Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b91f747-a4bf-32bb-bc87-52fcaa323e4e.roa
File: 4b91f747-a4bf-32bb-bc87-52fcaa323e4e.roa (raw, json)
Hash identifier: iNSOTKs0tFFZ3IbExeTIhm2KlV0gXjTkxQvmwDutUTY=
Subject key identifier: 9F:BA:BD:0B:94:43:7C:C9:DB:44:6B:71:62:2B:EA:F2:6E:56:02:C8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B91A62A6128554913CE48
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b91f747-a4bf-32bb-bc87-52fcaa323e4e.roa
Signing time: Wed 11 Dec 2024 15:18:00 +0000
ROA not before: Wed 11 Dec 2024 15:18:00 +0000
ROA not after: Tue 11 Mar 2025 14:18:00 +0000
asID: 396543
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:91:a6:2a:61:28:55:49:13:ce:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:00 2024 GMT
Not After : Mar 11 14:18:00 2025 GMT
Subject: CN=55e5bc58-9bfe-4102-a105-bace2187d3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:39:c0:eb:b0:c8:56:bd:1c:dd:93:c5:d0:
43:a0:2a:15:0d:44:8c:d0:fb:7f:7f:71:34:71:f3:
e7:ea:55:86:b1:9f:62:f6:3d:b9:51:12:dc:08:d5:
30:3e:cd:69:c0:73:be:ad:5e:5f:18:89:3b:27:14:
4b:78:ca:19:62:2f:c0:2a:48:2d:03:a0:1e:37:22:
89:1b:42:4a:87:e3:f2:37:e2:4d:0e:f7:fa:14:48:
e3:20:92:8e:92:bf:89:4b:5f:be:6e:ea:2a:6b:54:
3a:13:6e:71:ad:53:9f:e4:91:49:b5:cf:8a:70:37:
c4:ef:9e:48:1d:08:7e:60:5b:2b:e9:b6:75:c2:5c:
5b:e1:ed:bd:2b:77:71:ba:71:19:ff:be:37:9a:2e:
09:a6:c0:ed:3a:a0:cd:6a:18:eb:90:23:e6:e3:b2:
0c:08:8a:bf:b7:53:99:78:b7:fa:af:2e:bf:41:44:
fa:ce:ee:0e:43:a6:d6:bd:18:db:fa:16:ea:53:01:
51:22:86:f6:1f:70:36:a6:53:84:cd:46:54:1a:7a:
40:60:6f:b2:5a:97:6b:dd:f7:18:ac:7a:e2:bc:fa:
3d:42:c6:bc:9b:6e:b5:9e:14:99:b8:8b:ae:9f:c8:
c4:b3:6c:12:67:af:5f:6e:68:c2:cb:b1:13:c6:82:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:BD:0B:94:43:7C:C9:DB:44:6B:71:62:2B:EA:F2:6E:56:02:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b91f747-a4bf-32bb-bc87-52fcaa323e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:9d:04:06:7a:48:35:e6:a5:fa:f2:ea:d7:27:19:88:85:f0:
ce:3b:8c:0f:5d:a3:2d:1f:9f:b8:07:95:e3:27:af:19:80:72:
dc:c6:a1:84:12:af:d3:f0:1e:9c:49:e4:be:e8:b4:63:de:05:
02:29:85:3b:10:4e:56:a1:dc:fa:f2:d2:7b:7b:e8:4e:56:e3:
46:32:95:f6:f7:d4:be:be:3b:01:f9:26:62:00:2d:f3:d8:ce:
94:ac:9e:2e:78:06:b9:8b:02:0e:10:f7:cc:7f:f5:a7:09:dd:
7c:0d:b3:35:b0:10:29:5d:03:87:84:96:24:d7:36:4b:63:03:
86:96:7b:a2:eb:89:8e:69:7a:bf:a1:0c:85:b2:d5:7d:2b:6b:
5e:95:1b:10:68:3f:28:dd:5b:a0:d5:ef:58:62:32:9f:44:9b:
44:a8:b0:2e:1a:a7:b6:5f:ef:a0:c6:3a:51:a9:fd:9c:de:6f:
43:d5:e4:40:96:af:98:6e:32:26:9a:cc:37:52:c6:ef:18:24:
70:78:1a:d9:62:f7:0d:a0:ed:03:ea:65:64:77:c4:43:d0:b3:
a5:3b:c8:08:1f:87:76:b7:69:3f:e3:25:86:3e:d0:72:09:5f:
dc:21:f7:fb:06:68:55:19:01:ca:ff:7d:59:65:a3:0a:a7:1d:
51:90:44:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG5GmKmEoVUkTzkgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwMFoXDTI1MDMxMTE0MTgwMFowLzEtMCsGA1UEAxMk
NTVlNWJjNTgtOWJmZS00MTAyLWExMDUtYmFjZTIxODdkM2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx45wOuwyFa9HN2TxdBDoCoVDUSM0Pt/f3E0
cfPn6lWGsZ9i9j25URLcCNUwPs1pwHO+rV5fGIk7JxRLeMoZYi/AKkgtA6AeNyKJ
G0JKh+PyN+JNDvf6FEjjIJKOkr+JS1++buoqa1Q6E25xrVOf5JFJtc+KcDfE755I
HQh+YFsr6bZ1wlxb4e29K3dxunEZ/743mi4JpsDtOqDNahjrkCPm47IMCIq/t1OZ
eLf6ry6/QUT6zu4OQ6bWvRjb+hbqUwFRIob2H3A2plOEzUZUGnpAYG+yWpdr3fcY
rHrivPo9Qsa8m261nhSZuIuun8jEs2wSZ69fbmjCy7ETxoKDcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+6vQuUQ3zJ20RrcWIr6vJuVgLIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGI5MWY3NDctYTRiZi0z
MmJiLWJjODctNTJmY2FhMzIzZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOdBAZ6SDXmpfry6tcnGYiF8M47jA9doy0fn7gHleMnrxmActzGoYQS
r9PwHpxJ5L7otGPeBQIphTsQTlah3Pry0nt76E5W40Yylfb31L6+OwH5JmIALfPY
zpSsni54BrmLAg4Q98x/9acJ3XwNszWwECldA4eEliTXNktjA4aWe6LriY5per+h
DIWy1X0ra16VGxBoPyjdW6DV71hiMp9Em0SosC4ap7Zf76DGOlGp/Zzeb0PV5ECW
r5huMiaazDdSxu8YJHB4Gtli9w2g7QPqZWR3xEPQs6U7yAgfh3a3aT/jJYY+0HIJ
X9wh9/sGaFUZAcr/fVllowqnHVGQRE4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:29:08 2025 by rpki-client