Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa
File: af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa (raw, json)
Hash identifier: JxzTfSCYP09yewaJk0u9zI31mM7ywXfNaarqRbtleso=
Subject key identifier: BB:86:AC:AB:8B:E7:58:2C:A5:4E:18:33:EF:D3:70:F6:69:C5:59:09
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB154276F3C4E477A46C200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396558
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:54:27:6f:3c:4e:47:7a:46:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=11cc79bb-c2f8-4c4f-b4bb-8ef52c779fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:84:c8:59:1b:e4:4d:35:20:9c:ae:3a:bc:
65:1d:d2:ec:8c:4c:01:42:65:21:ee:1e:9d:e7:6e:
8f:8b:fd:fd:4e:39:a3:bf:1e:e2:ee:f9:68:5d:0d:
d2:9e:5d:af:88:0a:cb:e6:32:c1:b3:f4:10:96:e1:
08:b9:43:0c:d7:63:bf:ad:26:f7:0e:21:85:02:0a:
73:aa:f2:c8:6b:b8:f8:9f:40:3c:9f:a6:ab:2a:42:
5e:17:70:01:14:0e:4b:3d:4b:b5:39:07:8f:84:c4:
90:0b:d9:4b:0e:5d:44:39:91:91:0d:40:fa:0d:ad:
0b:0d:5b:f7:3e:9d:20:c5:c1:b7:4b:e5:3f:c1:14:
1e:6d:d1:42:fd:18:ef:a2:8c:37:92:fe:3d:69:88:
65:18:b9:5a:77:88:c6:d1:bc:90:7c:51:88:14:f1:
72:f6:7c:3a:2d:c5:d7:87:9f:13:82:6d:52:84:6f:
b5:23:53:d5:6a:fa:b9:2c:f2:66:f0:4a:f9:5b:81:
5c:fe:f9:96:9f:c4:38:a3:7f:b6:b2:3f:4a:7a:fe:
bc:df:85:06:56:98:ec:54:00:45:15:dd:c5:62:b5:
b1:6e:ff:d9:8c:86:a2:6e:27:0b:44:03:ee:9a:94:
36:73:29:b5:ad:48:10:37:61:09:5f:f3:ce:eb:ed:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:AC:AB:8B:E7:58:2C:A5:4E:18:33:EF:D3:70:F6:69:C5:59:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:11:08:fc:a4:1d:92:38:83:92:9e:4b:49:87:50:37:6d:e0:
d1:0d:2b:e9:4e:9c:3c:eb:9c:67:cf:9b:72:e8:4e:ca:23:e6:
cb:9f:5a:6f:1b:f8:b3:24:a3:db:18:2c:bb:56:c1:9a:dc:c4:
c8:0c:be:da:a3:13:a3:26:ef:dd:1f:f4:61:0c:2e:b2:d3:f5:
f8:56:d7:d2:17:2f:87:32:ab:ed:40:14:2b:cb:44:8f:1b:fb:
e3:7c:ca:16:56:07:a8:9e:b1:42:83:4f:7e:22:9b:7c:a3:68:
8d:4a:75:4a:b9:5e:22:15:d0:2f:3f:95:ee:92:3f:ca:0d:69:
a9:60:e7:ea:d1:7a:18:a3:64:30:1f:79:37:e3:b6:51:4a:93:
5d:6c:f5:07:28:8f:2a:a1:5a:b1:c5:14:ef:17:eb:6d:90:13:
e5:4f:ac:9b:2e:60:08:8b:0f:4e:34:a7:c9:fb:ef:15:d7:6e:
10:82:1e:a2:f0:43:24:8b:6a:78:5d:c3:3b:f5:89:2f:1e:9d:
a4:db:e0:8b:bc:aa:e6:b1:86:4e:67:4e:29:a5:d4:27:37:e2:
0d:06:10:23:6d:64:06:c1:ab:51:a6:94:32:2c:83:9e:88:0e:
a6:db:69:9b:21:a5:91:cd:75:2c:17:25:0b:c7:49:87:03:b7:
d4:cf:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:03 2025 by rpki-client