Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa
File: c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa (raw, json)
Hash identifier: hlddKIR9I/Mt6JDW237HYUOXRWCjrCA+h3Y33wNhf74=
Subject key identifier: 06:24:76:8F:C0:DA:00:D7:94:1A:90:EE:D3:B5:8A:7D:97:5F:E5:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B90B8BBF5DAEAF78151C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa
Signing time: Wed 11 Dec 2024 15:18:00 +0000
ROA not before: Wed 11 Dec 2024 15:18:00 +0000
ROA not after: Tue 11 Mar 2025 14:18:00 +0000
asID: 36620
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:90:b8:bb:f5:da:ea:f7:81:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:00 2024 GMT
Not After : Mar 11 14:18:00 2025 GMT
Subject: CN=76f5e6ea-da55-48c3-9b3a-181ab6704e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:97:68:9f:b9:d9:58:c2:b6:32:a9:ab:38:
b5:c5:f7:a0:74:fb:67:ab:51:d4:4e:dd:bf:48:49:
53:26:3c:82:1a:66:f5:df:8a:d8:08:9a:58:68:b4:
d0:38:b4:ed:22:91:ea:ca:81:02:d9:4d:5f:a5:1b:
e7:14:4b:b3:4b:ac:91:23:cf:2f:4a:aa:aa:20:37:
ff:c3:37:13:84:ac:dd:c7:dc:33:f8:03:48:7e:50:
62:44:f2:79:03:7f:15:fd:4b:92:67:5e:cc:f2:73:
90:95:ee:ca:66:8b:21:fd:6f:51:f1:7f:18:fd:b9:
15:6a:f4:c9:61:7b:23:b7:d1:9f:5c:36:61:c4:0f:
33:b1:d7:27:3f:04:91:cc:73:77:fe:26:52:87:6e:
f7:26:7d:94:f7:4a:7e:85:a5:b4:0a:91:41:1a:7d:
cd:df:f3:19:65:5b:c8:36:68:f0:bb:91:c8:6c:60:
2a:8c:f3:88:c0:78:24:61:a7:38:92:60:d5:8a:8a:
55:16:20:7e:0d:66:3c:e4:64:4a:2a:68:8f:0f:32:
5d:02:96:27:fd:77:21:92:30:72:58:6c:30:ca:47:
5c:b2:6c:e5:18:c2:f8:a1:7c:9d:bd:f0:4f:64:26:
bb:c8:6b:31:60:fd:2b:83:f3:29:3b:36:99:08:c2:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:76:8F:C0:DA:00:D7:94:1A:90:EE:D3:B5:8A:7D:97:5F:E5:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4efa749-ff1b-3405-91d8-d66782d3c5b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:2a:49:ae:7b:c4:ae:91:28:d4:38:b9:3a:f9:2d:c3:b6:bc:
70:c4:00:1e:43:9e:1e:da:f5:45:8a:c2:96:d2:e5:95:e3:0a:
3f:fa:6e:86:7d:68:67:b1:31:19:a9:12:1a:ce:7f:d1:95:4c:
1e:14:69:a0:ff:d7:85:e8:45:c7:3b:ad:55:43:7c:7a:30:2e:
e8:95:0a:48:6c:d5:51:75:11:43:a6:84:5c:a2:3f:af:b3:9f:
d2:4d:9c:99:6f:3d:ef:90:cc:d7:c0:c8:74:9d:8a:4b:3b:26:
32:ce:52:7e:c4:8f:7b:37:e9:ec:b9:f3:12:2b:90:19:78:7a:
14:de:4f:51:f8:ac:b2:3c:92:25:cc:8e:44:df:bd:e9:bb:61:
2b:68:08:ae:1b:7c:79:8b:88:c8:c3:bd:d3:ca:77:1f:90:16:
18:27:bc:74:1d:77:b8:c3:37:6b:0e:14:fd:fb:8c:7e:74:4a:
13:c7:6f:a5:5c:be:ed:9a:5e:b7:a1:ab:e2:76:d3:9e:9d:84:
3e:a9:0b:e9:43:6f:61:e4:1f:22:bb:57:45:41:0d:e4:d5:66:
f5:31:92:f3:26:e2:60:f8:35:3f:22:bb:d4:b3:4d:f9:93:e1:
f3:3c:71:79:f6:6f:25:19:49:28:24:a9:3d:ab:70:bd:ab:83:
a0:18:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:06:08 2025 by rpki-client