Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa
File: 6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa (raw, json)
Hash identifier: CfNmnI3KSL/95xhYIXhPJFaLMm+NZZybmh9/YuJNVqQ=
Subject key identifier: E2:97:BB:2A:FD:95:32:29:71:BE:E1:A3:56:CC:87:01:14:93:13:04
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B855670FDF2C0C4B50280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa
Signing time: Wed 11 Dec 2024 15:17:54 +0000
ROA not before: Wed 11 Dec 2024 15:17:54 +0000
ROA not after: Tue 11 Mar 2025 14:17:54 +0000
asID: 396545
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:85:56:70:fd:f2:c0:c4:b5:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:54 2024 GMT
Not After : Mar 11 14:17:54 2025 GMT
Subject: CN=c6401c9b-96b9-42bf-8e53-9e63885fb27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:3d:4d:c8:de:48:cc:85:4e:35:4d:06:1c:
ad:b5:22:ee:72:87:9e:74:2e:2e:f5:84:d1:17:79:
81:9a:9d:09:4a:0a:71:d6:5b:ca:5f:ad:4b:b9:53:
47:b6:df:c1:bd:1f:87:75:12:a6:0c:39:58:1e:de:
81:1e:d7:d9:69:0a:a1:a9:dc:e3:0b:06:ac:36:4e:
7b:28:b3:f6:9e:49:c0:5d:7a:40:31:ee:44:4b:99:
4c:e0:a5:37:9b:74:14:80:03:ac:ae:c8:c5:5f:1f:
e0:33:12:80:ca:2a:75:f8:61:40:dd:c6:e3:49:53:
80:ad:07:57:f7:ce:8a:a6:c7:50:ef:0d:0c:4c:d1:
35:f0:57:ef:a6:6e:aa:bf:3f:c7:5d:ea:44:8f:49:
c4:d9:58:67:5c:88:44:13:c0:5e:11:f5:7d:dd:5d:
bc:e7:34:73:11:f7:76:8b:81:71:33:3b:2b:f8:84:
fd:e1:bf:e1:56:77:9d:5a:59:dc:91:dc:7d:23:55:
77:71:eb:5a:b3:b3:d5:0e:2e:59:da:e8:71:45:c9:
8b:65:f2:b3:2b:24:82:cd:9d:eb:b2:ed:f7:db:02:
81:90:ba:b0:e8:d8:e2:0a:16:90:62:52:68:d0:33:
4a:2a:02:81:b2:52:9b:04:e2:16:d8:67:e1:c1:b6:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:BB:2A:FD:95:32:29:71:BE:E1:A3:56:CC:87:01:14:93:13:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6af2a3a7-f9b8-35e7-968e-2f0168a51391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e8:a3:45:e7:e0:3d:85:23:13:10:e5:04:3d:cd:a1:00:dc:
cf:b2:34:20:89:92:e3:5e:c1:ff:c4:a8:56:93:d0:b9:4f:01:
b3:8e:d6:cc:7b:02:ab:a8:5f:50:20:eb:39:c7:97:24:21:f5:
f6:14:67:32:90:0e:59:d7:54:ef:72:f4:32:42:24:61:c0:25:
7a:40:86:57:b6:e2:1e:f5:6f:2e:a6:14:c9:50:e7:f0:e5:79:
56:1d:86:fa:b1:e6:91:73:9a:5b:f1:46:ca:e3:8c:09:aa:b8:
a3:c1:c8:eb:67:23:95:23:c6:b5:36:c0:51:4f:11:de:b9:45:
06:cb:65:50:ac:60:33:d3:8d:b4:38:ae:e7:da:57:4f:f0:1c:
2c:f3:db:70:af:7a:25:3c:d1:d1:9c:12:ad:6c:3b:9d:f4:15:
89:14:1c:e1:ae:fe:85:3a:3b:ef:9a:5a:4c:59:3a:df:45:f7:
22:7f:08:d4:8d:f9:c6:6c:d6:65:c3:4d:9e:00:09:0b:66:ae:
61:46:5d:4b:50:bb:38:ee:e3:91:f1:9c:0a:7d:07:87:14:a4:
4d:22:68:6d:53:91:33:8f:83:73:22:3c:3e:3f:7e:f4:76:99:
02:92:70:03:96:06:c5:62:fd:ad:29:00:46:f6:bb:01:10:50:
18:2e:f8:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG4VWcP3ywMS1AoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTc1NFoXDTI1MDMxMTE0MTc1NFowLzEtMCsGA1UEAxMk
YzY0MDFjOWItOTZiOS00MmJmLThlNTMtOWU2Mzg4NWZiMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lo9TcjeSMyFTjVNBhyttSLucoeedC4u9YTR
F3mBmp0JSgpx1lvKX61LuVNHtt/BvR+HdRKmDDlYHt6BHtfZaQqhqdzjCwasNk57
KLP2nknAXXpAMe5ES5lM4KU3m3QUgAOsrsjFXx/gMxKAyip1+GFA3cbjSVOArQdX
986KpsdQ7w0MTNE18Ffvpm6qvz/HXepEj0nE2VhnXIhEE8BeEfV93V285zRzEfd2
i4FxMzsr+IT94b/hVnedWlnckdx9I1V3cetas7PVDi5Z2uhxRcmLZfKzKySCzZ3r
su332wKBkLqw6NjiChaQYlJo0DNKKgKBslKbBOIW2GfhwbZpLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKXuyr9lTIpcb7ho1bMhwEUkxMEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmFmMmEzYTctZjliOC0z
NWU3LTk2OGUtMmYwMTY4YTUxMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPoo0Xn4D2FIxMQ5QQ9zaEA3M+yNCCJkuNewf/EqFaT0LlPAbOO1sx7
AquoX1Ag6znHlyQh9fYUZzKQDlnXVO9y9DJCJGHAJXpAhle24h71by6mFMlQ5/Dl
eVYdhvqx5pFzmlvxRsrjjAmquKPByOtnI5UjxrU2wFFPEd65RQbLZVCsYDPTjbQ4
rufaV0/wHCzz23CveiU80dGcEq1sO530FYkUHOGu/oU6O++aWkxZOt9F9yJ/CNSN
+cZs1mXDTZ4ACQtmrmFGXUtQuzju45HxnAp9B4cUpE0iaG1TkTOPg3MiPD4/fvR2
mQKScAOWBsVi/a0pAEb2uwEQUBgu+Fo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:36 2025 by rpki-client