Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd18b021-b586-35af-a883-2a0eb0640caa.roa
File: dd18b021-b586-35af-a883-2a0eb0640caa.roa (raw, json)
Hash identifier: Ce3F5x9bnW7x+t90unvWW5daYZT4KlFmpgc01Y69Lms=
Subject key identifier: 21:69:DD:72:C7:93:0C:6B:22:86:4F:92:B3:29:3A:13:46:7B:C8:5C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14BB950112DB6B0C7FE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd18b021-b586-35af-a883-2a0eb0640caa.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396545
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4b:b9:50:11:2d:b6:b0:c7:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=f423fe6d-b433-4382-99dc-dfdec69166b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:82:37:af:3a:33:cb:60:2d:ac:d1:8a:3d:
79:0b:5c:eb:46:7d:42:fb:2d:ed:cc:cf:91:20:96:
b3:e7:4b:c0:e1:27:4a:a3:1c:a2:fa:7f:40:d9:1d:
04:f5:fd:9f:eb:23:8d:ef:be:b7:c9:b2:15:6f:59:
0a:8e:17:98:b4:22:bf:2c:22:64:f8:ab:b9:10:b5:
b2:ed:a1:73:30:ca:ec:99:72:3f:15:24:ce:19:62:
ad:5a:9b:33:34:29:78:7d:42:76:29:91:ca:5b:13:
29:f1:13:04:0d:d9:c8:9d:0f:2a:4b:07:8a:76:e0:
1e:02:b8:1a:41:cb:a9:f9:eb:58:07:4b:c3:f2:e1:
5a:b7:2f:e5:32:62:fe:36:1d:a6:7b:d1:1c:6f:c8:
09:e7:da:04:84:02:df:a8:db:de:f8:6f:af:47:ce:
37:84:70:22:5c:e5:b4:69:9f:ee:ed:9b:96:95:55:
9d:55:28:1a:ca:cb:04:57:44:c0:c5:4d:07:b9:9c:
74:41:99:d6:ed:bc:c7:51:45:61:b3:ba:d2:bc:85:
37:50:37:d3:99:c0:db:22:82:5d:8f:b5:2b:77:5e:
a5:35:68:07:4c:2d:8a:12:99:fb:df:32:f6:b7:cb:
b9:98:b9:ef:47:8e:e2:d4:80:5e:34:11:27:49:bd:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:DD:72:C7:93:0C:6B:22:86:4F:92:B3:29:3A:13:46:7B:C8:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd18b021-b586-35af-a883-2a0eb0640caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b7:d8:c2:e4:52:4a:26:c1:ea:8b:48:2b:b5:7c:e1:6b:30:
de:d9:a5:f1:3d:44:26:d1:c6:4f:f4:f2:6c:ab:54:6f:11:a7:
19:bb:d7:dd:02:b9:ae:cb:41:f2:2c:e5:db:8d:b2:49:79:02:
c9:7e:d7:c6:b3:0e:63:74:14:f9:4f:10:4a:47:2e:0a:d4:0e:
8c:da:7a:52:34:33:9d:c9:26:32:c4:ae:ce:10:32:fd:c9:a5:
3a:a9:bc:be:f3:65:2b:de:f6:9f:87:e1:af:ba:dc:6d:a3:64:
9b:ac:29:c5:4d:84:31:12:38:a2:5f:a8:a1:3d:5a:07:12:0e:
cf:78:49:62:60:03:3e:90:f7:c9:94:de:ba:6b:d8:d8:a3:9c:
fc:d2:35:68:b4:f8:c3:38:1c:e8:d5:a9:9f:49:3c:30:7a:d6:
96:77:7a:e3:88:cc:9c:f9:20:f1:0a:37:7c:65:6d:26:e9:31:
78:53:dc:8e:ee:38:c5:12:7d:66:1c:92:20:1c:f9:cc:b1:2b:
13:43:cd:73:0d:66:5c:f8:6c:a2:28:4f:08:0a:15:5d:b8:7e:
64:cb:bc:8f:1e:45:8d:cc:b7:5f:0b:76:4f:50:30:de:25:c1:
cf:ae:da:71:22:13:65:67:11:89:a9:e4:52:b3:28:0a:ae:59:
3d:4b:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:19:50 2025 by rpki-client