Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1fbbf94-c9d1-3503-9cbb-7ab4f3320e5e.roa
File: d1fbbf94-c9d1-3503-9cbb-7ab4f3320e5e.roa (raw, json)
Hash identifier: LvvY/iMKyQ3MjTrgKOBW+nD4yFXwd1zPQyqeAMcN+Yo=
Subject key identifier: 75:D3:AB:1E:26:0E:1F:43:3F:84:01:5B:93:09:8C:01:63:AC:72:8A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E7BA2C31BEB9C5B5A080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1fbbf94-c9d1-3503-9cbb-7ab4f3320e5e.roa
Signing time: Fri 29 Nov 2024 13:58:30 +0000
ROA not before: Fri 29 Nov 2024 13:58:30 +0000
ROA not after: Thu 27 Feb 2025 13:58:30 +0000
asID: 36624
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e7:ba:2c:31:be:b9:c5:b5:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:30 2024 GMT
Not After : Feb 27 13:58:30 2025 GMT
Subject: CN=b4cc981a-0c25-4fca-a9d7-47045f979dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:0d:4e:7c:d8:18:e9:21:bb:25:da:ca:0e:
62:a0:20:54:44:f9:0a:97:05:b1:31:fb:17:cc:5e:
35:93:02:ea:62:0f:cb:c2:6b:01:22:bd:37:06:3d:
c9:21:e3:57:7f:51:cb:25:76:5c:f9:95:5c:95:12:
44:a2:0b:b9:ed:46:d4:47:fa:d1:0b:cc:49:47:36:
5c:3f:9c:3e:e1:98:82:2b:7d:ef:8e:58:ad:35:3b:
e7:a8:59:c7:c8:e0:4e:86:bd:db:16:5d:17:b9:f0:
d6:e9:9b:8e:e2:a3:67:9c:54:22:65:e1:62:3b:1b:
45:78:34:45:d9:b6:3e:31:50:6e:b9:09:96:06:3b:
14:93:c6:cf:db:67:3b:35:9e:bf:83:5c:b2:63:6d:
c0:55:2a:86:15:0f:e1:12:57:b2:52:fd:09:24:51:
b6:3d:83:cb:ff:be:64:5a:fa:fc:d7:e6:46:a1:06:
8a:08:ba:95:34:25:79:83:76:6e:2a:3b:e5:44:aa:
af:80:ac:93:30:af:6a:f4:b9:ed:18:7f:48:4e:86:
90:49:ae:aa:e0:06:42:0e:b8:d3:01:33:61:6d:8a:
2d:b8:41:97:9f:ae:4c:b8:db:97:fc:1d:5c:ef:e4:
66:4d:cd:88:6f:21:53:81:56:ee:73:65:ff:da:5d:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:AB:1E:26:0E:1F:43:3F:84:01:5B:93:09:8C:01:63:AC:72:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1fbbf94-c9d1-3503-9cbb-7ab4f3320e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:63:43:85:1b:91:1f:2b:11:b3:e6:a1:b8:d8:d3:bb:39:c0:
bb:1e:08:f4:6b:0e:04:a5:fb:87:22:c4:84:46:4c:4a:2f:47:
a2:48:9e:cc:e3:ac:bf:af:e0:23:c7:cb:c7:75:7b:8c:6f:a3:
c1:97:00:2c:3a:ae:8b:a4:4a:f6:3d:ae:2d:56:e3:0d:f9:9a:
48:a3:72:d0:40:a6:ff:ab:96:cb:61:e6:6b:ae:7b:27:c9:87:
89:5f:c9:9c:a1:2e:54:e9:83:01:b7:1f:79:87:80:f6:42:62:
fe:5b:95:af:11:05:96:40:87:d2:19:f3:f2:c6:ff:c5:26:78:
2a:57:0d:99:48:cc:1d:14:e0:ce:c7:f6:ce:2c:86:63:3a:55:
28:fb:75:96:a8:1f:c7:4a:ab:d9:f8:f7:7d:b7:61:2f:5f:0a:
43:43:1d:c3:fd:48:1d:3b:4a:c0:76:26:73:2b:32:21:af:26:
f8:45:b6:3c:f1:75:ae:23:a7:74:20:dc:ee:03:14:34:4c:3d:
cc:52:e8:1a:d7:9b:7b:56:de:59:1b:16:a4:c2:3d:7b:91:c5:
52:78:3b:54:22:1f:a4:83:40:29:1c:83:77:7b:4d:8a:78:10:
a5:d9:9c:6f:be:97:01:9b:2e:8a:a0:4c:72:a5:1b:be:87:7d:
76:41:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:37 2025 by rpki-client