Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
File: 974c2192-c59c-3fff-b629-b9a8fdf3b787.roa (raw, json)
Hash identifier: eOZqb4xBaYck0Fn9srNKTIe4nLFMPchFwS9EZFGYHuE=
Subject key identifier: 49:22:5A:53:38:35:1E:E4:19:5A:A9:A9:58:3B:47:4C:91:AA:20:FC
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8D0A8FB2E31115955640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
Signing time: Wed 11 Dec 2024 15:17:58 +0000
ROA not before: Wed 11 Dec 2024 15:17:58 +0000
ROA not after: Tue 11 Mar 2025 14:17:58 +0000
asID: 396597
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8d:0a:8f:b2:e3:11:15:95:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:58 2024 GMT
Not After : Mar 11 14:17:58 2025 GMT
Subject: CN=47913ad1-31d9-4aeb-a03f-58c9ac6eca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:06:63:39:20:bc:f8:3d:36:ee:60:ec:3d:
6d:db:59:97:b6:e2:1c:38:13:ed:a7:86:16:73:42:
a7:18:27:60:06:b6:0c:2f:c3:3e:fc:7e:c8:69:31:
60:4e:de:32:82:5d:8a:00:81:03:7b:23:05:04:30:
fc:fc:3e:dc:a3:20:e9:62:83:0d:c0:cd:a4:6a:e7:
f1:b4:a2:85:2c:8b:50:68:44:f5:fe:70:fe:57:3c:
36:97:57:05:98:cf:67:21:4c:d6:98:d8:f2:d5:ca:
62:e6:92:72:eb:73:de:9e:03:fb:8f:d6:bf:d6:07:
df:6c:06:02:68:d9:e0:b2:79:f8:8d:86:82:fa:40:
83:0a:1b:4d:81:6b:bd:30:de:c8:a7:93:d2:15:45:
32:95:a1:17:88:a1:cf:42:5e:4c:35:31:1b:28:30:
65:6a:8d:1d:55:69:fb:f5:55:f7:4b:92:16:da:a9:
e3:7a:32:73:7a:05:6c:71:d8:ac:11:1f:9f:a6:26:
54:00:51:ec:54:eb:70:e3:96:dc:31:72:52:27:bb:
26:81:e1:64:18:4c:f7:81:19:ae:11:8c:30:e4:7e:
1a:1d:14:3e:1d:da:85:32:c0:54:0a:fb:7c:d5:bb:
3c:53:31:45:2d:9e:fd:f2:d5:46:14:d6:28:95:d7:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:5A:53:38:35:1E:E4:19:5A:A9:A9:58:3B:47:4C:91:AA:20:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:82:69:ec:99:f7:26:1f:98:a0:b6:56:e3:59:1c:e4:3e:b1:
84:fd:a2:33:b2:bc:f2:a6:26:44:22:71:57:16:f6:b0:69:ab:
74:bf:3b:59:1d:9b:76:39:06:d4:9b:a7:37:ee:80:09:2c:96:
48:19:2c:9f:84:69:2b:20:74:11:ea:10:b0:6f:ab:96:de:df:
a4:dd:f7:df:d1:90:16:ea:8d:3c:64:fa:db:5b:d3:f3:01:e7:
1f:86:0a:38:80:41:41:8b:89:4d:83:37:90:61:d2:a4:9a:7a:
da:9a:59:7a:80:66:ad:85:0f:cb:9e:26:c7:f0:34:71:4e:3e:
37:ad:43:9a:fc:d7:d1:82:f5:16:63:6a:47:12:7b:ac:d4:ab:
48:6e:64:45:d2:85:e2:0d:14:de:51:d4:6f:73:e4:cc:32:d4:
43:5a:2d:f7:8f:e5:fc:8e:32:1a:70:93:28:68:ea:8f:4b:56:
f0:ca:47:f7:22:4a:ef:f6:be:8d:8b:77:5a:5e:fb:51:7b:82:
02:9c:65:4b:43:52:f5:92:92:ad:2c:d0:d2:9c:92:65:d8:fa:
ec:c7:8f:9a:f7:56:c6:9e:ca:95:30:54:a2:ce:0d:9f:bc:61:
e2:2b:e8:8d:b3:d5:99:48:83:73:c8:d2:4b:9b:b2:5b:51:1a:
1a:9f:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:02 2025 by rpki-client