Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6326df30-ab01-312c-a398-5a589f111b7e.roa
File: 6326df30-ab01-312c-a398-5a589f111b7e.roa (raw, json)
Hash identifier: nnM7K68jXZWs8dzHuDVWt/zbY4pPJZi5jLcdAH09Jqk=
Subject key identifier: 77:32:A8:A4:57:0A:17:E6:92:88:E2:43:52:6B:F7:F7:39:17:BF:E3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B9A3B52C41E8B229640C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6326df30-ab01-312c-a398-5a589f111b7e.roa
Signing time: Wed 11 Dec 2024 15:18:04 +0000
ROA not before: Wed 11 Dec 2024 15:18:04 +0000
ROA not after: Tue 11 Mar 2025 14:18:04 +0000
asID: 36624
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:9a:3b:52:c4:1e:8b:22:96:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:04 2024 GMT
Not After : Mar 11 14:18:04 2025 GMT
Subject: CN=d93f3073-b11b-41b2-bc03-347c47471259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:1b:44:8c:40:f9:d9:30:bc:2d:69:41:7f:
a2:0a:a9:6f:bc:a0:7e:07:f1:62:20:88:e1:87:81:
d1:a6:3c:b2:a6:40:0b:96:fd:4c:95:5d:2b:c4:5c:
da:cb:0d:b0:7e:59:f2:2b:b9:9d:e7:bd:db:9d:1b:
b8:6a:37:bb:0a:98:a4:05:0e:3a:a4:43:eb:b8:21:
2e:3e:17:b6:d6:0f:17:ca:7d:92:24:30:4a:ec:cf:
1d:85:5a:09:be:d2:f0:4f:49:b1:2c:39:c0:1b:e3:
19:b8:64:d6:2f:94:79:de:0d:ec:f1:dc:2a:21:46:
8d:ba:f8:6a:04:79:51:29:b2:bb:a3:04:79:90:db:
5c:80:87:42:c6:14:b2:b4:39:01:d0:a1:56:4a:b2:
47:c5:db:44:fa:a6:b6:14:a7:d9:c1:71:21:62:00:
5d:e9:83:ba:96:d7:ed:f3:15:6c:35:a7:6d:8d:7c:
f2:43:19:46:4c:4d:fe:07:65:df:5b:bc:f5:71:85:
c0:5d:9f:80:5e:ad:45:2a:a1:d9:6b:4e:ae:2e:eb:
7d:ba:69:94:79:67:fa:9d:32:72:15:bb:78:57:8d:
2b:a1:6f:5f:0c:53:0e:40:9c:5c:bd:fd:bd:c9:d7:
d0:cc:47:32:cb:c3:67:f4:65:f0:ee:83:ed:b5:63:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:A8:A4:57:0A:17:E6:92:88:E2:43:52:6B:F7:F7:39:17:BF:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6326df30-ab01-312c-a398-5a589f111b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:77:28:6a:b4:35:7c:08:fd:2f:ba:06:f6:19:24:86:f7:c0:
d7:13:9f:7a:94:be:0b:bc:22:97:62:6a:fc:1a:f1:a1:02:49:
c3:3c:b2:81:ff:7f:65:ef:e5:21:a6:65:e2:67:0b:66:e2:9d:
58:d3:36:91:1e:93:c4:18:56:87:40:ef:ed:78:c0:9d:6f:9d:
cf:ae:ce:42:d0:60:e6:c4:18:6e:ab:c6:77:62:1e:fc:bd:a9:
59:43:16:69:61:18:0d:88:77:62:27:98:35:29:7d:c4:61:20:
e1:e5:2b:e6:1a:d7:84:93:12:39:50:55:48:e8:4c:2e:31:1b:
6b:c1:2d:bb:41:40:69:47:44:14:7a:b7:d4:e5:c6:70:cd:26:
2a:fc:b3:95:fd:37:f2:3c:ef:7d:17:ce:86:ef:75:77:ae:bb:
8a:04:2e:da:ec:24:4f:c2:68:55:e6:c9:cf:69:c0:3c:da:0a:
6f:9e:fc:af:22:44:ce:ed:f9:f6:09:df:aa:45:93:6d:6d:4d:
87:72:a2:6c:63:8d:b4:2f:d0:df:1a:a9:74:b4:a2:d7:c5:51:
e0:3c:30:4b:09:ee:8b:dd:22:3b:74:1e:3f:5f:78:84:bc:78:
cc:d4:43:73:b4:aa:4b:d8:fc:96:29:f1:ac:8b:f1:a0:a9:5f:
8c:b7:e5:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG5o7UsQeiyKWQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwNFoXDTI1MDMxMTE0MTgwNFowLzEtMCsGA1UEAxMk
ZDkzZjMwNzMtYjExYi00MWIyLWJjMDMtMzQ3YzQ3NDcxMjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDobRIxA+dkwvC1pQX+iCqlvvKB+B/FiIIjh
h4HRpjyypkALlv1MlV0rxFzayw2wflnyK7md573bnRu4aje7CpikBQ46pEPruCEu
Phe21g8Xyn2SJDBK7M8dhVoJvtLwT0mxLDnAG+MZuGTWL5R53g3s8dwqIUaNuvhq
BHlRKbK7owR5kNtcgIdCxhSytDkB0KFWSrJHxdtE+qa2FKfZwXEhYgBd6YO6ltft
8xVsNadtjXzyQxlGTE3+B2XfW7z1cYXAXZ+AXq1FKqHZa06uLut9ummUeWf6nTJy
Fbt4V40roW9fDFMOQJxcvf29ydfQzEcyy8Nn9GXw7oPttWN3EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcyqKRXChfmkojiQ1Jr9/c5F7/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjMyNmRmMzAtYWIwMS0z
MTJjLWEzOTgtNWE1ODlmMTExYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF93KGq0NXwI/S+6BvYZJIb3wNcTn3qUvgu8Ipdiavwa8aECScM8soH/
f2Xv5SGmZeJnC2binVjTNpEek8QYVodA7+14wJ1vnc+uzkLQYObEGG6rxndiHvy9
qVlDFmlhGA2Id2InmDUpfcRhIOHlK+Ya14STEjlQVUjoTC4xG2vBLbtBQGlHRBR6
t9TlxnDNJir8s5X9N/I8730XzobvdXeuu4oELtrsJE/CaFXmyc9pwDzaCm+e/K8i
RM7t+fYJ36pFk21tTYdyomxjjbQv0N8aqXS0otfFUeA8MEsJ7ovdIjt0Hj9feIS8
eMzUQ3O0qkvY/JYp8ayL8aCpX4y35fo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:03:49 2025 by rpki-client