Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa
File: af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa (raw, json)
Hash identifier: NgQLgiHlT7a52Se+NKYCwxCt/HPs4pUkBlxJXeZp+Vg=
Subject key identifier: C3:27:32:71:34:46:E3:DE:31:41:A9:41:9E:22:1F:34:9B:55:1C:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B95C636ACF29444BA4080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa
Signing time: Wed 11 Dec 2024 15:18:02 +0000
ROA not before: Wed 11 Dec 2024 15:18:02 +0000
ROA not after: Tue 11 Mar 2025 14:18:02 +0000
asID: 396558
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:95:c6:36:ac:f2:94:44:ba:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:02 2024 GMT
Not After : Mar 11 14:18:02 2025 GMT
Subject: CN=e99eebaf-716c-457d-8077-a919f03dc1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:4b:1e:d6:2b:1f:cb:f8:87:de:dd:ad:85:
77:0f:52:88:26:ef:03:1b:eb:3b:e6:e1:83:a1:14:
0e:1b:7b:b3:b5:f8:23:d2:c7:ee:e8:9c:c6:da:4f:
c9:b8:6e:b5:32:d2:f6:01:41:82:1a:75:39:28:a5:
e1:0f:d8:d0:d5:25:a5:34:e3:ec:fa:24:9b:45:bc:
c5:07:77:75:b4:5a:eb:86:e7:45:91:d5:28:5c:65:
6c:ae:5e:03:d4:bb:55:ab:5c:f6:7d:75:b0:3d:77:
08:a5:28:96:e9:cb:30:9d:b0:d4:df:6d:11:40:f7:
60:ef:f7:b3:76:1e:d6:89:da:a9:a6:e5:dd:c2:a2:
41:4d:7d:d4:2b:84:58:09:5e:e1:55:04:21:f6:11:
07:4c:65:83:cf:2d:73:1f:66:f7:bb:0c:60:07:14:
5a:81:41:81:fd:97:97:ab:23:4f:26:76:6f:bb:87:
35:e8:58:63:38:46:58:3c:eb:fd:1d:10:3c:ed:a9:
21:22:60:91:4d:91:b1:12:d1:04:8b:f3:55:ec:ab:
3d:ca:eb:11:58:57:5d:64:7e:bd:19:be:3d:76:60:
b9:6d:c3:76:1c:5e:8f:32:2b:f0:39:62:f1:fd:d9:
f3:4e:e0:1c:61:f9:a7:b1:27:cc:a9:3c:54:3c:31:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:32:71:34:46:E3:DE:31:41:A9:41:9E:22:1F:34:9B:55:1C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af25e0bf-0ade-3fe8-afb7-8d56ac1cda67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:bd:03:b2:9f:a2:d5:61:f8:17:50:c5:b2:16:cc:3f:50:c5:
15:4d:77:1a:9b:15:5c:2c:f9:79:8e:a7:c5:25:e9:65:2e:e1:
aa:cc:49:21:d3:87:17:bf:36:62:ba:93:11:9e:33:cb:0b:b8:
93:c1:bc:55:5f:89:95:0b:06:e1:b8:20:73:78:51:d2:70:2c:
fd:34:a4:72:8f:6f:66:0f:a0:05:ba:72:5f:9b:54:c5:79:2b:
94:f7:35:b6:f4:b0:5e:7f:f0:78:f1:9e:5b:bf:a1:e9:13:ee:
5c:d1:38:1f:28:df:03:4a:e2:73:99:6f:7a:85:4b:d8:bf:6f:
2a:d4:32:00:5c:9e:8c:13:48:85:40:aa:b9:d0:a3:b1:8b:23:
9f:95:69:f3:02:fc:ad:1b:8b:6a:a9:a5:5c:f8:ee:4e:96:cb:
16:3a:de:9c:58:a9:70:9f:97:df:b4:94:10:53:db:24:b6:a0:
3e:08:0d:58:d2:95:1b:4a:6e:b4:be:d0:53:04:7c:0a:55:fa:
bb:1d:88:31:c2:28:81:68:75:1a:ec:f1:05:c1:a5:e6:5b:ea:
c9:68:ae:1e:87:0d:3f:99:48:28:57:15:76:24:21:9d:e6:b6:
58:11:6d:52:52:70:47:01:1b:1c:07:4e:16:76:fc:0a:6e:e7:
d6:62:3d:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgsG5XGNqzylES6QIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwMloXDTI1MDMxMTE0MTgwMlowLzEtMCsGA1UEAxMk
ZTk5ZWViYWYtNzE2Yy00NTdkLTgwNzctYTkxOWYwM2RjMWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19LHtYrH8v4h97drYV3D1KIJu8DG+s75uGD
oRQOG3uztfgj0sfu6JzG2k/JuG61MtL2AUGCGnU5KKXhD9jQ1SWlNOPs+iSbRbzF
B3d1tFrrhudFkdUoXGVsrl4D1LtVq1z2fXWwPXcIpSiW6cswnbDU320RQPdg7/ez
dh7WidqppuXdwqJBTX3UK4RYCV7hVQQh9hEHTGWDzy1zH2b3uwxgBxRagUGB/ZeX
qyNPJnZvu4c16FhjOEZYPOv9HRA87akhImCRTZGxEtEEi/NV7Ks9yusRWFddZH69
Gb49dmC5bcN2HF6PMivwOWLx/dnzTuAcYfmnsSfMqTxUPDFYXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMMnMnE0RuPeMUGpQZ4iHzSbVRyAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYyNWUwYmYtMGFkZS0z
ZmU4LWFmYjctOGQ1NmFjMWNkYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBSvQOyn6LVYfgXUMWyFsw/UMUVTXcamxVcLPl5jqfFJellLuGqzEkh
04cXvzZiupMRnjPLC7iTwbxVX4mVCwbhuCBzeFHScCz9NKRyj29mD6AFunJfm1TF
eSuU9zW29LBef/B48Z5bv6HpE+5c0TgfKN8DSuJzmW96hUvYv28q1DIAXJ6ME0iF
QKq50KOxiyOflWnzAvytG4tqqaVc+O5OlssWOt6cWKlwn5fftJQQU9sktqA+CA1Y
0pUbSm60vtBTBHwKVfq7HYgxwiiBaHUa7PEFwaXmW+rJaK4ehw0/mUgoVxV2JCGd
5rZYEW1SUnBHARscB04WdvwKbufWYj0e
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:05 2025 by rpki-client