Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
File: 86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa (raw, json)
Hash identifier: HXtLsxVzDat/8WX19shrEhGKbLcKl8jWl+TjmWCwhSo=
Subject key identifier: 95:96:CB:7D:40:97:C2:5A:BD:9E:2B:B3:13:AC:09:1B:28:CB:9D:C6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8E0480B120BA33CC4E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
Signing time: Wed 11 Dec 2024 15:17:58 +0000
ROA not before: Wed 11 Dec 2024 15:17:58 +0000
ROA not after: Tue 11 Mar 2025 14:17:58 +0000
asID: 396563
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8e:04:80:b1:20:ba:33:cc:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:58 2024 GMT
Not After : Mar 11 14:17:58 2025 GMT
Subject: CN=97fdaf8b-1a35-4b75-936b-8b4ec43c75cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:b1:fa:e0:d7:4c:97:d6:22:04:6e:29:02:
24:fe:27:d5:4f:e7:75:9e:85:62:7b:42:4e:d0:99:
ba:c2:03:34:ab:d8:99:a6:46:42:9c:f2:66:d2:d1:
24:14:a3:ac:fc:b5:d4:89:2d:c4:cd:a6:b7:53:f5:
bb:b7:20:61:7f:90:19:f5:ac:79:ca:bd:cd:ec:07:
8b:38:a5:e2:97:94:8f:c2:e2:c7:81:58:b5:23:49:
9e:e3:55:52:20:02:30:20:f7:b2:de:30:45:59:69:
a9:de:36:c8:4a:4f:42:3f:b5:0f:8f:5d:2c:67:46:
e7:60:57:b6:65:f0:c6:ce:f7:0b:d0:fd:03:b0:fe:
e8:38:28:78:bf:82:af:19:56:8c:45:5f:51:79:27:
66:dc:85:88:61:3c:53:cd:27:3a:23:9e:e8:2a:b2:
ae:b4:e7:55:7c:a3:cb:1a:e3:44:c0:0f:6c:ef:79:
34:64:40:ee:e9:e0:0f:0b:a3:aa:93:02:4b:94:99:
f1:8f:ae:f2:1e:7c:7d:b7:d6:d5:b3:e5:56:f6:19:
d2:d6:a7:b4:cf:97:8e:5c:85:53:32:36:af:7b:dd:
d4:1d:63:1f:cc:6a:33:71:a8:25:6d:18:e7:4c:bc:
6a:2b:36:8a:24:ed:b1:25:60:25:65:c6:eb:d7:51:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:CB:7D:40:97:C2:5A:BD:9E:2B:B3:13:AC:09:1B:28:CB:9D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:c5:df:73:62:75:d7:a8:fa:65:bf:37:bf:73:70:35:b1:86:
48:00:67:20:ec:a7:68:32:a7:52:e0:8b:b3:9c:91:e2:3a:47:
ed:0c:26:93:b3:2a:05:28:55:64:1c:b6:f3:a3:ad:3e:b8:15:
e4:36:3f:84:f2:8c:62:eb:36:f1:f9:e2:78:cd:d3:de:b8:b4:
ed:ef:de:7d:44:99:48:98:fc:3a:cb:a1:34:26:e3:78:3b:44:
9f:27:41:01:32:e3:bb:45:7d:ab:54:b9:18:0b:8d:18:7f:08:
b4:2a:76:f6:18:f3:74:24:71:8c:2e:64:79:a1:91:f8:79:99:
ae:b3:cc:1e:89:e7:87:a1:ca:fb:5a:1a:73:26:27:41:2b:ee:
f2:53:45:be:68:3e:bc:25:f6:d7:27:79:e9:88:37:82:f1:16:
0c:be:a4:c6:8d:22:94:29:2a:6d:aa:6e:82:96:84:c6:e8:2c:
10:f2:97:e8:f3:4d:49:6d:ee:5c:69:a6:45:04:c3:90:e8:66:
22:86:67:a1:f5:fe:e9:37:47:f6:ff:bf:94:da:6e:7a:18:00:
ef:2c:53:fa:78:7e:4a:a1:1e:b7:12:57:5a:f6:24:d2:d6:3c:
95:4b:f7:ec:d6:38:96:c3:b7:2d:3b:6e:da:1b:cf:e9:b8:f5:
17:85:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:38:57 2025 by rpki-client