Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa
File: fdca01e9-81e7-3210-98f0-00a4f2706b84.roa (raw, json)
Hash identifier: WlpmBxqSvi+GzM4jV8mIFAa/0hV7ft+912K/gvTeKUY=
Subject key identifier: C9:5E:CE:D9:C5:72:29:32:9B:90:87:59:DD:2F:B0:20:66:9D:94:74
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494B641E6C16EDE43FC1004560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 0
IP address blocks: 199.7.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1e:6c:16:ed:e4:3f:c1:00:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=4751779a-3081-40af-ad2d-cd57ed963fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:e6:f7:0d:bb:80:5e:27:ae:b8:9f:89:c4:
bc:35:09:eb:c4:62:ae:ce:f8:9b:cc:e5:67:9a:74:
45:f7:e0:6c:76:ae:71:00:4d:e3:8d:35:84:ef:09:
62:91:56:b2:3e:b2:65:62:c8:1b:18:7f:77:9a:72:
8c:39:93:c1:a7:f8:8d:69:96:17:3e:98:55:6a:2a:
98:24:af:11:fa:3d:b4:cb:23:11:9d:a4:d8:99:bc:
dd:59:91:d0:02:cf:a9:2a:76:80:cd:0d:39:22:5f:
cf:6d:20:dd:11:05:25:5a:e9:e6:31:9f:c2:83:5e:
ef:79:1e:69:7a:89:0a:35:45:ab:e3:11:b7:04:6e:
fb:ba:12:d4:19:cd:7a:52:41:78:2c:af:6b:c7:ea:
ca:25:73:c6:81:17:97:61:2c:d1:86:d4:c7:72:9f:
cf:e2:93:9a:da:58:a8:c0:c3:5d:f6:39:69:4e:e5:
9e:b3:ff:f7:5c:bc:f1:40:7e:f9:45:b9:1f:07:c8:
72:7e:a2:c9:f6:87:09:f8:b8:32:8e:d9:91:85:d6:
81:63:6d:80:72:4b:fa:47:b5:f7:7c:08:23:f9:f7:
86:99:bd:6b:24:14:aa:34:78:e6:0f:06:d7:ae:30:
9a:39:eb:1e:47:1f:db:84:da:21:84:3c:80:69:7c:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:CE:D9:C5:72:29:32:9B:90:87:59:DD:2F:B0:20:66:9D:94:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:5f:47:cb:fd:27:a7:6a:21:d7:e2:66:4f:ec:f0:8b:4f:f6:
cf:96:8b:96:39:7b:c6:df:4a:06:57:77:be:a3:ba:81:40:20:
04:f3:45:28:30:49:21:67:e5:33:81:41:bc:91:ae:1b:41:d2:
74:be:03:fb:aa:21:82:ba:6f:72:5d:8b:fb:44:40:4e:94:53:
58:ea:30:83:db:a0:f0:2f:70:f5:79:ab:5d:f6:fc:4b:83:b0:
ca:42:e7:c1:9d:c7:1d:68:27:cf:ba:f9:7d:59:21:e9:4a:87:
d8:4e:cc:d2:ec:95:bc:a1:38:b2:6c:7e:32:22:e4:e8:c3:9b:
ba:bf:a0:d1:61:38:a0:ad:2c:9e:01:d6:4d:74:7a:69:76:8f:
f7:9d:84:d5:0b:02:65:24:7a:f1:29:b9:f9:27:c0:9f:31:27:
5a:8f:1a:76:db:07:c0:97:39:03:3c:33:48:17:47:b3:8c:39:
96:f1:29:1a:c4:27:45:10:a9:10:06:f4:88:21:ef:0e:e4:1c:
c7:68:df:ff:5b:e3:62:ed:c9:9b:f8:6b:18:42:69:48:d1:4d:
57:aa:50:b5:74:d2:96:93:ac:85:da:3e:58:c5:ca:ea:7e:3b:
49:cb:71:15:d8:08:31:56:a5:e5:0c:5e:54:87:74:84:b7:0a:
8e:85:06:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB5sFu3kP8EARWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NDc1MTc3OWEtMzA4MS00MGFmLWFkMmQtY2Q1N2VkOTYzZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEfm9w27gF4nrrificS8NQnrxGKuzvibzOVn
mnRF9+Bsdq5xAE3jjTWE7wlikVayPrJlYsgbGH93mnKMOZPBp/iNaZYXPphVaiqY
JK8R+j20yyMRnaTYmbzdWZHQAs+pKnaAzQ05Il/PbSDdEQUlWunmMZ/Cg17veR5p
eokKNUWr4xG3BG77uhLUGc16UkF4LK9rx+rKJXPGgReXYSzRhtTHcp/P4pOa2lio
wMNd9jlpTuWes//3XLzxQH75RbkfB8hyfqLJ9ocJ+LgyjtmRhdaBY22Ackv6R7X3
fAgj+feGmb1rJBSqNHjmDwbXrjCaOeseRx/bhNohhDyAaXy+VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMleztnFcikym5CHWd0vsCBmnZR0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmRjYTAxZTktODFlNy0z
MjEwLTk4ZjAtMDBhNGYyNzA2Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwc6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9fR8v9J6dqIdfiZk/s8ItP9s+Wi5Y5e8bfSgZXd76juoFAIATzRSgw
SSFn5TOBQbyRrhtB0nS+A/uqIYK6b3Jdi/tEQE6UU1jqMIPboPAvcPV5q132/EuD
sMpC58Gdxx1oJ8+6+X1ZIelKh9hOzNLslbyhOLJsfjIi5OjDm7q/oNFhOKCtLJ4B
1k10eml2j/edhNULAmUkevEpufknwJ8xJ1qPGnbbB8CXOQM8M0gXR7OMOZbxKRrE
J0UQqRAG9Igh7w7kHMdo3/9b42LtyZv4axhCaUjRTVeqULV00paTrIXaPljFyup+
O0nLcRXYCDFWpeUMXlSHdIS3Co6FBqQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:33 2025 by rpki-client