Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa
File: d50a3f68-e668-371e-b9e6-849f6afb60f1.roa (raw, json)
Hash identifier: LQoRMtHjTYjXh+VBUUAEDCw7AIKnqdI6zvOC3YW1AQY=
Subject key identifier: 26:8B:67:B8:7E:5E:C6:41:8B:65:92:08:C3:D9:C1:DF:A0:60:3C:C6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB1608069FF4190CD69E800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 10515
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:60:80:69:ff:41:90:cd:69:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=607d5138-4d88-4281-bde1-c831b0c9c8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:b1:b7:4a:bf:69:c7:16:b8:3f:1c:4c:dd:
43:2e:6e:c3:da:40:df:d9:4d:06:66:18:25:6d:ed:
04:38:3e:7b:48:24:d0:2a:ee:88:60:1f:86:05:7f:
35:d4:34:8f:95:96:86:de:5e:fb:9a:d1:3a:e8:1b:
1a:15:0e:10:d9:6d:b8:9e:56:a0:34:53:ad:82:30:
ba:3e:df:8d:86:d1:36:bc:5c:cb:16:ed:a6:af:1a:
99:04:96:41:5b:6b:bd:5a:93:00:60:44:1e:05:8a:
09:26:11:c4:c1:a7:15:68:61:11:91:fd:2a:ca:66:
38:bb:5f:eb:3d:05:c0:03:80:97:30:de:48:74:de:
76:41:ca:11:d7:b6:bf:51:ed:1b:ca:4e:22:7f:1b:
b8:aa:cf:79:9b:98:43:cb:bb:7c:df:19:c4:74:05:
89:42:4c:26:25:05:af:48:72:ba:47:81:58:8c:e0:
57:cd:97:ec:8c:e3:08:2f:b7:f5:08:43:0a:d3:02:
7a:f5:9c:b9:59:9a:fd:72:58:cd:b0:79:23:32:62:
27:1b:2e:c9:71:40:49:08:e1:be:74:ed:09:d9:92:
c8:ed:e1:7d:e0:13:a1:f4:b8:aa:4e:18:4c:4c:c8:
c2:f6:57:84:f3:fd:52:cf:d1:4a:b8:d9:3a:1d:8c:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:67:B8:7E:5E:C6:41:8B:65:92:08:C3:D9:C1:DF:A0:60:3C:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c0:85:1a:ac:7f:e4:ab:6a:95:cb:94:76:2c:2f:8e:41:e8:
1a:7d:47:7a:95:92:be:7e:44:db:66:ab:a4:25:2a:f8:3a:43:
4b:a2:4b:8a:82:32:5e:ac:45:a6:8c:86:a0:5b:08:3b:86:95:
51:64:ce:bc:95:f9:8a:85:4d:e1:00:7b:4f:4f:d4:81:33:90:
83:40:2f:b8:9c:29:2f:a1:6c:45:54:24:23:54:b2:84:43:eb:
7e:64:85:ec:0a:83:0b:e0:84:7b:c0:d5:82:76:b0:30:27:39:
ff:19:a3:1f:ae:9a:61:af:48:2e:0c:b3:b6:fc:f8:a1:fe:b2:
e4:35:c4:29:22:36:e6:fa:e9:dd:15:e4:0e:7e:77:03:5f:11:
26:e8:3b:d8:c8:ff:83:30:62:fb:3e:db:6d:1c:27:cc:89:d1:
d6:b1:cd:4b:08:17:1d:7f:90:8b:c4:31:12:6b:3c:87:b8:ee:
1b:49:77:8b:da:99:3d:a5:24:ef:93:1c:d6:23:58:8d:91:ce:
ec:ee:e8:0a:c8:b0:71:32:7e:2a:34:84:1a:31:14:b1:94:e7:
53:67:37:44:d7:94:54:01:8e:42:78:b1:51:9d:40:a5:19:eb:
6e:23:c3:45:5c:ba:1d:dc:18:66:49:57:d9:fe:ca:96:8a:68:
1d:77:18:ad
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsWCAaf9BkM1p6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
NjA3ZDUxMzgtNGQ4OC00MjgxLWJkZTEtYzgzMWIwYzljOGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFaxt0q/accWuD8cTN1DLm7D2kDf2U0GZhgl
be0EOD57SCTQKu6IYB+GBX811DSPlZaG3l77mtE66BsaFQ4Q2W24nlagNFOtgjC6
Pt+NhtE2vFzLFu2mrxqZBJZBW2u9WpMAYEQeBYoJJhHEwacVaGERkf0qymY4u1/r
PQXAA4CXMN5IdN52QcoR17a/Ue0byk4ifxu4qs95m5hDy7t83xnEdAWJQkwmJQWv
SHK6R4FYjOBXzZfsjOMIL7f1CEMK0wJ69Zy5WZr9cljNsHkjMmInGy7JcUBJCOG+
dO0J2ZLI7eF94BOh9LiqThhMTMjC9leE8/1Sz9FKuNk6HYz5IQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCaLZ7h+XsZBi2WSCMPZwd+gYDzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDUwYTNmNjgtZTY2OC0z
NzFlLWI5ZTYtODQ5ZjZhZmI2MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBLwIUarH/kq2qVy5R2LC+OQegafUd6lZK+fkTbZqukJSr4OkNLokuK
gjJerEWmjIagWwg7hpVRZM68lfmKhU3hAHtPT9SBM5CDQC+4nCkvoWxFVCQjVLKE
Q+t+ZIXsCoML4IR7wNWCdrAwJzn/GaMfrpphr0guDLO2/Pih/rLkNcQpIjbm+und
FeQOfncDXxEm6DvYyP+DMGL7PtttHCfMidHWsc1LCBcdf5CLxDESazyHuO4bSXeL
2pk9pSTvkxzWI1iNkc7s7ugKyLBxMn4qNIQaMRSxlOdTZzdE15RUAY5CeLFRnUCl
GetuI8NFXLod3BhmSVfZ/sqWimgddxit
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:46 2025 by rpki-client