Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/637c1eb3-7919-32d9-8d7f-0ec008b76bcc.roa
File: 637c1eb3-7919-32d9-8d7f-0ec008b76bcc.roa (raw, json)
Hash identifier: BlyGOLQzpWi4///cxb6joLZ4PKJv6wj59hQ90p/xE2M=
Subject key identifier: 49:8D:12:D4:BA:23:AB:48:8F:6D:FC:97:44:DC:48:6C:E3:99:E7:60
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8D8404E92EB639D20500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/637c1eb3-7919-32d9-8d7f-0ec008b76bcc.roa
Signing time: Wed 11 Dec 2024 15:17:58 +0000
ROA not before: Wed 11 Dec 2024 15:17:58 +0000
ROA not after: Tue 11 Mar 2025 14:17:58 +0000
asID: 20362
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8d:84:04:e9:2e:b6:39:d2:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:58 2024 GMT
Not After : Mar 11 14:17:58 2025 GMT
Subject: CN=4893f1d4-f2a1-4551-afbd-bd0e1d9101c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:b2:f2:27:f9:a5:9f:f1:fc:52:e2:0e:c2:
8a:17:95:3f:f9:86:bc:84:ee:f9:07:d9:14:cb:d7:
01:40:9f:c3:38:1b:68:9c:f6:fa:6f:48:bd:fa:a6:
ba:1d:ca:58:b4:ec:f8:b5:99:82:56:d5:7e:f5:8b:
e3:b7:9a:f3:eb:99:c6:df:b7:12:6f:fd:87:95:d8:
87:b3:b2:0d:ac:37:ce:dc:07:1d:51:6a:a8:ce:37:
7a:ae:8f:11:71:99:25:59:f8:3f:1c:0e:56:ca:4e:
ff:46:f5:72:82:d7:7d:50:ea:8d:3d:2a:9c:7e:86:
84:a7:ac:b2:bc:71:c4:14:7c:39:0b:7e:02:09:34:
f7:a0:95:52:b1:61:d1:86:44:8a:37:0e:50:21:a0:
e7:c0:97:9b:ee:5e:29:bf:84:bc:65:f0:94:af:f7:
04:98:4e:b2:7c:1b:26:d9:7c:4d:56:c6:48:5d:3c:
e4:17:d2:c6:37:96:46:b2:62:7d:04:e8:03:2d:ed:
b4:e1:c2:57:b9:af:58:de:2c:0a:46:34:38:fc:19:
16:18:ed:96:37:a7:01:cc:c1:80:5c:00:bc:68:6b:
a7:4c:b4:50:a3:f7:f9:fc:85:db:7b:02:c1:4f:8f:
75:0a:75:b9:33:3c:e0:13:33:89:fa:06:cb:a9:c2:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8D:12:D4:BA:23:AB:48:8F:6D:FC:97:44:DC:48:6C:E3:99:E7:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/637c1eb3-7919-32d9-8d7f-0ec008b76bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:de:81:c6:a2:90:f2:fb:c7:f6:57:f3:c9:30:ad:45:30:b2:
1d:39:29:ea:de:b0:19:76:56:78:be:d3:91:b9:ef:d2:ca:49:
6a:fa:0c:76:ac:9e:25:39:03:35:6c:1e:f6:ef:36:84:4a:4e:
9f:53:5d:69:db:37:a0:fe:fe:7d:ae:c2:85:ab:07:33:05:16:
5e:8a:36:fb:c0:53:1a:4d:8c:03:88:ba:cd:2a:50:57:77:6d:
84:80:1c:ef:6d:da:10:06:cc:88:de:e6:eb:03:3b:d1:25:af:
a8:9e:b2:fe:e5:ce:44:3e:b9:15:a3:19:ed:97:a3:dc:64:01:
31:a5:17:d5:bc:9f:7e:90:d4:00:13:d0:a2:6b:c9:d8:b9:40:
6e:47:e3:47:90:bc:6a:e9:b3:6f:f0:c1:b7:d9:8f:74:47:16:
7c:ed:0b:a7:51:fc:cc:3a:d5:24:5c:48:e4:70:4f:53:35:f0:
d1:ef:07:7c:94:f4:27:55:72:44:a3:ce:a7:97:f0:2c:af:e0:
7f:82:b8:89:38:0a:33:b0:e2:e2:af:f2:c6:e9:24:2d:a0:c4:
cf:8d:79:5f:2b:f2:3a:cd:12:e9:6b:a9:12:82:8c:ba:65:72:
39:25:9b:9c:69:10:da:73:f2:a9:bb:3c:b5:a1:96:b2:e2:f7:
71:1c:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:21 2025 by rpki-client