Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa
File: 31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa (raw, json)
Hash identifier: ff4Z5lTKYPm2SQtEFCsGeDgW7Mt0xC3rpFgLwPQlOw8=
Subject key identifier: CE:8B:AC:D7:00:6B:C2:86:4C:FF:71:1D:0F:6C:52:E1:9F:8D:5B:34
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B93B6355ED45879B58780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa
Signing time: Wed 11 Dec 2024 15:18:01 +0000
ROA not before: Wed 11 Dec 2024 15:18:01 +0000
ROA not after: Tue 11 Mar 2025 14:18:01 +0000
asID: 396547
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:93:b6:35:5e:d4:58:79:b5:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:01 2024 GMT
Not After : Mar 11 14:18:01 2025 GMT
Subject: CN=ef61cd84-fdf2-4cf2-800b-856ee3e48e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:f8:ea:a0:4f:9d:bc:e8:74:5b:23:d7:28:
15:08:a0:d9:23:1b:52:17:5d:30:2b:ff:1e:60:e5:
64:8e:e6:a2:1c:d7:a6:c9:01:25:03:eb:98:44:e0:
a1:53:f8:94:37:df:96:56:c6:79:66:28:95:40:16:
55:f7:33:76:79:f2:a8:b8:06:d0:6e:1a:76:ba:9d:
f8:79:bf:2f:aa:a6:9f:8a:b4:b3:7a:c4:da:5c:41:
f6:e4:a9:fd:56:4a:c9:24:4c:2a:74:6f:13:87:17:
24:b0:8e:c2:0b:f6:c5:31:8b:52:40:80:de:75:4c:
92:85:48:2d:41:c5:dd:aa:81:ef:e7:24:c2:33:55:
e9:8d:e6:4f:1a:a6:9e:d0:96:cf:e4:be:3d:be:84:
b0:1c:9e:85:87:f3:6c:59:1a:1a:a4:d3:0f:8e:32:
8a:a4:2b:cc:6e:dc:43:72:10:2d:d7:1d:08:5a:6e:
04:92:d0:9f:70:e6:db:45:e3:60:f2:15:8b:05:48:
24:53:d3:40:8e:f0:d1:fd:1c:26:bf:ae:53:d8:4b:
70:10:65:da:36:50:21:ec:76:09:2c:38:91:67:44:
42:5b:c8:67:ad:ce:89:f7:22:a9:3e:de:e2:d6:cb:
84:8a:34:91:fa:bd:83:ed:e3:89:31:64:f5:06:6d:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:AC:D7:00:6B:C2:86:4C:FF:71:1D:0F:6C:52:E1:9F:8D:5B:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:19:f7:2f:5f:de:a7:7f:54:1e:87:1a:e5:36:f9:98:0e:c2:
d0:6b:f8:91:76:fa:28:6c:16:dd:9c:38:2a:34:79:d8:1a:fb:
1e:a5:89:bd:ec:8d:69:9c:bf:44:ac:4b:78:4c:94:71:85:e6:
ab:37:13:b8:6a:3c:c4:e5:30:44:2c:09:bb:7b:c9:03:b2:93:
9d:26:07:30:8d:c9:62:fe:68:f5:4a:db:b4:4b:56:ea:29:ce:
7f:a0:88:f4:78:4f:6f:ae:25:c1:7e:db:71:73:72:c2:0d:25:
51:9d:cf:f2:92:b7:17:5b:51:15:8a:8a:6e:cd:cd:ad:43:ac:
28:0a:06:7e:2c:28:93:58:1e:10:fd:91:2e:2b:e6:fb:d4:48:
5f:3c:20:54:6c:89:c0:6b:a2:0d:01:d2:ce:0c:43:85:d4:6c:
bf:cf:a3:aa:06:02:43:81:47:3a:be:dc:55:3a:d0:de:b5:bc:
f3:bc:fe:d4:e5:ef:e1:03:63:79:0e:a8:8d:8e:9c:1d:4c:5b:
fa:99:22:25:b6:43:a2:fb:87:dc:41:bf:cd:b7:89:36:7e:98:
f3:e3:ae:89:84:2a:1e:1d:83:4f:72:78:72:7a:0c:04:1a:83:
64:a7:1d:5c:fe:1c:5e:dd:d6:60:64:07:ac:bf:65:5c:10:e6:
9a:a2:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:09:53 2025 by rpki-client