Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa
File: 40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa (raw, json)
Hash identifier: R+OGQjf5pPp0nJCRretPLyrMo8oZHAMFQLyyrP6dXm0=
Subject key identifier: B3:A1:0D:73:E0:A6:E6:1B:69:A9:FF:5D:38:95:9F:D4:C6:A1:46:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486C2B2329F5CC09C01B63E1A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 0
IP address blocks: 199.7.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:23:29:f5:cc:09:c0:1b:63:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=50a2f237-9ddb-49bf-9609-acedfb2140d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:3f:d9:e3:32:c2:78:45:b5:4c:4d:d0:53:
f9:1c:6d:10:d6:64:79:7a:06:67:d2:d8:f1:d3:a3:
19:b6:64:b1:ff:77:c6:cc:f4:88:67:82:0d:42:d3:
16:70:b5:59:41:70:41:ba:33:b2:d5:d3:35:47:6a:
e4:11:13:71:3b:00:05:47:6a:42:69:f5:ba:4b:c4:
16:2c:2d:57:f9:7b:7b:c5:81:bf:1b:75:1e:8f:43:
93:db:ad:e1:9d:15:2d:95:e7:d5:7f:4d:6c:68:7a:
64:65:00:a9:b8:9e:d3:a0:f3:78:50:93:fb:a9:b4:
2f:ae:a7:a2:3b:70:e4:e9:10:2d:ed:85:28:1e:fe:
4d:37:a5:56:d0:ff:f1:85:87:7e:d2:64:5a:ed:80:
d7:41:bf:a5:bd:b4:40:19:31:60:40:f9:13:1f:77:
8e:c6:c7:92:2c:65:5f:9f:27:c3:ab:0b:da:ce:b5:
75:49:07:d5:de:ca:05:97:5c:f0:1c:cb:49:f1:58:
f8:44:86:40:32:c6:c8:e3:f6:02:3a:85:84:f2:bf:
93:f0:2b:5c:76:e7:9c:3f:e6:b9:4e:28:37:9f:70:
2b:03:61:64:35:32:31:fc:4b:0a:dd:32:fd:ff:b0:
b6:00:17:74:48:62:b5:a5:90:cb:be:c9:46:eb:d9:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:0D:73:E0:A6:E6:1B:69:A9:FF:5D:38:95:9F:D4:C6:A1:46:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ebc7cf-26fa-3dd1-b7bd-0be0c5c8c371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:6a:9e:53:e4:b5:4e:26:36:ce:89:45:0a:29:61:ef:ad:32:
e2:59:cb:74:57:7b:af:6c:2a:e7:93:52:91:6b:ab:bb:8a:05:
98:dc:91:1d:b8:89:c9:bd:c4:c4:8d:c3:7c:78:f1:1b:99:c6:
d2:d7:4f:7f:08:d4:bb:00:8e:b4:5c:96:7f:20:64:46:12:1d:
86:20:be:be:40:3b:a7:c6:91:16:a1:4a:d0:99:c3:7b:a9:cc:
0f:78:49:31:ce:d3:c3:db:31:00:a1:18:ed:de:cb:af:bc:94:
72:32:cd:19:bc:d0:d1:78:5a:db:0a:ec:04:be:fd:9f:98:65:
88:bc:d4:01:72:46:c0:9a:76:9d:39:63:be:7c:c9:2d:02:cf:
95:c0:bd:a0:76:ca:35:5d:3e:71:71:19:02:c8:4f:79:ad:70:
87:9c:99:3c:b1:8b:ef:ee:a8:d2:77:51:b7:89:e6:b6:62:5e:
a9:7b:b2:d0:d3:22:b1:b5:0f:a8:31:fc:9b:30:74:5e:69:82:
5a:ac:86:58:69:e2:27:49:48:7b:b8:13:63:93:5c:89:7f:ff:
7e:98:17:eb:4a:13:7b:5e:3e:a3:17:cf:48:6a:aa:16:bf:07:
7b:e0:86:a1:33:19:96:34:5b:12:40:8a:8a:20:41:26:35:d1:
6a:a1:af:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyMp9cwJwBtj4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
NTBhMmYyMzctOWRkYi00OWJmLTk2MDktYWNlZGZiMjE0MGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukA/2eMywnhFtUxN0FP5HG0Q1mR5egZn0tjx
06MZtmSx/3fGzPSIZ4INQtMWcLVZQXBBujOy1dM1R2rkERNxOwAFR2pCafW6S8QW
LC1X+Xt7xYG/G3Uej0OT263hnRUtlefVf01saHpkZQCpuJ7ToPN4UJP7qbQvrqei
O3Dk6RAt7YUoHv5NN6VW0P/xhYd+0mRa7YDXQb+lvbRAGTFgQPkTH3eOxseSLGVf
nyfDqwvazrV1SQfV3soFl1zwHMtJ8Vj4RIZAMsbI4/YCOoWE8r+T8CtcduecP+a5
Tig3n3ArA2FkNTIx/EsK3TL9/7C2ABd0SGK1pZDLvslG69ksYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOhDXPgpuYbaan/XTiVn9TGoUYNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBlYmM3Y2YtMjZmYS0z
ZGQxLWI3YmQtMGJlMGM1YzhjMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNqnlPktU4mNs6JRQopYe+tMuJZy3RXe69sKueTUpFrq7uKBZjckR24
icm9xMSNw3x48RuZxtLXT38I1LsAjrRcln8gZEYSHYYgvr5AO6fGkRahStCZw3up
zA94STHO08PbMQChGO3ey6+8lHIyzRm80NF4WtsK7AS+/Z+YZYi81AFyRsCadp05
Y758yS0Cz5XAvaB2yjVdPnFxGQLIT3mtcIecmTyxi+/uqNJ3UbeJ5rZiXql7stDT
IrG1D6gx/JswdF5pglqshlhp4idJSHu4E2OTXIl//36YF+tKE3tePqMXz0hqqha/
B3vghqEzGZY0WxJAioogQSY10Wqhr3o=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:14 2025 by rpki-client