Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa
File: 2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa (raw, json)
Hash identifier: G5Skbodsvg6JReh87W9Klk7SAGmrPKSXlcNazkbhFV4=
Subject key identifier: 97:EC:43:A2:6B:2B:CF:05:2D:96:73:5C:6B:11:FA:14:42:97:05:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BAE38BDC4C6E831C44CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa
Signing time: Wed 11 Dec 2024 15:18:14 +0000
ROA not before: Wed 11 Dec 2024 15:18:14 +0000
ROA not after: Tue 11 Mar 2025 14:18:14 +0000
asID: 396827
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:ae:38:bd:c4:c6:e8:31:c4:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:14 2024 GMT
Not After : Mar 11 14:18:14 2025 GMT
Subject: CN=6de07832-8f6e-43cc-87dc-65b7f295902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:41:bb:21:68:09:90:ba:a1:b0:36:de:7f:
a1:47:2b:d3:5c:ad:cb:35:27:e1:fc:24:fd:9a:c8:
49:ea:f0:76:ce:01:00:58:99:34:f7:01:ca:fd:7c:
0b:a4:72:ba:d6:b6:b7:71:ad:0c:68:ba:2b:75:18:
e4:e3:3e:5f:d3:a4:be:87:17:86:64:26:ea:4d:92:
a8:76:b1:3b:b9:e7:58:38:de:f8:c3:24:ba:e5:60:
bc:c4:17:aa:37:11:a8:72:f2:bb:d0:2a:5c:88:71:
dc:be:16:71:5f:bd:6a:0d:fc:1d:bd:da:1d:9b:d7:
25:ef:26:1b:f7:8f:a5:df:a6:80:b9:10:95:29:54:
77:5f:48:42:19:a3:9d:8a:9e:19:b5:41:b9:6c:83:
7c:ea:de:b2:f9:a4:eb:53:49:dd:f7:b6:25:4f:a7:
6a:cc:d0:1c:7e:a1:1e:3a:c9:b5:4f:02:58:68:2a:
e1:50:18:f9:7f:be:e8:6a:b8:ff:57:4b:e1:51:4f:
1f:e2:4d:93:fd:54:be:fc:22:72:45:dd:17:a2:98:
0d:9d:5b:6c:01:1f:f8:e2:a3:48:0f:6e:b6:31:c3:
66:4b:95:b2:04:bc:6e:f3:0a:15:22:ad:08:3f:11:
95:f2:57:2b:0d:92:7f:33:b5:37:34:e4:d2:ca:f2:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:43:A2:6B:2B:CF:05:2D:96:73:5C:6B:11:FA:14:42:97:05:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2afb51b3-fb57-3de0-8dd7-5e114b79ad4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:6a:99:5c:0b:24:25:08:9d:37:c2:b7:53:03:44:9d:15:6e:
3a:b3:82:6c:c6:46:07:fe:a3:78:ac:4b:cf:64:83:5b:af:cd:
7f:c8:91:8d:83:b7:5f:61:7b:44:cd:8d:b3:55:04:26:ef:bd:
d9:68:6b:80:a4:c8:be:6a:df:b5:4c:7a:4c:9f:06:ff:b3:42:
c6:28:6b:5c:71:8b:e3:a3:4c:a8:cf:40:df:72:75:ad:b0:00:
d3:d7:28:85:c5:61:df:b7:19:1f:6b:69:b7:d2:9e:db:56:56:
70:92:65:ff:19:c1:7c:c7:c5:a2:06:eb:c7:65:20:0f:32:b9:
9f:48:e7:5b:54:ae:27:34:6b:59:80:09:76:d3:c8:ff:71:a1:
36:c4:2f:0c:1c:aa:31:f9:a5:0e:b6:a6:78:e7:8d:6f:54:ce:
7c:9a:ed:be:30:08:fb:64:8a:eb:5a:6a:36:de:3a:69:09:f8:
50:be:92:be:4c:08:08:3a:98:5d:46:cc:1d:7f:40:f9:9f:20:
25:bb:eb:34:1b:3d:fe:64:8a:7e:fc:60:73:3c:8d:ee:62:fa:
cf:17:cb:e6:48:14:e0:34:26:d2:91:eb:07:e1:98:ad:a2:9f:
1b:a7:60:dd:74:c4:d0:61:d7:d1:2e:7f:07:c9:6f:7b:c5:56:
dd:92:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:52:08 2025 by rpki-client