Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92bcd31f-a0d1-3cf9-8d0f-f07cd008e5f3.roa
File: 92bcd31f-a0d1-3cf9-8d0f-f07cd008e5f3.roa (raw, json)
Hash identifier: YPf8PuNHOfvpN9e1CXEaOhZSFy4UhU0PR0wKmnYCrcU=
Subject key identifier: 0F:BD:37:D5:F4:17:AC:AB:02:D1:18:39:71:E4:47:80:18:9F:EC:1A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B835A76CBA411E30F7B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92bcd31f-a0d1-3cf9-8d0f-f07cd008e5f3.roa
Signing time: Wed 11 Dec 2024 15:17:53 +0000
ROA not before: Wed 11 Dec 2024 15:17:53 +0000
ROA not after: Tue 11 Mar 2025 14:17:53 +0000
asID: 396561
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:83:5a:76:cb:a4:11:e3:0f:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:53 2024 GMT
Not After : Mar 11 14:17:53 2025 GMT
Subject: CN=5cf97b58-d2b8-4ecd-9835-6410b1fc864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:b4:d0:ea:43:1b:8a:d5:b3:12:d9:8e:87:
1b:87:c4:68:cb:54:f4:3e:c4:fb:27:db:f3:06:a5:
9d:c6:52:21:24:ed:44:64:4d:99:b3:d1:8f:20:fc:
f0:a4:c4:64:6d:d7:89:a8:23:b0:7b:00:f3:83:1e:
71:42:bf:2d:9d:39:40:65:b2:12:d5:9e:ad:3a:5b:
71:b2:96:06:66:83:64:74:19:ed:3a:1e:da:ad:0b:
9c:69:f6:98:a2:a2:b8:19:c5:d1:16:ad:d1:dd:52:
0e:32:66:68:4f:79:e4:54:ab:ac:b5:96:47:77:2a:
77:db:4f:c8:0a:52:86:a6:b0:42:07:3d:48:00:54:
48:b5:fc:72:3e:86:b6:54:29:be:ba:77:64:1a:9a:
9e:5f:45:5f:83:f0:b8:bd:c0:5a:83:89:5b:6c:c1:
8e:6c:87:60:e8:12:4c:31:7d:8b:92:1c:b2:e7:04:
cc:ef:47:63:a0:74:2f:07:0a:01:32:d8:95:39:19:
e4:77:61:f6:cb:db:12:47:f7:ed:67:6e:2a:e0:5c:
92:12:77:ef:8d:fe:8f:66:f7:d7:23:97:c7:1d:e4:
3e:43:97:a0:23:8d:6b:63:c6:1d:43:1c:85:88:15:
1e:9c:84:2d:0c:67:fb:ed:44:0b:ac:0d:c7:5a:2e:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:37:D5:F4:17:AC:AB:02:D1:18:39:71:E4:47:80:18:9F:EC:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92bcd31f-a0d1-3cf9-8d0f-f07cd008e5f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:11:5e:e5:fc:fd:b4:e0:7a:3b:aa:4f:d4:ac:f2:ad:45:e1:
a8:dd:ab:0d:2a:c7:ab:cb:34:dc:17:3b:b9:82:37:fd:76:dd:
13:13:a6:74:a7:c2:26:7b:2b:a6:36:ab:58:ad:a6:ba:5c:46:
ce:e3:89:6a:72:e2:61:c5:a2:d6:25:64:bc:15:94:a7:e2:3e:
3a:ad:8d:0a:72:54:d0:66:14:d5:ca:00:d7:84:c8:57:f6:eb:
2f:3b:c1:e6:e4:77:c1:b6:94:9c:8b:75:59:d1:3e:09:d6:43:
e8:3e:1b:ca:fd:50:9a:04:3d:24:22:06:75:f7:f4:4e:4e:ae:
26:75:01:03:6e:3b:19:f1:a3:36:8a:2e:af:0c:23:8c:b9:81:
a6:19:8c:92:91:87:d6:b0:ec:26:e1:16:ec:4c:35:6a:cd:a8:
d6:9e:c4:5f:4d:33:bf:06:0e:ac:8d:9e:73:bd:fe:dd:9d:0e:
18:bf:b3:5c:f7:7e:71:b1:8a:dc:06:ec:e7:f1:db:53:bc:78:
49:99:b5:e0:11:29:71:48:eb:f0:d2:6c:b5:b7:f5:bf:b1:a8:
c4:2a:6c:38:54:7f:3c:a3:21:cf:73:8f:d0:1c:6f:09:e6:c4:
1c:93:04:37:c9:32:9b:28:f2:76:d9:25:75:bf:46:38:33:33:
43:d7:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:28:54 2025 by rpki-client