Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac46459-d639-39b0-a5e7-04a8c6314fde.roa
File: 0ac46459-d639-39b0-a5e7-04a8c6314fde.roa (raw, json)
Hash identifier: ImG1PRg+PYq1nzT8QS2Y0l6I2Bk9yl74PPRmYNr9+YA=
Subject key identifier: 43:56:67:45:4E:64:8F:BE:A2:57:CB:D2:05:5A:29:65:22:A9:15:8D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA3BAAAE81ED891E5C280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac46459-d639-39b0-a5e7-04a8c6314fde.roa
Signing time: Wed 11 Dec 2024 15:18:09 +0000
ROA not before: Wed 11 Dec 2024 15:18:09 +0000
ROA not after: Tue 11 Mar 2025 14:18:09 +0000
asID: 36629
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a3:ba:aa:e8:1e:d8:91:e5:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:09 2024 GMT
Not After : Mar 11 14:18:09 2025 GMT
Subject: CN=9965e9bf-d208-443e-8b54-9317c42243e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:02:49:df:6f:8e:10:aa:66:cb:1f:37:29:
5d:89:03:88:3d:5f:76:b6:53:38:ba:24:43:24:92:
01:47:10:6d:b8:bc:f8:9a:72:c2:85:ef:ea:e9:2e:
06:71:26:c9:2d:45:9a:34:9f:9d:ff:5e:2e:55:1d:
c7:5c:94:74:f8:95:2b:d0:60:cf:1c:43:4b:2e:7c:
12:1d:fc:5e:e9:a0:83:d8:ba:02:2b:5b:3e:0f:b7:
72:ab:c1:38:88:9e:3a:9b:1d:33:11:9f:6f:ba:2b:
49:30:c2:29:64:05:3b:41:f7:1a:c2:42:48:f2:47:
14:d8:54:20:6b:4e:cd:a0:f5:47:97:f2:89:d4:58:
e5:ad:34:1f:20:9a:7e:1c:02:b7:05:11:d2:a0:08:
a4:b0:de:63:6a:19:6e:77:6c:4a:eb:54:71:98:df:
5a:a6:74:ea:1f:e2:50:23:7e:ea:d9:c4:93:c9:de:
83:4e:5b:40:b1:76:61:b5:36:f7:66:88:e8:8c:37:
3b:2b:14:f2:7b:91:d8:a1:69:9f:95:eb:ba:14:90:
88:3b:a7:eb:a1:01:3f:ec:f6:44:98:9e:9e:e7:9a:
77:0b:9e:e8:66:ed:bc:ac:a9:75:ed:79:a2:0a:0a:
bb:0e:d2:7d:76:64:e7:fd:0e:85:29:4f:dd:06:c0:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:67:45:4E:64:8F:BE:A2:57:CB:D2:05:5A:29:65:22:A9:15:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac46459-d639-39b0-a5e7-04a8c6314fde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:06:46:5b:63:94:bd:2d:12:b4:69:d5:24:fc:84:36:f7:e6:
ca:69:f6:69:24:a0:92:31:f5:d2:09:70:3f:43:71:46:57:81:
c9:06:bc:7f:2c:89:71:8f:f9:9a:3c:b7:b5:e6:99:49:73:40:
0a:c0:a1:ff:8f:c8:88:64:f1:b6:8c:40:7e:29:1b:73:47:0b:
8e:ab:32:40:8f:94:4a:ac:1b:fb:4e:11:f5:f1:a8:db:5f:e3:
cb:43:78:cc:09:fb:78:89:9a:19:04:f8:d4:93:ea:5a:e6:fd:
a0:ae:95:12:22:1e:84:9f:26:67:41:2f:bc:3d:65:61:e6:7a:
08:9d:e3:01:67:3e:8d:3d:ff:ca:25:a7:1e:e0:1b:72:b2:0f:
48:fe:bc:cf:2c:46:29:ec:9a:a0:78:9a:42:de:51:54:7b:14:
15:39:a3:b3:2c:ff:7a:ae:a9:63:55:f5:34:91:a5:26:99:74:
5c:d0:66:e8:d2:d2:4b:2d:93:89:57:66:d6:5d:98:e1:b0:14:
51:f0:b2:7c:39:d2:f3:e3:80:be:87:4b:8d:d8:0c:ab:0c:7a:
6b:fe:7e:97:21:75:a1:d9:8d:ab:46:2c:7c:39:f9:bd:c5:be:
f6:c0:b2:c6:6a:80:9a:cc:2f:d4:b1:5a:99:dd:15:63:fe:30:
7b:17:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:15:33 2025 by rpki-client