 27 13:58:41 2025 GMT
Subject: CN=2702abc8-f8a3-4988-835a-c86be887f15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:a7:7e:44:ea:8f:1e:c9:18:5c:e6:26:57:
49:cf:59:5e:22:13:df:90:ac:ab:0a:80:e3:ff:74:
fb:5f:26:12:f0:24:5f:74:bc:ff:f9:e7:49:59:08:
94:72:47:7c:74:45:13:d4:2b:ce:53:89:e7:e7:d5:
f7:0d:c9:ee:7c:2e:48:c9:d0:1d:bb:e1:bd:07:ec:
3a:49:0d:81:b0:49:2f:0b:31:e3:67:2e:ad:a5:be:
1d:2f:58:7a:d4:4e:88:54:5c:20:22:a4:df:c2:14:
05:58:70:cf:a2:51:be:52:cd:c2:ac:6c:a0:33:ca:
7e:98:a8:61:93:bb:9f:44:f9:c4:6d:6e:41:e7:bb:
0b:3a:ee:d5:d0:fc:d7:63:66:8d:9c:f3:52:69:75:
c8:31:c3:f4:5b:90:53:0e:96:2e:41:a5:fc:5d:4e:
82:a9:2f:18:11:da:cd:ed:3d:b3:ad:73:09:34:bd:
9f:63:5f:01:cc:ab:48:0e:dd:b7:27:da:fe:10:89:
7c:fe:5b:a5:d2:45:a0:b2:8d:d2:1f:a4:26:93:ba:
2c:b9:40:75:ea:19:05:86:bc:4b:10:17:b4:01:86:
28:eb:56:47:73:67:80:af:f2:e9:f7:6e:dd:d0:0c:
16:77:c7:14:8e:f8:a5:c0:3f:d7:bc:37:c4:90:b7:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:7B:40:A6:89:3C:DA:41:4A:9D:0F:EC:76:23:66:A1:B2:FA:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f127237-6a43-3085-bc35-1eef8f1a0075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:1f:b6:1a:3d:78:f7:59:ac:25:ed:b3:9b:f4:37:e2:0e:ff:
6c:9b:f7:45:f5:12:ad:a4:13:18:78:ed:fe:63:4c:d1:4b:c8:
05:fb:d5:0b:48:4a:d2:ea:4b:e0:ed:4b:aa:f5:f8:74:0b:5f:
c8:5c:b5:4c:8a:66:55:57:1c:ea:c2:9d:5b:11:ff:7d:e9:dd:
e7:02:21:a8:7f:c7:ba:67:eb:5a:9f:65:61:5f:df:50:9c:cc:
41:19:12:17:15:c3:81:ff:db:41:d8:d1:20:67:17:c4:d8:57:
db:51:84:a1:d4:72:55:2e:bd:44:76:ea:14:1c:95:78:d6:58:
98:98:94:8a:91:92:d6:97:8a:b7:80:0e:c0:3c:66:89:3f:9d:
dd:0d:cd:ed:03:3d:7d:f9:22:dd:20:50:01:29:03:7e:6e:84:
a7:34:b3:ac:a2:dd:c8:43:66:ef:b9:75:5e:1b:af:28:82:67:
6d:fb:ed:da:ab:47:97:be:1d:a2:7b:65:5d:a7:88:01:73:2f:
31:ce:25:19:83:a9:68:94:8b:e6:28:a6:67:94:60:b3:02:df:
8a:6d:7e:55:4a:59:2b:47:04:1b:1b:cf:29:21:4f:da:5b:e1:
57:e5:14:2b:bb:dc:f9:91:e7:57:9b:7e:12:5e:4c:c1:63:b4:
cb:7e:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:38 2025 by rpki-client