Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa
File: af27fbd1-fccc-393f-ad38-224694a6aa8a.roa (raw, json)
Hash identifier: 4qMP2iyHj9ZEbi2IA4bW1tRU78NRfpBe6/nNjtDDheE=
Subject key identifier: 0C:C4:C1:BF:25:EB:00:91:32:66:B0:48:34:D1:4D:FD:C3:26:CD:61
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BAE8CCAEF77AB0E8AD180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa
Signing time: Wed 11 Dec 2024 15:18:14 +0000
ROA not before: Wed 11 Dec 2024 15:18:14 +0000
ROA not after: Tue 11 Mar 2025 14:18:14 +0000
asID: 397211
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:ae:8c:ca:ef:77:ab:0e:8a:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:14 2024 GMT
Not After : Mar 11 14:18:14 2025 GMT
Subject: CN=fab5b777-e5c7-4fdf-a252-74d33cfbbac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:65:1d:19:ff:3f:26:3b:61:6d:84:09:d1:
e7:8f:45:f4:d6:c0:c2:cb:02:43:7a:fb:18:0b:a0:
e0:59:69:25:1d:63:e7:26:18:ab:df:8f:e1:3e:2c:
d9:8a:3f:7e:7b:a2:64:ff:14:12:cf:26:74:43:12:
33:de:3d:e3:1b:c6:a7:62:32:60:81:db:36:10:6c:
10:07:9c:02:8e:af:2d:41:1e:e7:18:d1:a1:9e:65:
01:65:5f:b7:99:5a:30:29:28:a0:e6:0a:95:46:b2:
86:01:9a:b6:ff:1b:36:32:67:53:ae:39:1f:37:0f:
26:ce:f1:99:7d:1b:d7:0a:5b:88:fa:c8:be:b2:38:
dc:8f:c8:4b:a3:3d:fa:fd:50:cd:80:3d:e8:51:2f:
5c:be:d2:6d:c4:bb:e3:bc:dd:23:f1:18:6f:b4:5c:
b7:79:9c:f4:6f:7b:94:ab:f7:38:ab:48:e2:e8:f4:
e2:c0:b5:74:59:b4:fd:09:bb:88:8d:35:21:41:b8:
05:3d:25:a4:df:7b:b7:20:04:d3:3e:da:cf:53:6c:
c0:48:f1:c8:ac:a5:c7:eb:06:80:9e:e5:f6:fb:fb:
77:35:0d:f9:1b:a6:c4:dc:57:73:01:94:2a:4a:33:
a2:a3:98:02:3d:7d:8f:f2:8b:c2:16:d2:e0:3d:31:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:C1:BF:25:EB:00:91:32:66:B0:48:34:D1:4D:FD:C3:26:CD:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af27fbd1-fccc-393f-ad38-224694a6aa8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:20:32:06:4b:1c:20:b1:39:22:dc:4d:e4:c2:e7:f0:7a:46:
d7:ce:3d:4b:73:92:79:b6:83:00:f0:b3:36:ee:da:87:e2:10:
22:af:4a:45:6b:47:36:09:47:07:5e:42:f1:43:bb:5a:7c:28:
58:c0:db:43:48:44:4a:d5:57:ea:f6:b3:2f:e3:e9:55:1c:1b:
2e:ba:bb:c1:81:ca:e8:a0:43:bd:9e:33:1d:ef:1c:aa:14:84:
f1:0f:80:ba:d7:6b:97:ac:b4:20:bc:6a:56:9b:8f:b2:6b:36:
85:ea:05:40:49:85:a8:fe:e9:4f:e9:ff:bb:39:c9:d4:24:2f:
fa:96:dc:b6:be:e9:f9:b9:cc:be:d7:1c:ea:56:73:c1:7f:3e:
e6:ba:4f:0a:48:da:40:25:d1:fa:ee:f8:2f:4f:18:ae:f7:c9:
ed:a2:4d:d3:3f:b4:a0:fb:2a:6e:c3:f1:fc:73:93:46:2a:e2:
fb:d5:c6:8b:76:17:f5:c5:db:12:f8:66:24:ec:b9:2e:82:e0:
64:8e:7c:e3:bb:91:10:2b:e3:9b:90:91:58:eb:36:8e:6e:51:
c5:5d:32:30:1a:7a:ba:78:88:68:52:db:af:20:25:84:24:08:
70:7b:8c:8c:94:99:ae:e1:7e:30:7b:1b:7f:11:46:22:52:39:
63:df:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:57:27 2025 by rpki-client