Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ea577c-3bf5-38c6-bdba-95af1db5e01f.roa
File: 25ea577c-3bf5-38c6-bdba-95af1db5e01f.roa (raw, json)
Hash identifier: TofK82QjJz4HfoOb2POR2jQ224rsNnrNHY371P8QOVs=
Subject key identifier: F1:0C:53:34:F9:EB:FC:F5:70:D0:1D:76:4E:12:13:EB:9C:7C:DA:7F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA4DB117E65786A382180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ea577c-3bf5-38c6-bdba-95af1db5e01f.roa
Signing time: Wed 11 Dec 2024 15:18:09 +0000
ROA not before: Wed 11 Dec 2024 15:18:09 +0000
ROA not after: Tue 11 Mar 2025 14:18:09 +0000
asID: 396567
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a4:db:11:7e:65:78:6a:38:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:09 2024 GMT
Not After : Mar 11 14:18:09 2025 GMT
Subject: CN=7f796d44-fe39-4f15-8fac-1f198b38cae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:ef:f9:73:6b:3d:b5:c7:8a:e0:b4:66:00:
c3:10:6a:c4:73:90:cb:08:b6:db:81:22:22:4d:8a:
d1:0e:c9:ac:0b:bf:64:b4:59:99:81:1d:5b:ee:bf:
01:8e:af:98:90:e1:a1:f9:5b:6d:22:47:d0:65:cf:
7a:bb:f5:68:3c:a2:b4:83:dc:ad:5f:b7:f2:13:40:
68:41:ff:e3:83:42:8d:2a:e3:f6:41:bf:18:3d:3f:
18:ae:52:c7:17:3b:ba:f8:5e:c2:c1:f5:73:17:05:
e5:6e:0e:b0:ce:90:68:ba:1f:c3:98:6c:13:21:7e:
93:ea:c9:cd:fb:1d:7f:56:85:86:a1:11:14:b8:a2:
ca:11:23:76:a7:e1:a2:34:c4:f7:f1:dc:73:16:f3:
2e:b7:99:2c:15:07:72:ca:ed:ad:b5:c5:f1:35:b0:
41:5c:aa:ee:71:be:93:1d:b1:f8:2d:f2:e3:a7:cc:
34:a2:59:06:1b:d3:e7:3e:e9:01:83:87:6a:0a:a8:
45:12:81:45:6d:6c:2b:fe:f8:6f:25:02:1f:df:1d:
e9:b3:80:ef:28:5f:71:f2:ad:c8:f9:01:9b:4e:b8:
c6:69:50:84:e7:24:52:41:bc:49:a3:51:54:38:a1:
76:a3:95:aa:96:6d:19:48:b7:78:98:7b:7e:a9:8f:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:53:34:F9:EB:FC:F5:70:D0:1D:76:4E:12:13:EB:9C:7C:DA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ea577c-3bf5-38c6-bdba-95af1db5e01f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:10:55:7e:39:72:c3:69:f9:42:f7:c7:9d:50:71:58:0e:6e:
32:07:79:d1:09:e7:f1:04:04:2a:66:0b:a8:80:19:2e:68:78:
c0:1e:c3:31:e1:11:e1:c3:d7:22:99:13:1f:54:1b:e9:c4:ef:
b8:6b:47:a4:e0:09:58:25:c2:fe:b1:9c:f2:0f:97:f8:fc:dc:
94:65:ee:6f:be:a9:e5:46:ff:99:d7:66:5d:c6:cf:8f:1d:f5:
5b:5e:bf:e7:be:49:31:07:b1:7a:97:40:4c:4b:6f:b3:16:a6:
10:02:58:54:c5:34:78:9f:fc:92:df:aa:f4:86:b7:c1:99:23:
9c:33:2b:02:c9:ab:eb:96:a0:3b:11:ef:37:95:d0:46:d3:3a:
2f:97:08:42:44:00:b7:f9:09:4d:01:bd:be:53:24:3d:c9:15:
dd:6a:55:f0:c3:da:f9:0d:e1:25:c3:64:81:45:a7:77:05:a1:
a1:0c:af:50:a1:f4:8b:e2:6d:5c:be:53:57:a0:ca:8b:c6:2a:
d0:ed:d4:80:ce:0b:36:16:1a:9b:b8:e3:5c:db:6c:b1:b7:de:
47:56:8b:20:1e:fb:a6:72:e8:74:0d:68:7c:20:4e:8d:b2:1d:
82:98:8d:62:12:ad:8d:04:3b:a1:57:75:82:df:28:83:01:bf:
34:8d:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:10 2025 by rpki-client