Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34691c49-a338-36f9-b289-f73d59945cb4.roa
File: 34691c49-a338-36f9-b289-f73d59945cb4.roa (raw, json)
Hash identifier: eDhPoERDBg5B7n5pi8T7KzuQvZ2GRXSz1d0lIEP2Wqc=
Subject key identifier: 48:84:BC:56:87:08:70:D1:BA:4B:7E:FB:7E:C6:FC:C0:A8:3A:0D:E6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486D90560CC831F12B41957080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34691c49-a338-36f9-b289-f73d59945cb4.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 199.7.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:56:0c:c8:31:f1:2b:41:95:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=0b6d478c-857c-49a7-bfda-1234ea2655cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:85:25:62:60:70:30:5e:d3:b7:51:ca:64:
70:8e:80:a3:f2:59:3c:36:96:a9:46:72:c1:bd:b0:
76:12:17:54:4a:a6:4b:d3:df:27:b3:d1:3c:d3:23:
53:60:d1:43:a4:0c:e8:ff:55:f0:00:4b:f9:99:bc:
6c:0b:a4:11:32:b4:35:f8:62:88:e0:c8:42:18:16:
1c:f0:a7:1c:85:3e:63:b9:df:15:d8:86:06:2a:4d:
f5:9f:ad:41:ce:a2:65:70:30:80:bc:00:09:6e:b0:
7b:ed:53:5c:3a:02:4a:83:67:03:5b:e3:29:54:53:
34:e1:ee:95:b6:d9:2d:bf:8d:0b:48:df:15:9e:a2:
fd:e3:63:9e:95:a2:a1:54:dd:35:a1:78:a3:4a:54:
9d:6f:1e:b0:e1:92:ee:83:14:5d:6a:c7:97:2e:45:
83:96:bd:cc:9b:af:e3:d1:bf:8e:86:31:25:fb:74:
94:11:2a:e1:d1:6c:2e:10:2f:4e:4e:46:51:84:08:
7f:eb:55:e6:13:ef:d3:dc:59:5c:23:4b:48:fc:05:
d0:f7:e2:ec:07:88:48:c2:23:5a:d2:2e:5c:a3:e8:
db:0a:04:19:80:37:af:e8:02:0b:a8:25:18:48:ff:
4a:7b:10:52:eb:24:62:d7:3c:d9:05:27:b1:7e:41:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:BC:56:87:08:70:D1:BA:4B:7E:FB:7E:C6:FC:C0:A8:3A:0D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34691c49-a338-36f9-b289-f73d59945cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:8b:aa:33:88:ad:e4:6b:90:5b:63:ec:64:10:31:43:17:e0:
dc:52:fb:b7:aa:82:aa:7a:9e:7c:a4:3e:19:3a:54:6e:18:9f:
9f:a3:95:01:55:23:c9:52:53:c9:5e:29:dd:4a:7e:7f:69:6a:
40:8e:da:28:51:97:97:59:5b:2b:53:2f:8f:7c:96:d2:02:92:
6e:74:e6:89:b0:ec:40:9a:77:7a:32:10:96:d8:6c:1b:09:9b:
fb:39:69:68:07:80:d0:05:f3:d7:09:01:d9:7d:59:44:cf:e1:
bd:1a:36:d0:22:de:74:d5:81:e6:58:41:c6:13:97:32:a5:fa:
d1:b8:d8:e1:67:c5:59:81:8d:e4:20:42:1b:39:3d:da:59:18:
2f:09:61:36:70:e3:82:bb:be:c3:a3:c8:35:9f:55:0d:e9:d6:
a9:ee:1b:ed:2c:ed:83:02:e0:7d:a5:29:33:21:73:fa:b7:80:
17:cd:12:b9:59:cf:3f:02:3e:21:08:a3:e1:09:0b:db:cf:9e:
f8:dd:e3:06:f4:26:60:90:29:47:2e:9b:79:5a:12:58:55:ce:
b5:30:41:05:84:5d:26:41:f1:ae:d6:81:ab:f9:ea:78:65:26:
51:cb:85:5f:e9:3b:35:de:82:e8:9d:91:0a:bf:29:7b:c7:c8:
a2:b9:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:59 2025 by rpki-client