Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
File: efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa (raw, json)
Hash identifier: io8EL/5ic8nVhQ2/lwNBh3NgTUPD+BBBUp/XSrQBrQ8=
Subject key identifier: D8:DB:E9:09:6E:DD:32:23:D9:E5:89:C8:96:A0:14:BC:2E:38:E7:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB14B46EB3CFFA358C714C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 36618
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:4b:46:eb:3c:ff:a3:58:c7:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=44a5d2c0-f6e1-4ba7-ae59-9b50b2c680a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:45:cf:2a:1e:64:99:13:97:e9:db:15:60:
d1:d5:fb:9a:37:88:4d:d9:ea:99:9f:8c:ff:68:f7:
9d:8a:21:db:cc:54:d9:5f:de:20:9f:1b:88:c0:fc:
bf:f4:b3:e3:4f:dd:3a:67:5f:5c:93:e1:cb:59:27:
b9:74:e9:93:90:e7:f2:69:0c:4a:6a:b1:c5:7c:fd:
dc:2d:36:3c:15:29:f9:e2:ff:ff:fb:71:5d:e3:0e:
b0:78:16:25:66:52:45:1a:47:0d:d0:23:eb:fe:1c:
15:95:ad:64:5d:aa:8d:fa:d1:3f:86:96:0a:a4:21:
b7:02:5e:09:6d:1f:f7:5f:8c:13:00:d4:8b:44:2a:
bb:1b:80:26:ec:e9:f3:12:62:5a:81:f1:a3:ea:1e:
ec:01:84:98:9b:d8:62:a6:56:ae:c9:1b:3f:54:98:
9b:26:f4:16:78:3e:0c:0a:09:01:99:f9:3f:cd:83:
30:20:ba:44:02:9a:c8:b4:c7:7b:64:32:e1:4f:cd:
eb:1d:9a:88:14:2b:c4:5b:cf:52:9c:aa:d9:df:2f:
87:ed:0b:1a:54:dc:db:04:ff:45:03:1e:7d:f4:7f:
75:d2:9b:e2:87:d8:25:c9:3b:c7:a0:b0:b0:74:7e:
c9:18:9e:be:bf:22:93:3f:41:cd:c0:fc:6b:9b:63:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DB:E9:09:6E:DD:32:23:D9:E5:89:C8:96:A0:14:BC:2E:38:E7:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4a:5c:d5:21:4e:5d:0b:8d:d7:3b:67:40:c3:8d:5d:b4:2c:
82:f3:bf:de:5e:23:05:71:f3:29:39:dc:bd:8e:0e:61:47:c8:
31:6b:01:f2:c5:6f:bc:67:2f:80:b8:43:17:94:d9:69:d9:ec:
fb:8d:8d:82:4c:24:1f:5e:2c:c1:28:9b:ac:4f:50:7f:a1:8c:
4b:c3:e7:be:8d:d4:f1:73:4d:1f:84:8d:f7:97:8e:11:d5:3e:
e1:6f:bc:23:6c:d0:49:0b:9d:66:3b:78:51:d5:23:0c:2d:19:
4e:08:81:7d:2d:3a:e4:e9:50:2b:3d:4f:fd:e2:d1:1e:99:c5:
3f:2f:81:ad:9e:34:fb:27:59:da:ab:c2:36:d6:f8:9a:8c:d9:
e2:f2:6e:92:bb:e7:77:44:f0:b0:c9:85:43:f4:dc:f7:61:c0:
ba:37:b6:fa:25:60:f6:c3:3d:0a:48:31:38:63:12:53:c3:a9:
92:5a:a7:b1:3b:93:a8:4d:3e:34:d0:7e:cb:37:20:ad:67:91:
12:db:fb:d0:bd:fb:28:ba:a0:96:82:bf:c6:53:df:35:8c:ab:
a1:f9:7a:4c:a4:e2:78:f2:19:01:91:d3:47:03:45:ac:87:95:
31:d0:f9:4f:af:27:9b:f6:70:35:4a:16:86:ec:95:78:e4:ca:
d7:eb:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:04 2025 by rpki-client