Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa
File: 4050cd37-50dd-3734-94b9-05180dcca1b1.roa (raw, json)
Hash identifier: Kub/Op5z4VBEBGXiL4+ycU7KXni+1fYMDAF69DGlYg4=
Subject key identifier: 54:21:3D:C5:30:4F:F0:A9:41:1C:6F:B5:89:B2:4C:4B:08:56:6C:E5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B85C362529C5A018E5700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa
Signing time: Wed 11 Dec 2024 15:17:55 +0000
ROA not before: Wed 11 Dec 2024 15:17:55 +0000
ROA not after: Tue 11 Mar 2025 14:17:55 +0000
asID: 396555
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:85:c3:62:52:9c:5a:01:8e:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:55 2024 GMT
Not After : Mar 11 14:17:55 2025 GMT
Subject: CN=4cd5ab27-0329-444e-91d9-37b39d4007af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:c1:d6:fa:02:fc:a2:53:b2:86:b8:e4:e7:
6b:65:73:0c:c0:63:5e:10:b1:6a:43:24:de:d3:4f:
46:98:a2:67:f3:57:fb:9a:53:25:6c:93:6d:3d:06:
bd:aa:1d:2f:f8:95:bf:23:4f:b5:10:8d:1c:da:f1:
40:89:27:eb:96:fd:da:a0:26:56:d6:37:72:d5:0a:
e3:ac:2c:1c:9e:5e:85:7a:43:ef:3b:6f:b3:6b:41:
f1:40:94:bf:da:6d:a2:38:e5:70:c2:a2:4b:46:55:
3a:95:45:41:80:7a:65:5f:19:06:f5:fb:c8:89:2f:
fc:d0:1d:c3:76:06:cc:92:0f:94:cd:54:49:60:80:
28:a4:34:40:ed:94:4f:6e:51:f0:06:e0:a6:75:38:
cd:cf:c9:9a:21:f6:49:0a:ea:93:80:a2:68:35:91:
7e:63:fb:8d:80:6f:bc:c9:67:9f:b0:19:b4:bd:64:
ae:e3:7f:89:22:be:67:9d:61:38:3a:21:18:e7:b8:
1d:70:cb:c7:19:09:e8:3c:fc:32:64:21:8e:5c:b4:
f0:6c:4f:22:3b:ab:0c:eb:1a:20:9d:85:5f:0a:4b:
4e:a3:68:72:f8:a6:cd:81:6b:e0:01:3f:02:55:79:
81:e9:1f:ea:1e:a7:10:25:c8:a1:8e:5b:fe:07:56:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:3D:C5:30:4F:F0:A9:41:1C:6F:B5:89:B2:4C:4B:08:56:6C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4050cd37-50dd-3734-94b9-05180dcca1b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:6b:9b:ab:ef:7e:06:3e:68:08:c3:57:57:fd:1e:da:c8:42:
74:7d:db:5b:32:3d:99:18:68:f3:7b:45:db:44:f6:5c:ee:58:
01:3c:48:36:0b:06:0f:9a:59:b6:98:29:e8:71:f3:df:0c:1e:
af:7c:8c:ce:90:9f:0f:4e:57:18:aa:b0:47:8d:db:be:18:73:
1b:88:53:ca:16:0f:6f:c7:cc:b8:46:e1:7e:b0:22:fe:61:d7:
2f:92:6c:7d:5b:94:af:fc:b0:45:39:ac:58:97:40:94:02:8b:
d8:b3:31:c0:ae:f4:55:f4:0b:b9:b5:89:e7:56:03:fe:08:81:
7f:53:89:86:22:2b:f9:46:c6:44:21:af:52:03:32:9d:8f:43:
38:d3:d2:2a:c2:3f:50:db:c2:ed:aa:67:af:7e:66:01:35:fc:
7b:11:f6:1a:77:3f:df:9c:97:91:02:d1:d1:78:89:7c:06:a4:
cf:d0:e0:5d:77:c4:e1:40:af:cb:e2:a0:e4:9d:1b:cf:c4:34:
2d:8e:0a:db:94:4e:65:e4:4d:4a:b1:9e:df:3f:55:e6:d8:fc:
54:9a:fc:78:f1:9b:78:76:e7:d7:51:78:b5:41:7b:77:76:9a:
02:54:85:c2:de:d5:0e:c8:78:8f:de:65:68:7d:3a:21:74:b1:
36:b1:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:02 2025 by rpki-client