Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd002a88-e106-3d7f-a632-95323cbc55cc.roa
File: cd002a88-e106-3d7f-a632-95323cbc55cc.roa (raw, json)
Hash identifier: a4UuOJBXPv1vSPZCQg5WyN1mRdLYGbv0411WLRJ2BGQ=
Subject key identifier: 02:A6:E9:ED:B1:B7:0A:62:6F:80:35:A3:A5:42:F3:79:FA:A5:1B:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E793228DAB7AFE59E080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd002a88-e106-3d7f-a632-95323cbc55cc.roa
Signing time: Fri 29 Nov 2024 13:58:30 +0000
ROA not before: Fri 29 Nov 2024 13:58:30 +0000
ROA not after: Thu 27 Feb 2025 13:58:30 +0000
asID: 396575
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e7:93:22:8d:ab:7a:fe:59:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:30 2024 GMT
Not After : Feb 27 13:58:30 2025 GMT
Subject: CN=e87e09c2-509a-4465-a0f9-8817517cc8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:cc:1b:6f:48:53:20:a4:67:cf:36:fe:ae:
4c:65:2f:6a:ee:15:ec:e6:17:e7:ba:1e:0d:2f:01:
8f:be:10:61:4f:d3:14:e2:89:b4:06:49:e8:41:88:
e7:12:ea:6b:a4:4a:88:65:89:f1:fd:6d:19:f3:c0:
36:d1:78:14:3f:9c:24:a0:67:90:a3:43:59:6a:5c:
c7:3a:96:b4:df:af:a1:2c:8a:2f:6f:cc:49:52:10:
6c:cf:86:51:53:43:33:fe:af:57:9a:fe:b9:6e:b4:
b0:86:9f:f7:7a:a3:81:5d:56:97:49:fb:22:e5:e0:
bd:a7:42:f2:e9:eb:ca:c5:ed:7a:8f:f8:5b:44:c5:
b7:96:eb:39:e7:ec:44:70:13:be:66:2d:46:5b:69:
74:0f:7a:82:6c:72:44:c8:45:97:6e:f1:cc:61:72:
c5:98:c6:53:33:79:c6:ed:ce:c9:21:72:5f:16:8f:
23:ce:52:d7:f1:e7:3a:dd:dc:8f:0b:45:67:e5:29:
02:42:12:37:be:b2:8d:ef:69:9a:d3:67:80:11:d3:
12:33:ed:e8:31:a5:e5:4a:5c:b1:a2:6f:bf:26:f5:
3c:41:23:d6:8d:bf:1f:df:27:42:d9:bf:34:e5:4b:
fa:bb:80:f8:42:6b:7f:04:36:96:42:ae:8d:f4:81:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A6:E9:ED:B1:B7:0A:62:6F:80:35:A3:A5:42:F3:79:FA:A5:1B:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd002a88-e106-3d7f-a632-95323cbc55cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:80:b3:30:a1:b1:50:16:18:72:f6:77:c1:12:16:89:e3:59:
37:97:42:d4:d6:35:d2:e9:aa:53:bf:5d:53:38:39:5a:ec:f3:
93:6c:04:a3:6e:cc:99:d0:0d:5d:a8:c3:7e:6c:37:78:22:6d:
47:ec:ed:40:a8:c6:65:e1:ee:6d:66:41:d6:a7:d3:7e:d6:cf:
ed:38:18:8f:0f:23:38:8c:61:74:6d:fb:f0:5b:3e:7d:95:9c:
e6:ac:9f:c5:c4:58:8e:65:ae:81:45:45:0f:43:48:ff:5c:04:
dd:bb:00:59:bf:28:46:3c:2a:24:29:ff:dc:5d:53:ad:46:3c:
f8:9a:86:25:c0:86:45:04:db:dc:04:c3:e2:53:0e:39:79:6d:
17:7a:00:cc:c3:76:6e:9b:4b:3e:c6:28:bf:f2:46:eb:c6:f6:
e7:ff:29:df:ff:04:66:20:6e:66:61:03:ac:8d:0d:ba:af:bc:
7e:c8:41:a9:9e:e7:f6:c5:77:22:6d:3c:b0:c5:f8:7b:a0:5e:
9e:4a:d4:01:9e:32:f1:5c:24:80:6d:d5:c4:eb:ee:27:a4:5d:
98:a4:8d:d1:50:7c:7a:cb:fa:b2:b8:eb:85:e4:b5:8b:a3:c6:
cf:5d:d5:bc:a3:a8:7d:11:fc:d6:4e:00:81:c0:8d:57:5a:b3:
60:41:0b:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgKc+eTIo2rev5Z4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMFoXDTI1MDIyNzEzNTgzMFowLzEtMCsGA1UEAxMk
ZTg3ZTA5YzItNTA5YS00NDY1LWEwZjktODgxNzUxN2NjOGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp3MG29IUyCkZ882/q5MZS9q7hXs5hfnuh4N
LwGPvhBhT9MU4om0BknoQYjnEuprpEqIZYnx/W0Z88A20XgUP5wkoGeQo0NZalzH
Opa036+hLIovb8xJUhBsz4ZRU0Mz/q9Xmv65brSwhp/3eqOBXVaXSfsi5eC9p0Ly
6evKxe16j/hbRMW3lus55+xEcBO+Zi1GW2l0D3qCbHJEyEWXbvHMYXLFmMZTM3nG
7c7JIXJfFo8jzlLX8ec63dyPC0Vn5SkCQhI3vrKN72ma02eAEdMSM+3oMaXlSlyx
om+/JvU8QSPWjb8f3ydC2b805Uv6u4D4Qmt/BDaWQq6N9IG9owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKm6e2xtwpib4A1o6VC83n6pRszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QwMDJhODgtZTEwNi0z
ZDdmLWE2MzItOTUzMjNjYmM1NWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOAszChsVAWGHL2d8ESFonjWTeXQtTWNdLpqlO/XVM4OVrs85NsBKNu
zJnQDV2ow35sN3gibUfs7UCoxmXh7m1mQdan037Wz+04GI8PIziMYXRt+/BbPn2V
nOasn8XEWI5lroFFRQ9DSP9cBN27AFm/KEY8KiQp/9xdU61GPPiahiXAhkUE29wE
w+JTDjl5bRd6AMzDdm6bSz7GKL/yRuvG9uf/Kd//BGYgbmZhA6yNDbqvvH7IQame
5/bFdyJtPLDF+HugXp5K1AGeMvFcJIBt1cTr7iekXZikjdFQfHrL+rK464XktYuj
xs9d1byjqH0R/NZOAIHAjVdas2BBC6M=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:17 2025 by rpki-client