Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb0f62fe-f669-3a86-8e06-cf8a35be615d.roa
File: bb0f62fe-f669-3a86-8e06-cf8a35be615d.roa (raw, json)
Hash identifier: I+Hsvg1abe41+/3E4/f1A/xRmYF/0U8NJKiWI6jaV1g=
Subject key identifier: 80:8A:77:63:B8:BE:76:7E:B9:E1:53:87:07:0B:D3:C1:FD:16:D3:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B8B9FED2C1C13CE95E380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb0f62fe-f669-3a86-8e06-cf8a35be615d.roa
Signing time: Wed 11 Dec 2024 15:17:57 +0000
ROA not before: Wed 11 Dec 2024 15:17:57 +0000
ROA not after: Tue 11 Mar 2025 14:17:57 +0000
asID: 396570
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:8b:9f:ed:2c:1c:13:ce:95:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:57 2024 GMT
Not After : Mar 11 14:17:57 2025 GMT
Subject: CN=0a515ed7-395e-44c4-a474-185b7c80ef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:0a:92:70:92:6a:39:cf:8b:a7:8b:cf:d6:
2e:a0:08:e6:a8:e3:f5:e6:24:32:a7:9a:b0:cc:91:
f4:30:eb:e8:7d:be:e0:21:91:6e:82:90:e9:89:f5:
f5:3f:ab:4e:ad:4d:38:3b:5e:5b:97:17:b1:44:8c:
cb:90:ac:24:07:63:4c:55:6a:9b:52:3d:07:7a:7f:
e8:0d:32:54:7e:70:be:0e:ad:57:27:b3:41:91:c2:
e9:a7:02:73:fc:49:d3:16:29:c1:8d:5a:4f:7a:9d:
8d:57:9e:3f:10:87:92:bc:50:b0:25:e5:d7:3d:72:
8b:23:98:32:c6:66:67:66:9d:52:04:8c:6f:fa:f4:
ba:ec:e9:50:3f:b7:b0:d2:0b:94:8b:db:f7:e7:5e:
6b:ce:24:b9:17:63:10:ea:28:22:fc:c2:23:d7:68:
28:f8:f6:a9:a8:cb:c2:45:78:bf:68:d6:a2:27:46:
e5:11:e9:b6:1b:8a:d2:cb:69:dc:15:3f:14:00:72:
31:9f:ee:95:ae:d6:60:dd:5f:1e:87:53:2a:d7:54:
a6:0a:76:41:38:49:9f:d5:51:78:ed:21:23:17:b8:
6e:de:56:07:a3:73:55:36:ea:23:c9:2d:b6:a5:18:
9d:b1:90:70:aa:3f:53:14:09:35:7f:84:1b:45:71:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8A:77:63:B8:BE:76:7E:B9:E1:53:87:07:0B:D3:C1:FD:16:D3:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb0f62fe-f669-3a86-8e06-cf8a35be615d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:09:d5:a6:21:74:39:86:4e:aa:90:a1:7f:c7:b3:3d:b1:13:
b1:99:8f:82:15:9f:f5:6e:7c:a7:de:d0:7d:4d:fc:db:84:10:
40:d4:ef:8d:d3:06:33:f6:52:94:23:15:a7:52:88:34:7f:28:
13:49:5a:84:4b:4f:ec:63:bf:e5:bd:7d:ae:53:af:31:a8:34:
af:4a:a9:d7:e1:0e:5e:01:20:e8:58:f2:4e:fc:6d:19:1f:37:
4f:66:ff:79:ce:06:be:08:92:42:56:1d:d0:52:bd:f2:45:b4:
fa:27:85:3e:2f:2d:24:de:7a:78:de:bd:b6:2a:6d:3e:a9:6c:
55:ba:55:dc:d4:de:81:de:b0:53:29:75:b0:99:c7:a4:08:77:
0e:f6:70:78:01:15:bf:61:4e:a2:bd:a2:db:17:ca:2e:ac:57:
8d:8e:91:83:80:23:da:d3:24:d9:e6:d5:55:88:d2:d4:e6:dd:
a2:aa:8c:9c:69:ef:c6:bb:80:40:8b:77:27:16:bd:dd:9f:72:
33:9e:46:ca:bf:18:b2:d4:53:de:ab:61:6d:a3:db:ae:c7:64:
cf:2c:b5:d4:9f:6d:cf:05:e5:26:58:23:25:01:e9:25:54:eb:
8c:8d:16:c1:a5:40:49:4e:d0:53:9f:67:01:55:90:c4:6a:ca:
68:98:77:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsG4uf7SwcE86V44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTc1N1oXDTI1MDMxMTE0MTc1N1owLzEtMCsGA1UEAxMk
MGE1MTVlZDctMzk1ZS00NGM0LWE0NzQtMTg1YjdjODBlZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+MKknCSajnPi6eLz9YuoAjmqOP15iQyp5qw
zJH0MOvofb7gIZFugpDpifX1P6tOrU04O15blxexRIzLkKwkB2NMVWqbUj0Hen/o
DTJUfnC+Dq1XJ7NBkcLppwJz/EnTFinBjVpPep2NV54/EIeSvFCwJeXXPXKLI5gy
xmZnZp1SBIxv+vS67OlQP7ew0guUi9v3515rziS5F2MQ6igi/MIj12go+PapqMvC
RXi/aNaiJ0blEem2G4rSy2ncFT8UAHIxn+6VrtZg3V8eh1Mq11SmCnZBOEmf1VF4
7SEjF7hu3lYHo3NVNuojyS22pRidsZBwqj9TFAk1f4QbRXEmTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICKd2O4vnZ+ueFThwcL08H9FtNmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIwZjYyZmUtZjY2OS0z
YTg2LThlMDYtY2Y4YTM1YmU2MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAoJ1aYhdDmGTqqQoX/Hsz2xE7GZj4IVn/VufKfe0H1N/NuEEEDU743T
BjP2UpQjFadSiDR/KBNJWoRLT+xjv+W9fa5TrzGoNK9KqdfhDl4BIOhY8k78bRkf
N09m/3nOBr4IkkJWHdBSvfJFtPonhT4vLSTeenjevbYqbT6pbFW6VdzU3oHesFMp
dbCZx6QIdw72cHgBFb9hTqK9otsXyi6sV42OkYOAI9rTJNnm1VWI0tTm3aKqjJxp
78a7gECLdycWvd2fcjOeRsq/GLLUU96rYW2j267HZM8stdSfbc8F5SZYIyUB6SVU
64yNFsGlQElO0FOfZwFVkMRqymiYd00=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:16 2025 by rpki-client