Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5f4f7b-5e1d-3cd8-8bff-99d9f1f51ca1.roa
File: db5f4f7b-5e1d-3cd8-8bff-99d9f1f51ca1.roa (raw, json)
Hash identifier: Gn/2eLXY7knvvjzr0WWd8fBRG8DZbaZpuN6OmKU1shU=
Subject key identifier: 33:68:1D:E7:A6:4C:DF:EE:31:CD:9D:1A:B9:7E:E7:AE:AB:82:6D:01
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73DEE5991AF044A01C6980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5f4f7b-5e1d-3cd8-8bff-99d9f1f51ca1.roa
Signing time: Fri 29 Nov 2024 13:58:26 +0000
ROA not before: Fri 29 Nov 2024 13:58:26 +0000
ROA not after: Thu 27 Feb 2025 13:58:26 +0000
asID: 396568
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:de:e5:99:1a:f0:44:a0:1c:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:26 2024 GMT
Not After : Feb 27 13:58:26 2025 GMT
Subject: CN=0dedcd5c-71f9-4380-9836-82733a00ef48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:63:f0:89:36:62:04:7f:09:63:e5:1b:26:
c7:69:bf:0d:a3:c5:37:d1:46:e3:ea:af:6f:be:6a:
4d:8b:3d:f6:35:ba:03:66:f9:9c:f8:0f:4b:66:a9:
45:45:8b:07:d9:ca:9c:8f:d0:08:fe:ec:27:d6:1a:
3d:df:66:e8:94:80:d9:48:d0:57:68:e6:20:3f:fe:
97:25:77:e5:0f:05:7e:3c:b4:07:30:84:5b:02:69:
5e:80:37:27:8d:0d:4f:65:b9:f1:25:4c:56:fe:17:
75:92:29:be:2d:cb:47:09:83:4f:ef:3a:d6:d1:e2:
72:57:3e:d1:69:62:ec:f0:e0:54:fb:74:de:bc:43:
84:dd:6e:64:9f:50:e8:3c:b4:e4:d1:a1:d3:11:23:
dd:d9:32:c3:94:a8:62:f4:67:8f:d9:50:9a:56:cb:
cc:ae:af:e2:2d:10:cf:26:34:59:9f:4e:63:28:49:
72:63:b6:ad:eb:70:ce:ab:92:f3:dc:ed:67:ac:d2:
ca:ba:6a:c8:01:f0:26:c3:f8:bb:64:5e:01:98:88:
20:2c:d0:28:d1:47:94:34:a7:46:e9:1e:7e:26:bd:
2a:2d:ea:00:b3:d6:55:b8:dc:48:a0:db:2e:f9:5a:
05:13:39:af:10:79:90:65:cd:9a:7e:11:b6:c8:3e:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:1D:E7:A6:4C:DF:EE:31:CD:9D:1A:B9:7E:E7:AE:AB:82:6D:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5f4f7b-5e1d-3cd8-8bff-99d9f1f51ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:5d:96:f4:cc:16:d3:ad:02:6c:93:d1:c8:f1:c9:82:5d:f2:
4c:fd:89:1a:16:fe:41:ef:87:11:c7:36:8d:84:4b:f4:ba:18:
a5:6b:51:8d:0b:91:b1:a7:fc:5a:9c:d6:7b:38:99:f0:4c:af:
0d:8a:f7:9d:6e:9e:09:14:41:54:78:96:64:09:9e:3a:89:3e:
8d:f4:97:b4:7a:7b:6c:23:a9:a9:c8:a3:ab:39:7f:de:62:f0:
8c:ab:a2:1b:26:13:07:bf:0e:68:da:fb:c1:79:35:dc:44:ba:
a2:36:a3:5a:98:45:c2:c8:f8:05:d1:8e:f6:ce:8d:ee:b2:9a:
13:a8:aa:bf:ff:97:29:f4:ac:f5:97:2d:24:17:57:a4:b7:fa:
3f:6c:22:7b:4f:cc:69:39:75:c5:7e:96:2c:7c:b7:47:78:9f:
6d:f0:5a:3c:1e:c9:4c:b2:02:f9:b0:01:ba:12:3b:df:36:3e:
73:48:31:d7:8f:ca:b8:d6:d8:6e:5a:79:eb:44:33:35:ce:f0:
a4:ce:b0:3d:52:e6:1a:da:fc:f5:ba:03:ed:04:d1:a4:17:9f:
1b:94:0b:0f:30:1d:c0:05:2f:e7:23:3a:db:54:a8:df:70:29:
7e:73:3d:22:6b:1c:6c:31:40:b7:63:14:99:0c:03:a7:9d:95:
ec:50:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:54 2025 by rpki-client