Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa
File: c5240384-7952-33e0-8cbc-af1e1a640993.roa (raw, json)
Hash identifier: X7aFRw3Pk3aJAf9TtDiP9rOq6QyExhp3pNMXlQDzTgE=
Subject key identifier: C5:8B:FC:17:17:65:40:6B:3D:E9:E3:E8:D1:40:4D:EB:B8:14:14:0A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15D6041493D16C37E1F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396564
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5d:60:41:49:3d:16:c3:7e:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=b923cc4d-d07d-4407-bb83-f5b1f580d7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3f:33:f4:75:47:ee:dd:69:5a:22:c9:9e:b9:
51:fd:2f:50:48:90:c4:6c:70:aa:b2:03:65:60:b3:
b0:cd:7c:24:d3:fe:88:78:a8:f0:4c:2d:af:46:90:
b4:82:5d:71:22:b6:38:17:6e:20:e9:b0:28:9b:53:
16:82:d4:57:a4:a3:a1:35:82:9f:a1:86:08:8d:7c:
63:40:e4:ec:25:7c:88:e7:45:e1:49:ec:4e:ae:1d:
77:58:2c:b0:99:df:87:44:3a:43:0e:0a:50:ac:38:
c3:6e:63:fd:2a:27:6e:9c:05:44:0e:2c:9f:04:63:
e6:11:05:83:01:19:ff:cb:89:a6:64:19:f3:c4:a5:
a2:eb:01:3b:85:9c:9e:36:04:25:4a:c0:52:f1:6c:
a8:1a:3b:71:b8:6b:35:77:5f:25:a6:89:57:b8:97:
61:da:7e:c1:d0:ba:62:85:b2:5d:32:1b:e0:21:b1:
b1:5d:28:36:f0:fa:60:36:ee:6e:b8:32:16:e5:c3:
e1:00:a0:5d:34:cc:e7:0c:bf:89:db:c1:26:0d:a3:
6d:d7:ba:d7:19:31:34:97:c5:c6:3d:07:bc:70:e3:
ff:d1:f0:87:ca:73:45:65:fe:07:80:81:f9:45:6e:
66:17:54:ed:83:ea:85:5b:59:57:8e:0c:7c:14:5a:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:FC:17:17:65:40:6B:3D:E9:E3:E8:D1:40:4D:EB:B8:14:14:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5240384-7952-33e0-8cbc-af1e1a640993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:86:a7:4d:23:43:36:f1:e0:27:6f:79:ae:3c:04:0e:57:1a:
34:49:2a:9b:6a:bd:6a:44:a8:9c:11:4e:dd:c2:d4:35:2f:9e:
75:cf:ed:f7:07:a6:ca:91:0b:9e:ff:d2:c5:ab:8c:29:75:df:
d8:34:e1:24:0f:ff:9f:7e:0c:77:c1:65:59:d1:18:8e:87:70:
32:57:d4:dc:3c:99:a7:c5:32:5c:db:4f:c9:93:e8:15:c9:95:
8b:3d:10:0b:77:1c:f8:ad:5a:f6:31:12:33:2b:dd:a7:05:e7:
01:57:0c:f4:de:8d:40:8b:89:7a:48:81:31:df:d4:81:0d:e1:
0d:b6:8a:d4:6c:51:ed:d1:03:b8:c7:1f:75:10:68:56:23:ba:
dc:e9:7c:fa:93:1e:58:42:48:33:f5:c6:19:2d:6d:74:b3:4a:
c5:98:f2:89:60:93:26:f8:4f:8b:b7:9b:bc:56:5a:f8:35:5d:
31:4b:8c:d4:f5:3f:28:f7:04:e4:81:99:b5:db:99:fe:ce:34:
bd:49:02:2d:b8:bc:e0:8f:21:e5:69:26:72:25:c6:3e:fb:a2:
df:cf:a2:c6:5f:4c:83:25:16:dd:3c:46:0a:d8:8f:f1:1c:c8:
c7:35:83:c1:96:4a:64:38:3d:ae:c7:68:f0:55:d0:92:ea:22:
d2:eb:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:56 2025 by rpki-client