Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb41ae77-c856-3d05-a096-c689bc2dd8f0.roa
File: bb41ae77-c856-3d05-a096-c689bc2dd8f0.roa (raw, json)
Hash identifier: JacK2Ov88QiA/bngKTHpK/RXnn/tNxusrNUyoBclOKA=
Subject key identifier: D0:83:8F:17:8F:F0:9E:58:E1:15:A2:8A:76:81:28:D8:45:9A:CD:E1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73F307E35A973CB6C74E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb41ae77-c856-3d05-a096-c689bc2dd8f0.roa
Signing time: Fri 29 Nov 2024 13:58:36 +0000
ROA not before: Fri 29 Nov 2024 13:58:36 +0000
ROA not after: Thu 27 Feb 2025 13:58:36 +0000
asID: 396603
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:f3:07:e3:5a:97:3c:b6:c7:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:36 2024 GMT
Not After : Feb 27 13:58:36 2025 GMT
Subject: CN=2beeae87-7fb2-42be-bd18-c1911f8aee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:e8:2c:33:d6:86:e6:46:10:22:01:c3:73:
eb:05:cd:00:a3:c5:87:40:4b:e3:a6:e6:85:5a:9a:
26:aa:29:bd:da:6e:0a:dc:08:f0:56:c4:6c:27:3b:
74:ca:9f:4f:c2:d2:41:df:d0:c5:b0:c2:6c:2b:6c:
5b:a9:8a:88:61:3d:b9:24:3a:d4:bd:27:a4:16:3e:
cf:43:12:37:41:d0:5a:8f:f4:d1:8a:7f:95:99:e5:
d4:31:94:ff:9b:a1:57:db:87:19:37:cd:94:38:12:
a6:0f:f7:39:06:59:1e:6b:41:30:39:2c:68:ee:5c:
73:52:61:53:89:9d:89:e3:2a:e7:46:f2:64:d3:75:
e7:50:0f:8e:14:d7:d5:01:77:be:e5:81:6d:98:bf:
50:47:82:ab:28:e6:20:a0:39:cb:ab:6e:97:e8:f4:
08:7a:f2:26:5d:e2:18:d4:b5:81:3c:d9:6a:94:45:
4a:2f:6b:84:fd:03:87:11:81:4c:f1:65:e9:6c:90:
f4:66:23:e9:79:95:20:af:08:d9:ef:9a:a0:6c:a8:
bc:3b:40:73:e3:86:aa:a7:f6:69:d7:2f:5d:1e:2d:
d7:e4:32:9b:9c:cf:ab:27:12:43:41:9c:98:60:18:
3c:2f:a6:23:12:a8:5f:e9:a8:e8:93:1d:86:75:ea:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:8F:17:8F:F0:9E:58:E1:15:A2:8A:76:81:28:D8:45:9A:CD:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb41ae77-c856-3d05-a096-c689bc2dd8f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:31:25:a8:df:fa:4a:6f:70:1c:9b:0f:75:83:7b:0c:72:c3:
40:0a:2d:ec:f9:5f:4c:82:7e:55:c1:74:41:1b:00:b1:05:ea:
2a:51:c7:3a:c1:c5:b4:49:3b:c0:2e:23:6b:6a:86:32:6c:b5:
de:37:6c:2e:47:b1:9e:77:f8:d5:62:ad:f7:80:18:b5:7d:4b:
ad:fd:5c:fe:a5:3d:6a:6e:75:3b:73:49:17:86:9e:23:d9:4f:
31:d8:b2:da:23:a2:be:92:8f:f9:5a:03:b8:a5:1e:9c:6b:8b:
b2:b8:01:d2:4f:88:b7:91:4c:39:99:b0:07:da:09:bd:b6:35:
4c:1a:2a:0b:bf:94:ad:4f:f9:e7:4a:1d:f4:94:f2:6c:27:ed:
43:f0:b9:2c:2e:72:3c:16:29:dd:09:3c:cc:04:f1:7f:49:d8:
e8:5d:92:73:f5:5e:bc:ed:4f:a4:29:18:67:a2:4a:bf:f6:6b:
8e:22:5c:81:e4:de:c7:fe:15:98:cf:91:aa:1d:cc:4a:d2:c9:
2e:f2:77:51:46:ff:0b:c0:57:17:8e:9a:d9:44:8e:e7:c0:b9:
87:76:85:7c:7c:26:bf:e3:bf:61:68:7f:a7:92:33:b3:8a:1e:
8d:7c:da:f7:1c:b2:ca:c7:79:64:a5:ab:ef:51:19:11:38:40:
2a:66:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:59 2025 by rpki-client