Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78fe750-e0ce-3c30-9eee-02b64b7b7365.roa
File: c78fe750-e0ce-3c30-9eee-02b64b7b7365.roa (raw, json)
Hash identifier: qLNWMDcX8fELpGafsONu/QlJE+peDMbCA/7kd0gN5mc=
Subject key identifier: 13:57:D4:72:91:E4:B1:46:3A:4C:1A:67:88:52:A2:28:5A:1E:15:58
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BAF1AD32F857A3C2D7D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78fe750-e0ce-3c30-9eee-02b64b7b7365.roa
Signing time: Wed 11 Dec 2024 15:18:14 +0000
ROA not before: Wed 11 Dec 2024 15:18:14 +0000
ROA not after: Tue 11 Mar 2025 14:18:14 +0000
asID: 397208
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:af:1a:d3:2f:85:7a:3c:2d:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:14 2024 GMT
Not After : Mar 11 14:18:14 2025 GMT
Subject: CN=5741c459-e66c-4ed6-a786-5fe073b5d457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a8:bb:23:57:da:c0:29:77:b5:cb:ad:14:12:
12:08:e9:2a:eb:d3:2a:2d:63:a2:d2:95:5e:26:0e:
4f:76:e9:09:6d:a7:ab:f4:21:f3:67:86:5f:78:35:
c1:05:f1:fb:2e:3b:ba:58:6a:32:9f:63:49:13:66:
17:e1:9c:27:e9:06:98:c5:91:b4:aa:e9:d7:be:66:
93:c5:3d:b1:95:57:9f:64:20:c5:8d:2a:fb:83:20:
aa:67:78:e1:56:97:27:c6:0f:69:88:46:e8:3b:02:
63:04:db:fd:27:b8:ec:87:28:cb:4e:cf:93:59:10:
09:ee:c2:cf:ca:04:59:35:3f:f5:0b:40:a9:2a:eb:
20:ef:dc:7f:4f:12:9c:6a:39:d0:64:b2:7a:e3:91:
5a:b6:c6:b3:bd:a7:06:e2:23:35:14:71:46:c9:3b:
9a:00:e3:a9:56:09:c6:3f:3f:2d:09:c7:80:bb:0c:
dd:67:3a:31:93:00:dc:2a:6b:68:e4:7f:b6:94:27:
62:08:55:ba:bb:7c:8e:0f:16:c6:28:0f:36:13:82:
73:ab:45:47:58:7e:36:a3:35:8b:92:41:e8:8f:aa:
11:a6:81:c7:eb:b5:ff:39:b7:24:cf:48:63:57:3e:
e0:dd:71:1d:3b:54:8e:33:8c:b1:c3:80:fc:f8:94:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:D4:72:91:E4:B1:46:3A:4C:1A:67:88:52:A2:28:5A:1E:15:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78fe750-e0ce-3c30-9eee-02b64b7b7365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:ec:41:f1:c8:3c:22:be:85:4e:41:48:40:a8:73:25:9b:d3:
cd:63:36:99:69:5e:f0:d6:68:8b:33:2c:38:76:7e:c4:f0:4a:
cc:16:0d:8d:41:47:9a:e2:3a:1a:1c:85:d1:6b:88:d6:fb:30:
ea:9d:69:b7:d8:32:09:cb:a2:b7:4d:ed:6c:5f:a1:cd:27:2d:
24:03:77:e4:91:59:09:b5:5a:fa:aa:86:b4:d8:13:74:2f:44:
94:09:71:1f:26:ba:3c:31:65:c9:7e:15:51:18:d6:81:33:96:
02:6f:09:2d:5d:60:6a:f8:ae:35:b8:c2:46:18:27:f8:d2:f6:
8b:7b:a2:47:ef:54:74:e1:a4:fd:45:7b:7a:38:1c:98:89:6f:
c6:35:20:e2:93:33:1c:b5:b3:7b:8c:05:42:07:40:ff:97:23:
18:10:ff:78:3d:47:45:bc:16:65:fa:31:75:1e:09:44:3a:98:
45:fa:24:78:dd:e6:0f:6b:66:7a:cb:50:e4:63:9e:5b:ad:83:
7d:d1:0a:c9:e2:18:51:95:11:f4:62:66:50:a9:b7:2c:be:06:
31:55:0e:aa:c2:d5:0f:5d:b0:27:f5:77:bd:35:60:5d:4e:04:
ac:f5:fe:1f:f2:90:fb:d2:57:ab:9c:9e:b9:d5:67:a0:b5:84:
7e:bf:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:11 2025 by rpki-client