Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82cb8e16-8af6-3ae2-8f8f-bc30b9f13671.roa
File: 82cb8e16-8af6-3ae2-8f8f-bc30b9f13671.roa (raw, json)
Hash identifier: z/rKXt6cUfsyJTjpv40q4BxSMFjgzK50RaAX+bMAoIo=
Subject key identifier: 56:7D:0E:A5:CF:B4:81:B2:66:04:22:61:BE:8D:DC:3C:86:C7:48:81
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B98B248795848243D0770
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82cb8e16-8af6-3ae2-8f8f-bc30b9f13671.roa
Signing time: Wed 11 Dec 2024 15:18:03 +0000
ROA not before: Wed 11 Dec 2024 15:18:03 +0000
ROA not after: Tue 11 Mar 2025 14:18:03 +0000
asID: 396569
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:98:b2:48:79:58:48:24:3d:07:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:03 2024 GMT
Not After : Mar 11 14:18:03 2025 GMT
Subject: CN=f1025b5b-53c9-43b3-ae02-3fb5c5c1ac8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:1d:b2:28:76:f6:5c:70:79:36:40:c5:9b:
88:05:cb:20:8f:ff:29:a1:50:45:a2:78:2b:8e:44:
55:c1:c1:2f:66:19:e4:04:c4:b0:f7:25:8b:58:e2:
68:dc:01:a1:57:b6:3a:e6:9d:87:dd:58:9b:cf:05:
ea:d6:a7:86:94:9f:36:d8:1b:78:0b:79:28:a1:86:
bf:32:c8:db:74:f6:57:20:a0:df:c3:58:9c:08:47:
e2:64:6b:c8:3c:27:22:eb:2c:fe:94:41:2b:f6:f9:
52:7d:92:14:0b:ad:eb:72:46:50:d8:7a:e7:2f:cd:
5d:7f:79:01:18:f2:70:4e:e2:2e:a1:f4:63:e0:97:
d9:ee:b3:c5:17:2f:09:7c:9a:62:7c:bd:f0:c3:d7:
b8:52:c3:1f:90:ad:44:2b:cb:5a:0f:c7:fe:2e:7a:
9f:3c:88:93:5c:0a:37:61:0f:55:fa:33:05:c1:74:
f9:9d:15:d3:9a:50:32:d0:dc:53:10:49:16:0f:99:
9a:e1:62:e8:6c:61:87:cb:57:a4:9a:a8:e0:7e:31:
39:fc:3b:d8:4f:dd:e3:bd:f4:e2:c0:75:c7:bd:4e:
d0:bc:d8:e0:64:9b:0f:80:73:ef:39:0b:2a:9d:0c:
3f:df:e0:45:ab:1d:97:ec:11:89:63:d7:57:22:24:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:0E:A5:CF:B4:81:B2:66:04:22:61:BE:8D:DC:3C:86:C7:48:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82cb8e16-8af6-3ae2-8f8f-bc30b9f13671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:66:ad:ba:e8:1f:48:ac:a4:ff:f0:ac:8a:fb:b2:45:57:c2:
11:07:65:c9:63:25:9e:b9:15:04:0f:51:8a:52:1d:9f:32:05:
cc:5d:49:1b:5a:8c:9e:a0:12:cc:8c:c8:d8:3a:5d:e9:fa:db:
84:bd:43:00:79:a4:73:2b:41:1f:a7:7b:90:10:ea:98:d0:25:
0d:01:00:bd:dd:ba:90:43:8f:e1:28:2f:45:8d:13:0f:fd:4b:
01:3c:b2:4e:7a:35:93:72:01:34:0f:04:6e:36:55:d3:e0:a3:
06:e1:f1:55:d3:ca:8d:24:b4:16:7b:22:15:5c:91:f8:44:a5:
bd:f2:3d:22:65:d3:91:e9:4f:a2:44:87:05:56:00:26:eb:74:
e5:72:d8:4a:c3:4e:67:03:0d:99:80:61:d6:0b:57:f1:2a:de:
54:c9:67:fb:a1:85:92:28:a8:6d:5c:af:64:c7:be:9c:b9:d7:
8b:70:c4:c3:c5:de:05:b1:2c:c8:88:57:fd:03:3d:75:ec:35:
51:fd:74:9f:74:a3:ef:d4:e9:b8:6a:ab:15:76:ca:de:81:be:
3f:80:ec:e0:ce:03:00:96:36:af:88:f4:f0:f5:48:94:5c:35:
6a:4f:e3:13:24:1b:2a:2c:6f:36:ca:e2:c9:3c:a0:7c:c0:9a:
67:a4:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:01:33 2025 by rpki-client