Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab1325cb-722c-3b37-a96f-a71a117afab1.roa
File: ab1325cb-722c-3b37-a96f-a71a117afab1.roa (raw, json)
Hash identifier: y0eIddWa3fH5wc6pWApmFcnUAdVdLrhWCdH7Lfi0Bug=
Subject key identifier: E5:F4:C9:FF:65:53:BD:15:38:2B:7B:3D:90:2D:24:5C:8E:52:31:6A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8EF753B992CC0C110AF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab1325cb-722c-3b37-a96f-a71a117afab1.roa
Signing time: Wed 11 Dec 2024 15:17:59 +0000
ROA not before: Wed 11 Dec 2024 15:17:59 +0000
ROA not after: Tue 11 Mar 2025 14:17:59 +0000
asID: 396584
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8e:f7:53:b9:92:cc:0c:11:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:59 2024 GMT
Not After : Mar 11 14:17:59 2025 GMT
Subject: CN=39ae29bd-f1de-4efc-85cc-d0910657bd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:31:d1:d5:02:91:55:76:c8:68:ee:17:e4:
b9:ef:f5:6f:36:82:f5:4c:b3:9f:06:07:54:67:d6:
0b:14:4f:f8:cb:e7:7a:c9:e8:6d:c8:8e:b0:52:72:
0c:57:55:e3:2d:53:c3:ab:12:f3:c1:a3:68:34:59:
fc:f4:a8:15:30:75:56:f0:44:54:63:eb:88:db:79:
12:43:cf:84:29:01:c0:37:ea:6b:73:0f:08:ea:8f:
96:49:d8:34:25:c5:d6:ad:96:06:86:bc:87:24:fe:
ab:76:5c:98:09:06:7d:d8:f7:cd:99:da:72:5e:0b:
5e:4d:d5:99:fd:12:a2:48:a3:d9:8c:5c:a5:1e:17:
21:1a:61:f3:b1:65:bb:33:00:0c:34:7a:c3:29:ae:
ce:11:d7:da:93:96:d3:6d:0e:c7:19:58:11:b9:7d:
18:d5:f9:5b:7a:c9:34:58:b3:0f:47:fa:e5:33:97:
b8:de:cb:85:82:eb:30:4e:1f:2e:e1:66:24:f8:3e:
2c:ed:94:73:31:24:ad:3f:36:2e:90:fa:0b:d3:d1:
fc:23:6a:b8:ce:6f:a2:ee:a4:23:56:d3:6c:fd:1b:
3d:a7:95:9d:7d:03:87:e4:a6:a3:b1:34:e6:22:ec:
98:61:55:a4:96:b7:c2:dc:1e:e2:dd:c9:27:7a:ec:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:C9:FF:65:53:BD:15:38:2B:7B:3D:90:2D:24:5C:8E:52:31:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab1325cb-722c-3b37-a96f-a71a117afab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:75:4f:34:8e:5d:3c:86:11:5f:79:13:63:2c:fa:94:a2:24:
06:0b:d6:9e:cb:ec:cf:e0:43:4d:14:d3:d4:97:59:1f:33:fa:
3e:a0:1e:43:00:5c:f2:5c:ec:ae:e1:83:e1:16:db:e0:1a:55:
a9:09:2f:2e:3d:fd:fd:88:c1:2f:f3:3b:2c:83:d9:02:65:ef:
a8:45:da:72:6f:2d:bc:90:2a:44:b5:8a:ef:27:bf:8b:c6:b3:
5e:5f:bc:8e:6f:d0:7e:c2:3e:33:9c:6a:ff:cf:79:c9:c5:6f:
86:ac:2a:19:0c:28:53:c3:be:0b:e0:67:0e:8a:4f:d8:5d:62:
7f:86:17:99:1e:fc:9f:2a:96:2a:8e:11:51:0a:60:a6:f1:f0:
4f:e0:14:6d:be:43:19:02:93:3e:ad:f9:aa:30:60:15:63:01:
af:78:df:39:4d:0a:e2:7f:5e:60:bf:f4:38:2e:07:f6:8e:9a:
e8:38:dc:0f:ee:95:7e:6a:b0:92:4f:03:34:29:ba:fc:a0:6e:
02:f4:05:75:63:38:33:44:69:0f:0f:a4:81:70:bc:52:ff:22:
87:f9:c0:12:08:b3:d2:3f:6a:57:b6:2e:97:35:50:b0:f6:af:
4c:9a:32:f3:53:f5:b1:a3:19:55:c6:fc:9a:4a:d0:ec:44:ca:
8f:51:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:46:30 2025 by rpki-client