Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
File: 2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa (raw, json)
Hash identifier: GkV1IlNns533hgcPvsdLvblS+yVN3u432uqDaL+eCK0=
Subject key identifier: EE:77:08:04:DC:46:41:98:8C:44:8B:B7:12:55:71:53:90:31:30:9D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA3F4195776CD03DF8D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
Signing time: Wed 11 Dec 2024 15:18:09 +0000
ROA not before: Wed 11 Dec 2024 15:18:09 +0000
ROA not after: Tue 11 Mar 2025 14:18:09 +0000
asID: 397202
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a3:f4:19:57:76:cd:03:df:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:09 2024 GMT
Not After : Mar 11 14:18:09 2025 GMT
Subject: CN=7b861a65-7f9e-4c01-ab7f-42f473e215a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:34:9c:10:fb:39:2e:28:6b:30:32:7c:7b:
b8:d9:26:2b:d5:70:92:0d:79:81:6d:1b:27:9a:49:
b9:bb:0f:0b:61:93:cd:8e:19:e2:e4:13:cd:1b:84:
dd:4a:6a:a5:5b:6a:e6:fc:cc:04:b8:79:f9:48:04:
c7:36:1c:b5:15:d6:fe:05:4c:fb:b8:21:ba:b7:33:
16:2e:9a:7b:5a:f1:5c:ee:c3:90:91:4a:4d:29:d9:
ba:60:f7:4e:16:1d:17:07:ea:01:0a:7a:06:a0:6f:
c3:00:b5:c7:a0:0b:04:bf:10:02:55:2c:94:e9:58:
ba:59:89:f6:b8:c0:6b:e2:01:46:f4:eb:47:9c:e7:
75:01:fb:73:f5:f8:b6:ec:ca:cd:3a:d0:5f:3e:a4:
d3:be:d7:02:a2:3f:dd:2d:81:7d:6b:e3:7b:5b:85:
71:77:b4:08:3f:da:5a:36:52:d0:44:ea:85:74:0d:
96:7b:4c:d5:05:a6:f4:37:ba:9c:3e:d5:28:80:dd:
9c:08:ee:86:ed:92:03:f1:52:fa:e3:14:30:e6:0c:
a9:7b:bd:61:b3:e6:20:e9:8e:bc:29:65:e2:86:38:
8d:84:bc:23:6d:67:59:22:ee:3b:f7:5d:27:07:c9:
3a:6a:75:e9:e4:1f:83:0b:e8:fc:18:4e:15:6b:80:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:08:04:DC:46:41:98:8C:44:8B:B7:12:55:71:53:90:31:30:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:29:6d:54:b0:f2:59:5b:ce:3d:23:44:d2:54:e2:f4:03:bc:
4d:66:69:00:83:ff:4e:09:c5:ef:00:9a:1d:10:dd:40:d7:53:
2c:b2:e7:cd:40:31:0e:b9:c8:76:1b:47:b3:74:c1:c4:40:47:
13:22:80:5e:6e:25:20:90:b6:e8:ed:fc:a2:ed:d2:9e:22:f9:
07:88:94:f8:9b:03:11:8a:05:7f:88:ce:2d:d2:c2:89:30:bd:
83:c5:93:5f:6c:dd:be:d0:88:8b:67:72:4c:56:d8:a5:0b:04:
7d:fe:62:34:e0:6a:21:7b:88:45:aa:3b:5d:bb:40:03:ed:46:
b2:8d:cf:26:77:be:db:a9:0d:5e:5d:3c:83:a9:f2:c4:1e:f0:
1d:c5:e6:68:12:47:72:d3:90:22:78:08:7e:86:60:c1:e2:4b:
15:aa:78:35:5d:1d:fe:3f:dc:df:94:df:92:1b:8b:ae:ef:de:
d5:55:21:22:94:c6:ef:84:0c:cd:66:a2:6e:6b:d3:ea:bd:13:
fe:a9:a9:f6:32:6c:1c:cb:8d:bc:99:3f:4b:c3:bb:95:e8:0a:
3e:f6:ab:92:4e:ea:d8:d1:21:67:96:2e:34:96:de:6e:81:e0:
ac:99:fa:45:f7:c3:52:2d:55:b5:70:17:08:f5:00:8f:0a:13:
b7:fc:60:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG6P0GVd2zQPfjUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwOVoXDTI1MDMxMTE0MTgwOVowLzEtMCsGA1UEAxMk
N2I4NjFhNjUtN2Y5ZS00YzAxLWFiN2YtNDJmNDczZTIxNWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yc0nBD7OS4oazAyfHu42SYr1XCSDXmBbRsn
mkm5uw8LYZPNjhni5BPNG4TdSmqlW2rm/MwEuHn5SATHNhy1Fdb+BUz7uCG6tzMW
Lpp7WvFc7sOQkUpNKdm6YPdOFh0XB+oBCnoGoG/DALXHoAsEvxACVSyU6Vi6WYn2
uMBr4gFG9OtHnOd1Aftz9fi27MrNOtBfPqTTvtcCoj/dLYF9a+N7W4Vxd7QIP9pa
NlLQROqFdA2We0zVBab0N7qcPtUogN2cCO6G7ZID8VL64xQw5gype71hs+Yg6Y68
KWXihjiNhLwjbWdZIu47910nB8k6anXp5B+DC+j8GE4Va4AxqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO53CATcRkGYjESLtxJVcVOQMTCdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZmZTE5YWMtM2ZmYS0z
NTYzLWJkYmQtNWM0MWYxZDk5NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUpbVSw8llbzj0jRNJU4vQDvE1maQCD/04Jxe8Amh0Q3UDXUyyy581A
MQ65yHYbR7N0wcRARxMigF5uJSCQtujt/KLt0p4i+QeIlPibAxGKBX+Izi3Swokw
vYPFk19s3b7QiItnckxW2KULBH3+YjTgaiF7iEWqO127QAPtRrKNzyZ3vtupDV5d
PIOp8sQe8B3F5mgSR3LTkCJ4CH6GYMHiSxWqeDVdHf4/3N+U35Ibi67v3tVVISKU
xu+EDM1mom5r0+q9E/6pqfYybBzLjbyZP0vDu5XoCj72q5JO6tjRIWeWLjSW3m6B
4KyZ+kX3w1ItVbVwFwj1AI8KE7f8YJw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:30 2025 by rpki-client