Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa
File: aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa (raw, json)
Hash identifier: 6Zi7exxEdDE6VQZs76jBQgUdBoLZehyv7A7HhxU+yyE=
Subject key identifier: E0:38:1B:8E:BB:AE:CD:03:23:20:94:DF:F5:10:A3:BB:61:E7:E8:EA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB158D23B1FCA006756C100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36625
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:58:d2:3b:1f:ca:00:67:56:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=4c930e6b-6c41-46f3-8eb7-4889e7ae4a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:44:a3:61:2e:4a:9d:7c:bd:60:6a:82:fd:
87:ff:0f:a7:b6:0d:7d:62:bd:d7:d3:a9:bc:2a:61:
e8:f1:41:87:03:3a:99:bc:e6:6c:cc:25:a2:11:2b:
7f:93:12:4a:d1:c5:1b:da:62:54:b3:0b:91:7d:c4:
a0:b8:6f:fa:5f:56:51:6b:51:41:14:48:4a:c5:50:
e2:85:7d:27:d9:ff:f9:c3:73:96:5b:d1:19:90:ed:
24:d3:49:d1:c1:8a:9a:32:44:e4:e7:95:83:3d:4e:
18:04:1c:b9:f7:6a:6b:00:b0:42:81:ec:be:c6:f9:
31:b2:e1:92:f3:34:e2:58:31:b5:73:8a:9c:c1:84:
ba:60:fa:72:b8:09:b2:de:76:16:da:c6:83:23:7b:
48:92:42:ac:7c:30:23:f5:da:c7:f6:99:61:76:20:
65:76:ae:46:16:07:7f:90:6b:d4:10:e4:85:e5:83:
77:25:eb:2e:f9:51:cd:07:3b:4b:e2:41:59:ec:e5:
c1:66:29:5a:2b:b1:f8:aa:83:67:39:03:6d:c2:b7:
13:25:e7:17:1c:1d:84:ab:40:75:a2:2e:43:a2:f8:
be:df:6c:85:97:59:4a:8e:9e:cc:1e:70:5a:c8:5f:
fc:e5:70:b1:c6:80:f2:b2:fc:39:f5:8a:d1:3c:37:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:1B:8E:BB:AE:CD:03:23:20:94:DF:F5:10:A3:BB:61:E7:E8:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3f:4c:31:31:f7:45:ad:1b:af:2a:20:bc:01:ee:f8:7f:2c:
07:43:a1:87:a3:01:90:c5:48:1a:25:0f:70:e4:f6:4b:c8:a5:
ff:77:e2:45:21:d6:54:7d:26:1d:bb:c0:e9:fa:fd:48:a1:eb:
b4:83:5b:3c:f5:9c:ae:8e:1d:d1:21:a9:7b:b7:50:5e:d0:e7:
a2:b4:5d:56:ba:5d:5d:15:b3:78:87:f2:5d:c0:09:a5:bf:81:
9a:ad:95:2e:82:3d:72:12:31:15:3f:92:aa:d4:2c:61:bb:eb:
a5:af:27:af:b0:0e:83:e9:b6:14:e6:06:6a:75:19:ff:72:1a:
ae:0a:26:bc:00:9f:5d:35:d0:35:f3:71:27:98:0c:d6:05:21:
9d:e7:3e:ba:72:a7:62:dd:9e:63:5c:f5:04:ed:b6:76:e5:6c:
2a:1b:5e:9c:9b:09:84:77:d6:01:7c:ff:6c:83:23:2e:aa:b3:
bd:83:6c:6d:57:0c:23:46:f0:67:20:6f:c5:98:ee:32:49:66:
69:b7:c6:b0:2e:b2:d6:6e:6f:71:c1:1d:1b:37:91:c6:43:3f:
32:e3:e1:6e:6b:b6:f3:27:09:9f:af:18:31:3f:21:64:18:49:
48:5f:23:1d:35:79:1a:d2:1b:dc:28:ba:d4:c3:28:bb:26:cd:
a0:e7:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:28 2025 by rpki-client