Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa
File: cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa (raw, json)
Hash identifier: 2VIxEzoQ03zP1COEiLBH9+n6a3ZQa6MwViydPtbpYqE=
Subject key identifier: 7A:6B:F0:C5:5F:CD:15:E8:FE:49:2B:FB:8A:9E:41:C9:95:69:8F:30
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB154B5F68AA7B2BC0D0E5C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396559
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:54:b5:f6:8a:a7:b2:bc:0d:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=02aefbc6-a409-4a79-8118-07e651b187d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:51:b1:91:48:a2:e7:b8:ab:df:6e:cc:09:95:
ef:2b:07:81:7f:06:fa:fb:34:05:19:3d:4e:76:1e:
91:94:8b:5b:db:f9:0e:97:fa:38:e2:ce:5b:09:2f:
3e:90:cc:41:5d:50:6f:2a:a6:bd:e8:76:9a:59:64:
df:9f:c6:b0:bb:d9:0a:5d:f1:3b:25:0a:f5:77:fe:
60:22:a2:3d:5a:d8:a2:fd:11:37:36:cd:e8:99:4d:
3b:3f:18:f8:8d:dc:9b:74:6d:16:7a:c2:5e:a2:a7:
0f:1c:39:56:c8:52:64:20:cd:05:8a:e6:d3:28:a8:
fa:9d:10:71:44:7c:d7:39:2d:89:d7:c0:31:45:89:
0f:cc:4b:2a:63:97:87:e4:b1:34:bb:c1:b8:5f:99:
fb:b3:71:48:9e:dc:65:a7:cf:1d:0b:8d:55:66:2e:
b7:3c:47:4c:a2:02:2a:0e:a1:03:2a:54:15:24:67:
df:8f:6c:a7:99:29:fb:d5:88:b4:ac:f7:35:2d:eb:
d4:8b:37:22:ed:a3:d9:a2:dd:15:38:22:84:af:6b:
2c:e4:52:36:cb:f7:3f:5d:70:91:f6:58:47:77:4f:
96:71:01:c9:43:dc:49:ae:a7:f5:3b:81:f5:fe:1c:
1a:93:74:6a:2b:d6:ac:8e:4c:0e:e6:29:4e:34:db:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:F0:C5:5F:CD:15:E8:FE:49:2B:FB:8A:9E:41:C9:95:69:8F:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf9f907f-e9cc-3a62-ac05-03b4e7191dbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:eb:a6:cc:c2:bf:96:29:22:ff:c9:92:85:68:88:da:41:e5:
af:a9:fd:8d:d5:e0:62:d8:50:ae:8d:35:f0:b8:64:93:4c:ea:
5d:77:a9:8d:93:bc:ac:b3:0d:b5:e1:54:21:56:86:08:4a:27:
10:df:3e:5b:90:de:83:d1:c9:39:57:8b:65:6c:ff:44:2e:c8:
b4:56:41:88:af:9a:9d:41:3a:6b:c4:b8:eb:31:e5:96:1c:55:
dd:6e:43:68:db:d7:23:5c:1f:82:1f:1e:2d:2a:ff:a0:bd:90:
ba:7b:6d:75:25:ab:6d:2f:af:ff:29:a6:39:92:89:5c:9e:54:
a0:d9:1c:79:bd:fe:6d:f4:91:07:1e:e2:20:50:9e:da:c5:ba:
59:89:3d:ff:4b:2c:62:54:14:03:62:54:d7:49:c8:fa:ca:d7:
af:98:bf:94:19:cd:61:b5:4c:6e:c3:d9:9f:c6:6e:0a:95:81:
69:a3:9f:85:fb:b4:48:0d:66:15:c0:70:d4:4d:d1:99:61:39:
30:bd:0b:66:14:b2:9a:d0:55:d5:fc:db:9b:b6:80:05:a6:79:
c7:a3:37:d2:4d:14:db:f2:aa:5c:7f:9f:38:ea:09:a0:a0:81:
de:49:40:66:d1:fb:fb:ba:d5:c1:ce:56:93:95:ea:44:d4:8e:
11:cd:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:05 2025 by rpki-client