Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af65f0a9-d123-30d9-8053-3f2d00cc3199.roa
File: af65f0a9-d123-30d9-8053-3f2d00cc3199.roa (raw, json)
Hash identifier: 12twaLDLiv33IRrKuk21bLZWWZl9StJ9ZvX2zEBVkeE=
Subject key identifier: 6B:76:3E:E6:EF:D5:50:07:FC:86:4F:5C:A5:36:62:D0:9E:8D:06:C0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA9817F49A8330CEBA680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af65f0a9-d123-30d9-8053-3f2d00cc3199.roa
Signing time: Wed 11 Dec 2024 15:18:11 +0000
ROA not before: Wed 11 Dec 2024 15:18:11 +0000
ROA not after: Tue 11 Mar 2025 14:18:11 +0000
asID: 36631
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a9:81:7f:49:a8:33:0c:eb:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:11 2024 GMT
Not After : Mar 11 14:18:11 2025 GMT
Subject: CN=846261f8-bbaf-4dad-bc13-a193987382cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:2a:f3:7c:e1:cd:b9:29:90:76:74:20:48:
9b:98:47:d1:b3:61:26:b9:31:a8:d8:77:85:bc:61:
9f:7f:f3:09:8f:d3:67:9f:02:b9:9f:04:df:cd:74:
8d:87:9c:55:61:0f:df:49:a5:d7:58:8c:27:d1:f2:
94:73:85:d6:76:69:74:30:fb:f2:79:bf:a8:26:a4:
45:ed:2d:62:43:98:77:3f:ca:21:61:84:f2:10:1a:
7a:93:b3:9d:01:2d:db:fb:4d:83:b8:93:71:ef:44:
ec:03:ee:5a:30:ad:4a:5e:ac:a3:cd:29:98:57:45:
7d:0e:a1:5e:d9:ef:6b:6f:d9:a0:8d:a8:e4:1f:39:
28:ad:b5:2e:84:a5:3e:6e:e4:15:db:79:37:5d:a6:
6e:50:1d:2e:9b:c3:86:a4:f0:e3:a7:9f:38:01:a0:
78:35:b4:b8:49:a9:12:1b:92:6a:2d:c5:26:91:1f:
72:c3:8c:d7:7d:35:42:03:fb:b8:e1:6f:cd:52:1e:
68:cf:3f:e3:52:e3:bc:40:66:33:19:72:9e:9b:5e:
68:10:56:c3:7c:0a:0c:8d:67:43:00:68:6b:cb:f8:
49:d1:c2:18:bf:01:18:64:cf:0d:1d:88:a3:7f:e5:
1c:64:21:08:20:c5:8e:bf:a0:87:2d:a6:24:bb:49:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:3E:E6:EF:D5:50:07:FC:86:4F:5C:A5:36:62:D0:9E:8D:06:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af65f0a9-d123-30d9-8053-3f2d00cc3199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:75:9f:45:96:e7:65:8d:29:85:0c:8f:44:f1:3c:a0:44:5c:
25:07:e5:63:d7:fb:ad:31:ae:af:78:a1:e2:42:44:bd:f5:48:
71:85:6c:07:8c:68:f2:c0:5d:8f:aa:5c:02:f8:b6:42:9b:44:
a0:f2:b1:63:f3:77:bf:e6:97:5c:11:a0:6c:a2:5b:c6:df:17:
81:83:6b:3b:de:4d:31:d6:8d:b4:f2:c5:7f:44:5d:ff:6e:a5:
02:d0:00:48:d6:3d:c7:99:10:3b:9a:f2:00:ec:97:34:ac:cb:
a1:ea:23:55:9a:5e:59:a4:96:68:ea:b3:84:5f:74:cc:f6:18:
1c:19:81:57:de:8f:56:8d:6c:cb:67:9b:0b:fb:ab:d7:73:78:
d3:bc:bc:df:51:23:e0:ac:8f:2b:73:4d:6d:d5:24:63:3a:f3:
6e:16:b3:0d:83:a1:f7:fa:60:ce:22:19:f0:07:83:44:c9:12:
c5:6d:c6:ae:8b:b6:2d:5b:d0:83:9c:e7:ec:d8:56:a2:04:d7:
0d:17:5f:08:20:a1:3d:b9:f6:d6:d3:ba:99:d0:67:b7:c5:17:
de:83:fd:eb:64:fa:77:24:04:15:83:62:24:8a:bd:8c:cd:7b:
0c:04:d1:a6:b8:9c:fc:48:0a:3a:66:28:39:05:18:4b:94:7c:
7b:52:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:21 2025 by rpki-client