Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ef94be7-0a4a-3540-880d-424647ccedc1.roa
File: 4ef94be7-0a4a-3540-880d-424647ccedc1.roa (raw, json)
Hash identifier: UnjejD24l4h7EmDi1pT56nOrP/alrdb+bq5gX5EDZgU=
Subject key identifier: E5:D9:2E:50:05:A2:FB:29:B9:F7:C1:1E:F6:FB:D7:AB:3C:E7:EE:4F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8FF73693D3B5FCC761C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ef94be7-0a4a-3540-880d-424647ccedc1.roa
Signing time: Wed 11 Dec 2024 15:17:59 +0000
ROA not before: Wed 11 Dec 2024 15:17:59 +0000
ROA not after: Tue 11 Mar 2025 14:17:59 +0000
asID: 36618
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8f:f7:36:93:d3:b5:fc:c7:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:59 2024 GMT
Not After : Mar 11 14:17:59 2025 GMT
Subject: CN=1cc618fc-f023-4267-8d54-849305a02a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:52:f4:44:d6:6a:a9:7f:ff:e1:3f:3d:c3:
69:92:ef:43:46:98:26:94:e2:92:47:5b:83:e3:8e:
63:19:f8:52:36:cd:dc:25:14:2e:b7:37:ba:bd:7f:
4a:c2:ed:76:6e:cf:23:a6:bb:dd:cf:39:ec:00:cb:
8e:37:a3:4b:28:f3:f0:33:03:36:e8:a5:4a:bb:4d:
b6:8b:a0:41:a3:c0:8e:95:ea:f1:a0:dd:e3:f8:c2:
69:00:a7:9a:4c:35:d4:a4:38:ad:90:7b:4b:da:29:
5c:09:db:ae:fa:c4:fc:10:9c:4e:b9:6e:69:6d:b1:
f6:9a:08:e4:f4:3c:e7:f2:2c:3e:26:89:0b:1e:e7:
0f:22:15:9c:4b:81:e6:23:76:5f:68:06:67:10:7f:
b4:00:d6:94:d8:90:9d:f0:e2:bf:ad:7f:e6:1d:21:
1b:a1:7a:f4:6a:cc:54:f8:19:14:ac:b4:cd:65:2f:
59:60:8f:4a:ff:a4:b8:2b:ac:3d:dc:a6:03:ee:8f:
91:8a:47:1e:33:96:3f:86:b0:bb:02:3d:a5:64:9c:
92:fc:02:60:6c:32:cc:af:30:8e:46:f4:0b:16:35:
03:3c:6e:9f:7f:7d:cd:88:60:84:11:54:77:8c:c6:
43:19:ff:a5:32:5b:a7:63:14:93:dc:da:cd:f6:84:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:2E:50:05:A2:FB:29:B9:F7:C1:1E:F6:FB:D7:AB:3C:E7:EE:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ef94be7-0a4a-3540-880d-424647ccedc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9c:3d:14:83:50:3c:1a:41:6f:4a:ce:f9:de:20:dd:86:f7:
e7:5a:50:11:ef:aa:20:56:d9:99:81:04:9e:bc:80:e6:24:e3:
0f:45:71:a1:83:c2:2e:bd:b7:4e:c0:48:b3:94:3a:a5:3b:e1:
b4:9e:c0:32:c0:12:2d:df:b8:61:5a:e4:0d:83:fc:94:25:fa:
07:83:a8:e9:93:ad:13:22:a1:c2:ef:eb:22:97:cc:93:35:60:
42:b6:5d:80:61:7e:79:54:e7:e4:0b:15:ee:bf:27:73:c5:df:
d4:16:a4:af:ea:0a:74:2b:d9:4c:db:a6:ae:84:72:65:66:bb:
c3:d8:85:e5:b0:91:44:14:96:3f:31:ca:8b:af:84:08:64:2e:
8a:dd:5c:c4:e8:b7:9f:d0:d4:0e:36:4e:b9:0f:a9:ce:a5:1c:
a4:a6:19:0d:69:2e:1a:df:8c:02:34:2f:4d:9a:ce:13:f3:e5:
32:5b:78:f2:44:ed:03:b9:a2:8a:55:fa:16:c4:61:70:2c:26:
fd:47:c8:28:ae:22:f2:23:f9:0d:a9:36:0c:f6:81:ba:97:3c:
e6:ff:e3:7a:38:f3:a0:e8:0a:cc:3a:99:e2:44:2c:e6:f2:7a:
99:0a:f7:5f:77:0f:04:1b:68:25:e7:cd:43:c3:e4:5f:ab:17:
19:74:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:09 2025 by rpki-client