Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f391f15-1d98-3190-8433-7e7cac51bb9f.roa
File: 2f391f15-1d98-3190-8433-7e7cac51bb9f.roa (raw, json)
Hash identifier: gunFLum9n7uyR5+OMBE3CaDeBnPuayRWu0DBRK5RdcA=
Subject key identifier: 78:08:69:B7:97:32:48:8A:D0:0E:8D:70:D5:71:56:76:90:14:8B:48
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B9A1E957E61E0F840B340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f391f15-1d98-3190-8433-7e7cac51bb9f.roa
Signing time: Wed 11 Dec 2024 15:18:04 +0000
ROA not before: Wed 11 Dec 2024 15:18:04 +0000
ROA not after: Tue 11 Mar 2025 14:18:04 +0000
asID: 36627
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:9a:1e:95:7e:61:e0:f8:40:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:04 2024 GMT
Not After : Mar 11 14:18:04 2025 GMT
Subject: CN=22615251-fcd2-4ba5-bc63-cc340344b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:2c:56:81:b9:d9:a6:a9:a1:83:63:a0:46:
ed:60:55:e7:0a:55:0b:77:63:cd:dc:ef:be:79:a3:
5f:5f:66:91:7e:25:f8:7c:47:80:72:ef:64:75:af:
29:4a:08:f5:6d:5f:80:6e:8b:49:ed:db:ad:8e:90:
f0:89:69:d5:71:8e:ab:b5:4e:0b:27:92:71:c1:cb:
de:de:95:54:cf:09:bb:5c:29:3c:42:f9:be:7f:af:
0d:32:00:3d:fb:2c:73:cb:2e:70:ae:74:ec:06:37:
b6:50:54:99:91:ff:a0:da:28:a5:b6:b7:d7:f8:5d:
dc:20:6e:ce:bb:9d:90:d8:61:ac:1d:09:be:6e:d1:
0b:6f:56:e3:7c:3d:b3:be:3d:c1:ae:e5:ea:bd:b0:
24:19:56:1f:24:ab:ca:e9:82:50:af:52:ca:d1:c6:
50:37:28:4c:ca:7a:fd:37:f6:d2:29:be:52:81:14:
69:29:e1:46:9c:29:f9:c1:c8:2e:65:df:85:e0:ce:
36:85:2c:6f:ad:2f:e5:bb:d9:7e:38:0a:de:8b:91:
7f:17:e0:38:37:e8:eb:78:27:0f:29:00:ab:4c:d1:
df:01:a8:60:87:aa:c0:bd:90:32:1f:dd:81:34:2b:
b3:d0:84:f6:ab:6f:20:48:08:81:04:e7:d0:a1:6f:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:69:B7:97:32:48:8A:D0:0E:8D:70:D5:71:56:76:90:14:8B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f391f15-1d98-3190-8433-7e7cac51bb9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:49:36:19:9a:5f:87:e1:c8:35:e6:ca:aa:b5:13:22:e2:68:
84:15:b5:36:07:29:e7:b9:3d:b8:6a:b1:42:2d:75:fb:26:9e:
39:cd:42:37:89:62:be:ef:90:c9:3e:38:9a:de:d4:ef:8c:1d:
96:b7:51:95:6a:f2:09:3c:29:e9:12:77:ce:8c:53:10:50:66:
87:81:23:dd:cc:e2:2c:0c:9d:19:ab:87:3b:0e:47:4a:99:9d:
82:71:19:a7:71:4f:68:95:78:84:4b:e7:c0:3e:f9:43:e1:ec:
3d:c3:75:6f:b6:96:87:25:e7:d6:0f:85:28:c9:ef:fe:87:3a:
81:de:2b:c6:a5:c7:70:ff:41:ed:58:ed:04:c4:51:d3:90:ee:
3f:38:f7:5e:8a:9a:a1:0f:b7:ee:7e:e0:a4:2b:db:6d:29:f4:
e9:0f:7a:be:74:b0:6f:42:0a:56:d2:c3:61:34:37:0c:92:05:
09:5e:d1:cd:23:28:cc:07:ac:5c:dc:ba:7a:40:24:d2:22:57:
a2:88:db:7a:32:08:da:77:70:3c:97:fd:45:27:43:9d:8c:a5:
11:97:4e:4c:d5:c2:f8:9f:2a:b1:1e:4c:7d:87:72:a6:5e:2c:
b3:2b:35:12:d0:55:1d:90:2f:d4:b8:71:b2:9b:24:3a:21:3a:
42:a1:04:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG5oelX5h4PhAs0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwNFoXDTI1MDMxMTE0MTgwNFowLzEtMCsGA1UEAxMk
MjI2MTUyNTEtZmNkMi00YmE1LWJjNjMtY2MzNDAzNDRiNzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPEsVoG52aapoYNjoEbtYFXnClULd2PN3O++
eaNfX2aRfiX4fEeAcu9kda8pSgj1bV+AbotJ7dutjpDwiWnVcY6rtU4LJ5Jxwcve
3pVUzwm7XCk8Qvm+f68NMgA9+yxzyy5wrnTsBje2UFSZkf+g2iiltrfX+F3cIG7O
u52Q2GGsHQm+btELb1bjfD2zvj3BruXqvbAkGVYfJKvK6YJQr1LK0cZQNyhMynr9
N/bSKb5SgRRpKeFGnCn5wcguZd+F4M42hSxvrS/lu9l+OArei5F/F+A4N+jreCcP
KQCrTNHfAahgh6rAvZAyH92BNCuz0IT2q28gSAiBBOfQoW+2SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgIabeXMkiK0A6NcNVxVnaQFItIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmYzOTFmMTUtMWQ5OC0z
MTkwLTg0MzMtN2U3Y2FjNTFiYjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxJNhmaX4fhyDXmyqq1EyLiaIQVtTYHKee5PbhqsUItdfsmnjnNQjeJ
Yr7vkMk+OJre1O+MHZa3UZVq8gk8KekSd86MUxBQZoeBI93M4iwMnRmrhzsOR0qZ
nYJxGadxT2iVeIRL58A++UPh7D3DdW+2locl59YPhSjJ7/6HOoHeK8alx3D/Qe1Y
7QTEUdOQ7j84916KmqEPt+5+4KQr220p9OkPer50sG9CClbSw2E0NwySBQle0c0j
KMwHrFzcunpAJNIiV6KI23oyCNp3cDyX/UUnQ52MpRGXTkzVwvifKrEeTH2HcqZe
LLMrNRLQVR2QL9S4cbKbJDohOkKhBHA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:43 2025 by rpki-client