Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9565de2d-2425-3b3e-8d9d-45910ccb310d.roa
File: 9565de2d-2425-3b3e-8d9d-45910ccb310d.roa (raw, json)
Hash identifier: MoiQVrQ0dd93BOqGyOhBtfjQUbNzP/AC2SyMawMRjYY=
Subject key identifier: 1E:A3:A9:5D:1B:57:4F:A5:5E:F1:7C:E9:FC:52:6B:CE:00:F6:DA:1A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486D9056393EC6345AF8171580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9565de2d-2425-3b3e-8d9d-45910ccb310d.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 199.7.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:56:39:3e:c6:34:5a:f8:17:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=6c34a518-77d9-4e5f-b8db-30fc5afba142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:ae:a5:de:1f:43:ef:94:a6:9c:4b:af:b7:
50:4e:25:8c:f1:21:a8:0b:1c:64:8f:59:83:47:b9:
48:57:1e:0b:e3:07:f9:94:b7:5c:96:3d:33:fb:a5:
7b:e7:c6:48:c8:a1:a6:c3:55:de:9c:7f:b9:f2:0f:
68:97:ae:06:73:1c:f4:7d:97:a2:5f:34:ef:32:f1:
43:7d:a0:1f:a8:d9:fd:a7:27:f0:94:d3:b9:1a:1d:
d7:09:57:bc:a8:d5:fa:b0:a6:b7:e8:9e:bb:1a:c5:
b7:46:82:ef:f3:28:f2:6b:b0:f4:bd:88:55:71:70:
06:ad:36:c8:4b:11:ee:24:af:01:23:32:38:a1:58:
40:d2:e9:86:2a:54:5f:6b:cd:15:7b:36:4b:5a:ae:
49:ec:cb:26:aa:b1:d2:59:72:5f:5f:56:75:12:7b:
9c:c2:5c:e3:90:ed:7f:46:9b:df:7c:6d:b8:8f:a2:
00:56:85:af:e4:00:b1:3b:f5:2d:6a:f2:97:37:41:
8b:89:16:f1:93:24:d2:51:60:72:8e:d6:9b:14:0a:
66:74:36:4a:0f:c4:bc:57:bd:16:84:fc:f2:99:2b:
72:6d:cf:73:b7:aa:fc:d2:2d:85:12:77:59:6f:2e:
20:75:1f:a3:35:42:cf:71:90:25:fc:0d:ba:9f:bb:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A3:A9:5D:1B:57:4F:A5:5E:F1:7C:E9:FC:52:6B:CE:00:F6:DA:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9565de2d-2425-3b3e-8d9d-45910ccb310d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:ad:2a:4f:4e:ed:32:eb:97:3c:34:7a:d3:7e:4a:5d:d1:c5:
d1:a0:13:a7:1a:d1:4b:ff:d1:49:4e:9f:6f:1f:c8:23:bc:88:
66:b8:b2:f9:16:5e:c6:f4:3f:c6:f7:db:f2:a1:fa:61:fb:93:
71:55:77:d4:b1:5c:91:df:c8:31:d0:2e:b6:0e:2f:d4:68:0a:
f8:99:97:cf:7f:ab:52:ce:63:45:9f:38:27:df:db:cd:50:48:
d4:b8:b2:d1:48:5e:74:cf:0a:66:17:dd:a1:dc:a7:01:b8:aa:
1e:ad:e7:14:7e:79:63:19:27:ca:64:5b:98:2c:30:8c:98:0c:
e2:03:c8:49:fe:06:c4:89:ac:f4:5b:6f:af:39:89:fd:bc:74:
f7:39:20:0d:d4:d1:aa:ff:19:61:51:7a:8b:2d:c0:13:0f:7f:
a7:ca:af:d0:ed:fb:4f:cf:18:b8:af:5a:7f:96:e5:8a:aa:0e:
f6:07:f9:5b:8d:94:86:09:5d:fb:ac:25:83:22:49:0a:95:db:
a9:db:a3:18:6e:43:0a:3a:09:82:a4:bd:03:0a:2e:dc:8d:c2:
99:f5:50:43:e9:db:c8:cc:58:1f:88:9e:bc:42:14:72:ea:e3:
76:0f:95:69:3e:57:3e:cd:9a:ac:e7:ed:f5:2a:d1:23:b5:42:
dd:a1:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:55 2025 by rpki-client