Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa
File: 3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa (raw, json)
Hash identifier: RrKgnAMAIZwbIWPhgkvVe1l9jsFGTuWtWz+VSlnRBgU=
Subject key identifier: F3:26:34:EA:3E:60:0E:3F:1B:D1:02:DD:1E:93:78:82:08:C8:6C:CD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA6B227099E7477D30880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa
Signing time: Wed 11 Dec 2024 15:18:10 +0000
ROA not before: Wed 11 Dec 2024 15:18:10 +0000
ROA not after: Tue 11 Mar 2025 14:18:10 +0000
asID: 396826
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a6:b2:27:09:9e:74:77:d3:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:10 2024 GMT
Not After : Mar 11 14:18:10 2025 GMT
Subject: CN=ca59c04a-3b3b-4bbc-a296-2081a87aba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:f0:5a:e2:9b:e0:db:3c:8c:72:be:21:62:
d9:11:8f:a4:bf:d5:86:e3:be:df:93:b5:3e:5f:a2:
8d:e2:3e:ed:fd:75:9d:12:17:bc:18:0a:8e:89:5c:
6c:57:5d:a1:ce:fb:48:dd:95:4e:ec:ab:74:04:33:
96:6d:a4:bf:ce:e6:25:62:39:da:c4:79:87:64:99:
24:7b:f6:9a:fe:71:6c:c2:39:09:24:16:0d:0d:32:
95:11:37:64:6e:cd:6e:f2:87:99:cd:92:60:63:54:
dd:1f:10:ab:10:1d:6a:7b:c5:ac:89:4b:3e:64:60:
98:08:24:d1:28:2e:e5:67:2e:ee:31:d7:66:b3:a9:
9e:8d:b5:68:6c:57:3c:59:7c:ec:bb:ce:94:c5:7a:
12:d6:46:7f:ba:e9:97:4b:94:4d:f7:2f:73:e3:0b:
1a:c0:0d:49:ae:52:54:6d:60:df:2f:73:e8:4b:1a:
e5:83:36:9b:26:c3:a4:89:6c:24:c2:ad:18:51:f5:
72:d4:0e:20:32:0d:26:71:c5:61:9c:31:05:40:39:
d4:49:4b:14:96:1c:2f:aa:a8:fa:bb:a6:58:ab:ee:
03:6b:14:41:36:63:3d:b4:53:51:e5:a5:5b:8e:61:
6b:32:ce:35:b7:ac:e1:7b:d1:d5:48:e5:bb:73:c3:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:26:34:EA:3E:60:0E:3F:1B:D1:02:DD:1E:93:78:82:08:C8:6C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf91386-9b9e-3104-89b5-e014c1f8cab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:2e:6e:a7:63:bb:22:ca:4f:0b:dc:68:a8:de:5b:54:de:79:
bf:26:10:82:5f:b7:20:ae:c5:24:eb:d4:cf:b3:52:e7:45:93:
32:5b:17:96:d6:f3:fd:c9:4e:19:27:ca:9c:d9:f9:85:5f:c1:
b3:8d:5c:d0:c9:62:5d:79:22:6f:f9:f6:06:4e:0f:01:95:11:
9e:62:71:ca:1d:8a:cf:10:10:57:e4:c7:8a:1c:e7:67:2c:13:
d4:d0:3e:11:5f:2b:6d:6b:72:c5:bf:f1:00:fa:85:8d:5a:43:
53:3f:25:a0:f7:e9:39:ca:02:e9:1e:30:96:45:ad:c4:c9:98:
ab:35:46:a6:f1:9e:4f:96:46:aa:fb:80:bd:72:3c:a3:f9:d4:
62:ab:23:bd:4c:5e:6d:52:eb:ee:58:3a:2d:19:a0:80:eb:04:
12:48:d9:f8:3e:07:78:9b:ea:d8:d8:37:03:77:97:7a:92:a3:
bf:ea:4c:f7:2f:96:a1:31:ac:49:c0:4f:9f:b5:94:00:79:b4:
e4:49:13:1e:ec:3d:9a:af:0d:7f:e3:1f:1c:3b:a2:98:7a:3a:
d2:47:bf:56:9f:10:5c:60:63:f5:f8:6e:8e:62:1a:db:d3:29:
16:5e:ce:ab:e6:20:f4:9a:e0:e3:03:8a:a7:58:a3:fa:c9:d1:
f7:bc:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:30 2025 by rpki-client