Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ca5d94-6f00-38a3-9069-0acf4aa0f9fb.roa
File: 03ca5d94-6f00-38a3-9069-0acf4aa0f9fb.roa (raw, json)
Hash identifier: rT2FCXRDEobHlKxTZYjFHuyrFGFVrEjqeKtUz5xtgTs=
Subject key identifier: 45:11:A0:8C:31:0F:EA:A6:05:51:7A:F0:13:5C:FE:FB:6D:0C:A8:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8F4934BF6EF003744E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ca5d94-6f00-38a3-9069-0acf4aa0f9fb.roa
Signing time: Wed 11 Dec 2024 15:17:59 +0000
ROA not before: Wed 11 Dec 2024 15:17:59 +0000
ROA not after: Tue 11 Mar 2025 14:17:59 +0000
asID: 396540
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8f:49:34:bf:6e:f0:03:74:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:59 2024 GMT
Not After : Mar 11 14:17:59 2025 GMT
Subject: CN=905cfe2c-2f3f-444a-88af-e5ca5b483d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:6a:b7:c9:39:8c:85:f1:4f:e2:c7:d2:a8:
11:37:c4:ad:df:3b:5a:72:7d:1f:3a:e1:b8:90:3d:
0f:43:fa:0b:df:14:62:65:3e:ce:65:e0:ca:2f:51:
58:33:cf:ad:a2:17:10:56:bd:8d:98:e5:e0:90:c8:
a7:0e:f6:1a:74:d6:e2:a6:28:3d:ba:89:90:d9:b6:
76:23:23:f6:57:18:6b:82:35:4c:1d:ce:b6:33:c5:
18:e2:9f:e2:9f:8e:45:46:41:e1:f3:3c:14:4c:9d:
a6:a0:7a:62:ae:a1:7c:9b:2c:5a:05:63:9c:32:9c:
ea:69:e8:02:38:1f:5b:84:dd:99:93:cf:ff:22:27:
50:30:ee:db:43:f8:12:16:ea:82:85:37:28:8d:d2:
07:93:cb:85:16:44:5c:c5:5b:05:5e:b4:10:82:7b:
25:b1:fe:8c:12:c6:07:25:1c:d3:e7:0d:61:68:ff:
4f:4a:cf:02:06:7c:c4:20:ab:9c:6e:d0:c7:62:10:
f1:15:a8:ff:8e:78:dd:94:c0:59:53:02:c2:c3:c8:
de:89:74:c3:05:fb:dc:d6:cc:09:7f:7d:49:43:f4:
a0:6e:85:aa:f7:ef:b8:e5:32:8e:e3:1e:2a:36:29:
40:8a:8e:53:10:03:75:27:96:6f:cb:55:a6:04:a6:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:A0:8C:31:0F:EA:A6:05:51:7A:F0:13:5C:FE:FB:6D:0C:A8:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ca5d94-6f00-38a3-9069-0acf4aa0f9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:c7:97:1e:f6:1d:d1:8a:ec:11:ce:d0:b3:af:4a:35:50:96:
66:4e:2c:a3:83:1e:03:bb:e9:d9:62:39:94:4f:ec:c6:66:0f:
ed:27:b7:39:f5:f3:ca:bc:01:18:57:62:a3:78:e6:a6:0a:d6:
65:ae:b7:d3:12:72:31:c1:0d:d0:b8:fb:05:ec:d0:ac:fc:6f:
d1:7c:91:eb:49:ca:4c:46:c4:33:d1:9f:fe:9a:be:db:7a:67:
28:df:e5:20:b2:47:79:97:39:2e:12:55:f4:f2:ca:f1:8a:a9:
7a:da:af:22:62:dd:3f:74:5f:6f:7b:aa:ac:14:69:4e:92:7c:
87:84:9d:02:95:54:9e:9b:4f:a7:73:35:c1:af:88:c8:0e:b2:
b5:75:44:3b:d9:bf:fc:9f:8a:c6:9a:67:7d:06:d1:5b:07:20:
cd:6f:1f:d9:7a:0e:48:3f:eb:09:90:f1:66:11:22:ef:31:42:
3f:65:89:29:73:9c:d9:c3:d2:19:8b:cb:90:e9:e0:04:30:d3:
51:06:db:56:70:c3:a4:1e:f1:f3:a9:56:ef:ba:dd:11:1d:3a:
55:13:c4:5e:7c:08:d0:89:b6:e1:ba:6e:12:6b:cd:a2:7a:91:
a1:03:fc:4e:0d:3b:e7:ee:44:72:15:4f:8a:1b:49:0b:e6:07:
31:3c:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:33 2025 by rpki-client