Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1fefb37-69cd-3fac-8315-5edd91e554c0.roa
File: b1fefb37-69cd-3fac-8315-5edd91e554c0.roa (raw, json)
Hash identifier: R1QfTn5MTZZQJ1aUzsAZQeV3c4QSArPnt/3jgzIzNOg=
Subject key identifier: B1:AD:AF:B8:43:5E:F2:8F:02:99:FD:58:5D:0C:03:BA:FA:34:A8:31
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B89625DD5280A4A56A840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1fefb37-69cd-3fac-8315-5edd91e554c0.roa
Signing time: Wed 11 Dec 2024 15:17:56 +0000
ROA not before: Wed 11 Dec 2024 15:17:56 +0000
ROA not after: Tue 11 Mar 2025 14:17:56 +0000
asID: 396555
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:89:62:5d:d5:28:0a:4a:56:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:56 2024 GMT
Not After : Mar 11 14:17:56 2025 GMT
Subject: CN=5bd0f47d-4f58-448f-9ed2-8559636a0757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:a7:1a:fb:3c:cc:34:a6:f7:2f:92:0e:7c:
cb:2e:eb:ec:ce:38:03:59:a3:24:68:8c:00:21:bc:
f4:cd:34:56:7f:6e:28:0a:f9:70:a9:a4:47:8d:c9:
15:ca:f4:a8:b5:28:d5:ae:61:ec:7b:9a:46:3b:a8:
05:48:e6:d9:39:34:31:9f:b7:03:7f:e3:07:93:7d:
d5:a6:79:2c:bc:49:50:fc:5d:49:63:63:e0:9f:1b:
ea:94:30:ae:2a:39:36:b2:54:c0:b7:22:3a:fb:4b:
6a:02:84:65:1a:44:c1:50:fa:fa:7b:f9:30:f6:04:
88:99:88:ef:46:6a:c4:5a:3a:3e:5c:1b:8d:59:3c:
14:1b:e7:29:0c:40:f4:8d:76:7a:62:02:ac:b5:fd:
6c:37:ee:5b:3c:4f:ee:8d:b9:6d:fb:38:ef:fb:df:
c1:d6:78:5e:cb:ac:d0:51:29:b7:a4:ac:b2:af:7d:
c3:64:1a:8c:51:92:9b:2c:2a:3d:18:f6:e7:4e:ae:
1f:10:6a:13:44:66:06:62:4d:48:03:24:96:e8:35:
ce:1c:f2:c7:16:7f:3a:ac:68:4c:ab:f8:a2:5d:c6:
8e:2a:99:07:7b:fe:4e:56:71:37:cc:a9:99:8a:58:
6f:1e:ce:97:a7:41:a0:95:74:6a:57:37:0d:90:77:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:AF:B8:43:5E:F2:8F:02:99:FD:58:5D:0C:03:BA:FA:34:A8:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1fefb37-69cd-3fac-8315-5edd91e554c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:01:91:7f:7b:07:bf:08:82:30:5b:e4:fd:9d:b6:8f:d6:06:
db:10:ab:49:1b:07:d8:9f:6e:ce:91:9d:34:8a:3d:31:f2:0a:
8b:e7:09:51:63:66:40:4c:d0:9a:f0:4b:54:2f:d8:bf:af:98:
70:d8:e1:07:cb:7e:f4:72:9f:b3:c5:e2:85:73:55:c2:64:43:
24:19:2d:48:69:40:37:a3:87:54:35:98:7d:44:a0:18:ee:71:
7f:05:50:63:42:3c:53:75:88:41:07:d3:78:69:2c:aa:02:0e:
41:84:3b:21:cf:19:47:0c:cd:56:8c:d9:75:2f:f2:5b:04:e3:
82:3b:3b:44:b2:11:c3:41:86:f4:a0:90:53:3f:d1:0b:22:76:
b8:29:da:d2:69:6e:2f:5e:2f:88:64:2d:99:a8:99:35:91:aa:
8f:10:b6:dc:83:91:26:2f:0b:ac:ee:89:cc:9f:42:c8:3d:67:
7f:04:47:0a:b9:db:a5:41:43:0c:6e:87:c9:05:f5:89:25:88:
5f:1b:ed:83:2b:77:9d:8d:5d:9b:b6:23:11:f0:d5:38:4e:17:
94:ec:6c:7b:09:57:a9:36:75:85:fc:fa:7d:ef:11:cb:f1:d3:
85:7a:c7:fe:97:2b:f5:d7:f4:46:7d:08:31:60:ec:55:cc:8a:
db:62:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:26 2025 by rpki-client