Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
File: ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa (raw, json)
Hash identifier: HfT4YcTit70miygjQ6BF3m1/TRkVPwM16cTLZ4TuDt0=
Subject key identifier: 3F:37:22:10:2E:CB:03:A7:7E:7A:54:2C:A8:17:CF:40:F0:31:1D:42
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584855D5B0FBF252957A6CB9AB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 199.7.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b0:fb:f2:52:95:7a:6c:b9:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=0a308e3f-1f8e-4833-b554-304c4e748909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:ac:96:8e:9d:7e:44:68:15:5f:8a:56:be:
93:69:da:b9:27:e4:a1:60:3a:37:fd:e7:9f:0d:87:
d7:5a:b5:93:85:ac:18:e9:79:5d:68:d8:ec:ae:ea:
45:31:f7:3e:02:6d:90:a5:49:b6:69:5a:69:66:6d:
ba:46:6f:34:66:54:54:45:9b:3c:9b:b9:bb:99:b1:
29:6a:f4:87:73:4e:1e:15:a8:da:53:86:f0:86:32:
32:4d:e8:6a:6f:e1:fd:51:89:8b:3f:d6:e5:5f:ca:
df:69:16:8a:6c:b1:bb:50:16:5a:93:ca:67:29:36:
de:6b:b8:34:9b:a5:52:0e:58:78:e2:26:cc:32:ae:
0d:0c:a7:d7:e6:91:a3:1d:2c:65:b7:d7:59:6c:ff:
41:12:91:75:38:33:4b:33:70:88:ad:27:e2:73:cf:
fa:1e:05:0c:0e:96:98:67:e6:c4:30:a6:63:f4:f3:
ea:89:b6:4e:0f:b3:b4:90:04:4c:7f:01:c3:d8:12:
d2:06:26:85:65:a2:16:ed:c4:08:3c:7e:57:e7:6f:
20:65:6d:bb:1b:86:9c:70:1c:ac:35:47:15:af:b0:
dc:14:d5:f1:f1:c5:d2:1c:76:ee:e3:60:90:65:c2:
47:d9:a2:d4:11:e6:81:8e:b8:34:65:0f:da:2b:5f:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:22:10:2E:CB:03:A7:7E:7A:54:2C:A8:17:CF:40:F0:31:1D:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9e24ed-9ccd-3943-96ce-6701d07ae6ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e8:17:01:f5:90:72:fd:23:0f:33:9c:1a:c2:9b:51:f6:e8:
41:42:54:65:c9:90:48:3f:99:4d:2d:34:ac:4f:23:c5:6e:04:
71:9c:c3:7e:7e:d9:e8:91:ae:ed:ad:e8:0b:e0:0b:49:a5:8b:
db:b0:8a:13:4e:fd:6c:40:37:3b:43:6d:79:56:22:cd:d6:05:
4f:dd:fb:46:6e:66:7d:20:f8:27:1a:05:68:06:d2:3c:c0:a9:
de:1a:37:a1:d0:c6:59:49:e9:12:cb:37:0e:24:98:20:c2:20:
6e:50:ae:2b:98:79:fb:46:ca:18:5d:27:84:37:20:d5:b8:c8:
1d:d7:0b:cf:e3:b4:8b:05:25:63:e1:32:70:83:9f:a3:57:9b:
af:a4:35:e1:42:75:fa:a2:03:e4:52:29:04:98:aa:0f:86:f4:
19:ea:23:60:c5:93:7b:65:24:85:14:28:09:bf:ee:d3:1f:d8:
d7:6d:67:73:1e:e3:53:ee:4d:f0:ee:9a:23:a5:49:c2:1e:bf:
6d:99:aa:6d:47:93:61:50:fd:f0:b6:d7:a3:96:95:f7:95:52:
3f:d1:5f:54:b0:14:3e:4e:10:79:d3:c9:18:f8:74:b1:45:e5:
3f:a4:04:39:0a:71:39:45:1f:5e:0a:3c:5a:fb:52:4a:4b:b2:
fb:0f:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:28:50 2025 by rpki-client