Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa
File: afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa (raw, json)
Hash identifier: Gw/KzG+Knksw0G6rgeYk8gTjik1AjgU3CV5O5V55878=
Subject key identifier: 8E:A9:09:54:11:DC:62:52:73:0A:33:D4:32:A7:6F:8D:CF:73:35:4C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15DB78BCCFA0A870C9780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396544
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5d:b7:8b:cc:fa:0a:87:0c:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=cc555d07-d2f9-48ba-b7b1-be1bd75ea501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:4f:80:4b:65:b5:83:6c:3a:76:10:10:d6:
17:15:8d:c2:ce:c2:1e:33:bf:8a:af:78:fd:85:5b:
f8:e1:33:ee:6b:d0:bf:6a:6f:d1:0b:9f:60:9c:c1:
e5:93:6a:2e:23:18:f3:30:ca:54:be:a4:85:7e:f8:
4a:60:a8:01:ec:62:95:1d:ca:95:a4:89:f4:54:23:
e2:ed:1f:79:33:93:66:e2:f7:fe:d6:7b:7f:14:07:
c5:96:97:26:f7:e8:6b:3e:ba:43:0b:e1:9d:28:c9:
1b:b6:5d:6a:e9:6f:b3:e7:c7:85:89:a1:79:7c:54:
09:40:eb:f9:9d:7a:e1:2e:77:38:9b:4e:fa:ef:cd:
d8:09:62:44:9c:3a:44:36:2e:0c:08:03:e6:4d:72:
05:b9:d4:41:2f:b2:c5:19:9a:c2:a5:35:1e:b4:3f:
24:92:0c:2e:dc:81:63:69:d8:e2:20:dc:33:f4:51:
ee:b8:7b:18:3a:c4:9a:6d:35:7e:01:8c:e5:a3:d3:
9e:06:d2:e5:4d:a9:59:68:0c:ac:77:a4:28:22:6d:
1c:44:7f:e6:0a:35:db:02:fb:af:93:7a:dd:02:12:
e3:38:b0:1a:65:5b:f0:61:7e:86:c0:65:f3:71:6d:
89:87:5a:91:dd:b2:2b:2b:f7:14:b2:1f:cf:e8:41:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A9:09:54:11:DC:62:52:73:0A:33:D4:32:A7:6F:8D:CF:73:35:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd4f2a4-cb88-3571-9db5-0837ac324a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:38:ad:0c:f6:3d:8d:33:c5:c6:97:7a:12:36:2a:1e:0e:96:
d7:0c:d8:24:43:54:a7:21:89:7f:3b:cc:d2:61:85:31:3c:ec:
64:66:31:81:80:0d:94:57:cb:d9:69:5a:3f:83:32:de:4c:34:
cc:16:c9:b4:5d:8a:bf:66:e9:ce:99:ee:1b:d9:bc:b9:38:fd:
af:0a:a2:9c:da:96:e7:7e:de:76:f8:64:dd:da:c1:6a:5d:61:
87:c9:17:60:cc:4c:a9:e4:8c:96:03:c2:b9:a5:5e:f4:df:c7:
2f:f6:01:e3:94:b4:f1:e1:70:4e:5f:a6:b4:d5:0b:f6:5c:ff:
fb:65:3e:9c:c9:73:cf:ab:f7:34:09:2e:b8:e3:dc:6b:e2:c0:
03:24:60:56:e1:3c:0d:7e:6b:0c:8e:94:a6:62:d9:3c:1e:c8:
d3:2c:bb:37:fb:ca:34:f3:2f:16:b6:50:ac:03:b3:5e:cc:3a:
02:a6:35:c4:3f:c6:80:34:b7:7f:14:40:98:3b:66:f8:ac:bd:
68:d2:4f:2d:b8:8f:d1:9f:e5:7d:6a:d1:01:6a:26:af:72:df:
5e:75:d1:6c:1b:e0:0e:7e:35:78:be:d7:4b:5f:fb:d6:39:65:
d0:fe:53:2b:d9:fb:68:d1:93:5e:72:0f:a5:d2:97:db:02:a6:
91:eb:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:00 2025 by rpki-client