Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa
File: c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa (raw, json)
Hash identifier: vGydZJjvxD/zJdni3Enwo1UYZ+M2BRjBtlGivQGrn0Y=
Subject key identifier: 29:EE:53:D7:AE:46:A4:DD:B2:E4:94:F0:88:92:D3:D5:71:03:FC:88
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB152F7DD8B13A72E5CFC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396575
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:52:f7:dd:8b:13:a7:2e:5c:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=ce0c4c1a-a3a6-44de-9c6d-4eae2a9515ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:ec:6c:75:3b:46:7a:0d:28:45:88:51:d5:
2d:4a:5b:0d:74:c2:95:a6:02:e2:79:0c:0a:c2:da:
29:66:99:84:2a:d4:88:e5:ae:1d:7b:25:f2:41:9a:
7e:59:a7:92:f3:2c:dd:90:b7:35:6f:79:a5:4f:be:
21:15:38:c6:02:0b:81:15:8c:87:2a:3e:5a:88:d4:
8a:fe:c2:4f:c4:cd:36:35:3e:74:bd:27:6a:b9:a6:
5a:27:06:b7:39:b6:06:3e:b3:12:36:3e:4e:4f:40:
89:b1:5e:90:5c:f3:4e:5e:b5:f3:cb:37:1a:fc:3e:
37:b9:87:4c:dd:b8:a4:85:ab:98:6e:9a:68:79:c1:
e0:41:bb:a1:fc:ae:1b:62:b9:ef:74:77:d2:87:35:
4c:48:11:19:1d:35:8a:da:9a:68:9d:d3:9e:3c:29:
1e:84:04:6b:97:54:9b:29:6b:dd:a4:93:73:49:8c:
47:be:48:47:70:8b:92:49:b6:04:15:d8:14:27:69:
cc:a7:8e:07:ff:0a:44:82:61:a8:7c:80:54:d2:b7:
a3:ba:a6:86:fa:aa:b9:99:fa:17:54:44:0b:f9:c4:
b6:7b:a8:4a:e4:52:8b:12:1b:9c:6e:4b:16:96:74:
6b:a4:ec:c0:12:f1:d1:23:d4:a6:4c:3b:3e:ed:9c:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:53:D7:AE:46:A4:DD:B2:E4:94:F0:88:92:D3:D5:71:03:FC:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:6e:1d:0d:b6:17:92:f9:c5:44:5a:c0:ac:62:f9:73:f7:f8:
01:f8:9c:db:fa:4d:3f:ba:ca:93:96:71:c8:69:09:56:8e:50:
e8:14:37:1d:60:09:80:8b:bb:fa:d3:67:cd:63:b6:92:17:bf:
e6:bc:f2:f2:26:73:49:85:1a:56:dd:ef:37:94:3c:24:95:50:
c7:41:3a:39:2f:f6:2b:59:37:71:15:05:d4:18:09:3b:47:3a:
8e:af:de:8f:fd:c6:ac:e7:9f:de:49:1d:99:d8:2e:a9:be:10:
27:7d:6d:04:c7:13:ef:e5:52:39:64:17:0b:c9:8a:af:9a:9a:
e4:ff:77:bd:bf:26:c5:a7:f1:fd:49:99:dc:01:30:3d:73:fd:
bc:38:03:c8:3b:11:d7:cf:27:75:fc:9a:b2:8c:2e:4e:04:03:
3b:eb:2e:74:0a:0a:3c:14:5c:7e:8e:aa:5a:5b:44:49:86:1d:
37:0f:a1:bc:01:78:8f:71:03:47:78:34:e1:1e:8f:f4:96:3c:
85:dc:4a:ed:28:2f:5a:ed:96:67:7d:1c:7d:b7:f9:de:84:d1:
b5:ba:4d:69:eb:03:ff:e0:a3:5e:bf:36:59:d2:b2:26:3f:6f:
16:b7:10:09:5f:ce:63:59:bc:f1:54:fc:fa:4c:f5:78:5f:f8:
a5:23:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:13 2025 by rpki-client