Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa
File: af27fbd1-fccc-393f-ad38-224694a6aa8a.roa (raw, json)
Hash identifier: TO6VWx1b7AvNAIy3jg6qvqH7Sk80UJpLWdh6C/7TxsU=
Subject key identifier: 8E:84:7C:9F:87:15:D4:1E:1F:98:E0:E4:E4:22:24:AC:6F:CB:8E:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB162B31F9FA84FD55F3D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 397211
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:62:b3:1f:9f:a8:4f:d5:5f:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=97f709a8-271f-4ab3-b004-b6ebfbd8da81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:f4:20:66:46:74:40:11:93:7f:c6:2d:30:
b2:51:86:6b:8f:22:69:9b:05:55:9f:c2:12:c5:96:
1e:6e:b0:00:2c:66:d0:da:da:1d:b9:21:83:51:83:
c8:56:1d:5a:ba:c4:d3:c1:8d:bd:c2:b0:5b:33:ff:
5f:f0:1d:e5:20:1c:f3:88:51:16:01:ee:0a:62:07:
ab:f0:d0:7a:52:5c:fd:ad:9e:fb:6b:06:71:35:70:
99:39:82:54:1c:1a:b6:25:81:a3:f6:63:c4:b5:b3:
0a:d7:fa:12:a5:23:c6:bb:93:75:ab:fa:39:e4:39:
df:e7:9b:f7:28:65:a1:69:1a:3c:8f:a9:4d:0d:f6:
4c:ba:4c:89:3b:50:66:d4:a0:dc:79:ef:82:1e:3a:
51:cb:35:2f:d8:64:e9:5d:35:b3:23:cd:4c:7c:b0:
df:3b:cd:04:05:3b:55:ae:95:16:12:fe:0f:c9:da:
ba:69:5c:a8:72:ea:2c:92:5b:3a:33:0b:59:c0:5b:
5c:5d:82:98:fa:91:19:53:0a:20:8f:61:b5:e9:e1:
2c:46:1d:8a:3d:b9:83:db:28:2b:f6:9c:f1:2e:1b:
0f:2d:d2:62:09:00:84:53:f0:3c:13:42:3d:73:f5:
0a:90:0b:c4:e3:2c:10:36:5b:65:61:fc:b7:96:a9:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:7C:9F:87:15:D4:1E:1F:98:E0:E4:E4:22:24:AC:6F:CB:8E:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f2:54:ac:a6:2f:32:57:8c:80:73:68:6e:e4:77:f1:0c:43:
8f:42:aa:1c:08:a8:3a:e6:7c:db:f1:8d:1b:fc:ad:3b:a9:fb:
58:bb:80:bb:8d:69:ee:d6:2e:0f:cd:33:85:be:d9:25:ac:07:
72:62:6d:4a:73:6b:9b:cb:18:c4:84:49:7c:7a:39:7d:23:ce:
2a:8f:87:9b:77:de:aa:0c:07:ad:83:65:5a:63:7d:37:0e:3e:
c6:45:6d:00:18:45:49:17:e6:58:43:e1:f5:c9:2b:21:38:52:
37:5f:af:fb:9c:36:8b:92:89:95:f1:a9:eb:dd:05:2f:6a:a3:
bf:57:60:a4:c2:60:30:d5:2a:41:21:ce:89:9b:ac:24:c2:c2:
a5:a3:04:b9:35:af:19:08:60:9b:e3:6e:b1:1c:25:cd:33:3e:
80:9a:4d:59:6c:8d:8f:bc:69:01:ef:f5:da:95:28:22:02:75:
95:20:21:b8:0a:f6:18:16:27:b8:44:77:f1:48:28:5d:be:43:
59:f1:b7:ee:90:4e:83:2d:00:2f:68:49:1a:98:a1:ac:2a:e4:
27:79:01:f2:51:66:ec:45:21:f8:48:8e:35:33:3c:4b:7b:89:
af:3f:1d:71:0b:bb:7f:17:1d:67:53:52:7b:35:d1:9e:ef:90:
7f:7b:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:42 2025 by rpki-client