Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c5995c-8fdc-3e0a-88a8-714f48b79785.roa
File: 24c5995c-8fdc-3e0a-88a8-714f48b79785.roa (raw, json)
Hash identifier: XPKJFr6XtyJJifaby3nmLBYOpE/gQgRdXeaMGmlZLlA=
Subject key identifier: 46:36:FF:24:4D:FF:30:B6:82:C2:F5:C7:EA:C1:F3:C8:CC:F5:1B:14
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B89BDFE2AA66DB2214080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c5995c-8fdc-3e0a-88a8-714f48b79785.roa
Signing time: Wed 11 Dec 2024 15:17:56 +0000
ROA not before: Wed 11 Dec 2024 15:17:56 +0000
ROA not after: Tue 11 Mar 2025 14:17:56 +0000
asID: 21313
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:89:bd:fe:2a:a6:6d:b2:21:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:56 2024 GMT
Not After : Mar 11 14:17:56 2025 GMT
Subject: CN=67d1aa38-f948-445c-9999-22204c22fe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:04:a8:e1:00:fb:21:ce:e9:17:39:65:1c:
7d:6e:92:78:fb:9b:ca:d9:42:24:4d:4e:8c:4c:bd:
6b:3c:45:e7:b7:cb:fe:c2:c3:b5:28:25:2f:4d:61:
7c:01:82:b7:17:c8:b5:30:4c:f5:5a:5c:25:6d:fc:
81:f7:47:fc:8a:da:fd:c8:ca:17:67:f7:03:c2:e6:
58:48:f8:cb:8f:7d:25:b5:2a:73:9e:ed:81:33:cd:
62:86:d7:b6:e2:c5:5a:f9:86:80:67:43:83:58:db:
35:71:5a:88:5e:59:ed:a4:92:2a:f9:8c:8a:be:a4:
24:2c:54:51:d4:1c:21:f5:c9:58:a0:75:c5:d6:2e:
f6:18:03:f5:16:04:dd:54:d4:11:75:3f:57:85:fa:
7e:48:65:74:df:33:a4:0f:30:3c:ca:33:d9:05:8c:
06:c0:71:b7:6d:71:19:15:a0:1e:fd:cc:86:a4:fa:
70:b9:0f:cf:99:1b:92:46:0a:03:fb:1c:2a:59:d7:
03:16:04:d7:fc:1c:a6:37:83:84:37:4d:8c:1a:82:
f1:10:0d:a5:54:79:38:71:77:29:fa:39:6e:ba:30:
22:72:c5:f9:13:a6:55:e4:49:ff:5d:6c:f4:a6:b2:
68:c3:6e:23:bb:b3:1f:57:72:9f:3e:8f:b4:e8:ee:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:FF:24:4D:FF:30:B6:82:C2:F5:C7:EA:C1:F3:C8:CC:F5:1B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c5995c-8fdc-3e0a-88a8-714f48b79785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:05:cf:c1:ae:e8:aa:00:a4:39:0e:bd:eb:88:d5:86:35:a8:
b4:1b:d0:60:2d:ae:33:dc:ff:ba:84:10:af:2e:92:fd:76:69:
9b:10:34:4c:05:1c:ed:d1:d1:17:6a:12:3d:48:70:f3:97:a7:
7e:38:0f:11:2e:70:63:6e:8d:5d:65:a8:72:13:fa:e3:d5:a8:
31:60:ee:12:0d:1f:ae:e9:a3:16:2d:59:5c:20:28:d7:38:85:
b5:d9:a7:ce:39:3a:80:db:25:ab:94:52:86:fb:6d:db:87:28:
a7:26:7b:41:bf:34:b5:a3:d9:2d:df:0d:3f:dd:3c:e9:0c:d0:
ee:5d:ee:64:ca:c1:2a:8f:11:e3:99:ab:98:20:b6:d8:fd:ee:
2e:7c:2a:e6:f3:c9:a0:35:e9:36:63:bf:32:42:62:b1:33:5e:
5b:6b:ba:2b:8a:d3:e2:77:7b:e4:e9:58:76:f2:3c:a1:1f:fc:
b3:b2:fd:1b:c5:08:1c:e2:2f:8e:60:d2:91:8f:5c:34:67:f7:
df:17:5f:de:1d:46:6f:ad:18:fe:14:00:73:51:34:45:c1:ed:
3b:2c:00:e6:0c:2c:f5:44:82:07:b2:7a:44:68:4b:19:13:9b:
bc:b8:df:04:e3:b6:f2:3f:73:51:76:56:18:93:ba:51:f3:11:
82:a6:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:01:01 2025 by rpki-client