Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/706078fa-df26-3471-9add-ec04f74477ff.roa
File: 706078fa-df26-3471-9add-ec04f74477ff.roa (raw, json)
Hash identifier: I+7Nn1HZKzTPz9MmMz1hno+g2sGdOV2d+oSUZE07s9A=
Subject key identifier: 53:BD:65:DA:FA:EE:20:E9:CD:31:2A:37:68:24:BB:65:33:0D:3B:85
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA11C9F3CE4D708C65580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/706078fa-df26-3471-9add-ec04f74477ff.roa
Signing time: Wed 11 Dec 2024 15:18:07 +0000
ROA not before: Wed 11 Dec 2024 15:18:07 +0000
ROA not after: Tue 11 Mar 2025 14:18:07 +0000
asID: 397209
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a1:1c:9f:3c:e4:d7:08:c6:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:07 2024 GMT
Not After : Mar 11 14:18:07 2025 GMT
Subject: CN=1d20d576-12a8-424a-a849-97fef1874450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:e7:40:36:a5:9a:31:ea:bf:5d:65:d6:83:
f3:ef:59:59:07:99:65:24:6f:04:de:52:c5:70:bb:
3b:85:5b:8f:2f:1e:c3:03:cd:67:40:8b:04:98:1d:
8d:14:61:3d:d2:20:9b:14:bf:10:d6:b9:fc:5d:fe:
76:52:46:f3:b7:4a:f9:fd:23:cf:cf:31:86:ad:1c:
42:a9:22:04:7d:36:a3:1a:cc:ad:4c:63:9f:83:c1:
c4:ac:8f:8c:5c:e7:3a:aa:d1:74:68:61:7c:23:c2:
29:0a:e4:2f:e1:60:94:02:0d:34:fc:9a:84:0a:b3:
b9:61:9a:ad:17:8a:cf:40:bb:c0:d6:7f:e2:55:74:
de:e0:e5:4f:0d:40:bf:97:56:95:78:80:9d:1f:c0:
8b:a1:7a:79:e3:d9:67:1b:e6:2d:17:3b:57:55:ff:
63:b3:bd:fc:e1:7e:a9:0f:cc:92:7c:5f:77:da:a9:
10:93:19:b6:60:be:6c:9a:75:25:7f:78:29:d0:e1:
4a:9e:b6:e5:b5:cf:f6:34:6b:75:cb:e6:c2:0a:3b:
75:7e:02:81:98:f2:6a:76:0e:58:b3:c9:bc:30:31:
fc:50:1f:89:cb:6b:8e:9e:54:75:fe:20:a2:69:3e:
18:62:d8:f8:57:ea:ed:b1:f5:78:d0:f0:a9:20:76:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BD:65:DA:FA:EE:20:E9:CD:31:2A:37:68:24:BB:65:33:0D:3B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/706078fa-df26-3471-9add-ec04f74477ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:a7:dc:b9:b7:f9:70:8b:a5:07:4b:3a:94:c6:b1:05:03:2b:
32:28:4b:a0:a1:f9:37:79:c4:6e:2a:f4:b0:6f:0d:e4:cf:87:
b8:dd:82:3b:d0:84:13:0b:c9:5c:92:93:8f:ad:aa:d1:a7:7f:
ac:a0:a4:f7:4c:f0:7b:aa:6e:fd:00:2f:74:11:b7:24:b6:0e:
d3:a4:b7:ed:f4:0f:34:a3:e2:31:ac:1f:0f:77:f2:20:f3:5a:
53:07:b5:5b:98:5f:40:c6:ac:84:5c:05:4c:ad:01:1a:69:53:
5a:6a:a3:1c:b0:54:1a:11:74:71:fb:af:fc:4c:11:10:d6:b1:
b9:fa:04:d7:a5:b9:7a:29:b7:73:f1:2e:b3:7a:5f:d8:7d:f2:
8f:54:7f:f5:78:2e:da:8b:2e:9c:5d:7e:74:1c:af:29:00:ac:
8d:79:f1:f7:d0:a7:42:8f:6e:fe:ce:be:26:41:dc:35:4e:7a:
3b:a4:f1:11:eb:70:87:4c:6c:9c:bc:f8:25:f5:44:80:bc:3e:
4f:73:e6:37:1a:85:bb:dd:3e:8d:7a:d8:56:5c:40:68:5f:70:
f3:2e:a4:bc:d0:e5:a5:43:37:00:c5:0e:d3:72:d2:78:7b:10:
3f:6d:ce:81:f3:c3:ab:cc:52:81:16:c8:f0:21:a4:c7:c8:69:
e8:cf:b3:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG6Ecnzzk1wjGVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwN1oXDTI1MDMxMTE0MTgwN1owLzEtMCsGA1UEAxMk
MWQyMGQ1NzYtMTJhOC00MjRhLWE4NDktOTdmZWYxODc0NDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hznQDalmjHqv11l1oPz71lZB5llJG8E3lLF
cLs7hVuPLx7DA81nQIsEmB2NFGE90iCbFL8Q1rn8Xf52Ukbzt0r5/SPPzzGGrRxC
qSIEfTajGsytTGOfg8HErI+MXOc6qtF0aGF8I8IpCuQv4WCUAg00/JqECrO5YZqt
F4rPQLvA1n/iVXTe4OVPDUC/l1aVeICdH8CLoXp549lnG+YtFztXVf9js7384X6p
D8ySfF932qkQkxm2YL5smnUlf3gp0OFKnrbltc/2NGt1y+bCCjt1fgKBmPJqdg5Y
s8m8MDH8UB+Jy2uOnlR1/iCiaT4YYtj4V+rtsfV40PCpIHZu0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO9Zdr67iDpzTEqN2gku2UzDTuFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzA2MDc4ZmEtZGYyNi0z
NDcxLTlhZGQtZWMwNGY3NDQ3N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGn3Lm3+XCLpQdLOpTGsQUDKzIoS6Ch+Td5xG4q9LBvDeTPh7jdgjvQ
hBMLyVySk4+tqtGnf6ygpPdM8Huqbv0AL3QRtyS2DtOkt+30DzSj4jGsHw938iDz
WlMHtVuYX0DGrIRcBUytARppU1pqoxywVBoRdHH7r/xMERDWsbn6BNeluXopt3Px
LrN6X9h98o9Uf/V4LtqLLpxdfnQcrykArI158ffQp0KPbv7OviZB3DVOejuk8RHr
cIdMbJy8+CX1RIC8Pk9z5jcahbvdPo162FZcQGhfcPMupLzQ5aVDNwDFDtNy0nh7
ED9tzoHzw6vMUoEWyPAhpMfIaejPs+8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:19 2025 by rpki-client