Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c92d123c-f73c-3701-bfaf-c148fda5dcff.roa
File: c92d123c-f73c-3701-bfaf-c148fda5dcff.roa (raw, json)
Hash identifier: +iyRj2fKGeDb0g4H2E/+c4kx/SP4NGwjx2LVHWJheK8=
Subject key identifier: 9D:EB:E3:A5:D1:78:79:9A:E9:A4:70:CE:7F:2D:D8:71:54:2B:4F:EF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BACED8BE86C83A5193700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c92d123c-f73c-3701-bfaf-c148fda5dcff.roa
Signing time: Wed 11 Dec 2024 15:18:13 +0000
ROA not before: Wed 11 Dec 2024 15:18:13 +0000
ROA not after: Tue 11 Mar 2025 14:18:13 +0000
asID: 19836
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:ac:ed:8b:e8:6c:83:a5:19:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:13 2024 GMT
Not After : Mar 11 14:18:13 2025 GMT
Subject: CN=1ba22d9f-c5da-41c3-a50a-34fdaa9bc2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:53:ba:34:91:50:cf:f0:7f:9d:48:54:3b:
12:13:2d:ca:2c:e4:fd:a9:f2:ca:e8:aa:5d:e8:49:
5c:c5:d6:ba:fe:3b:cd:da:7b:e3:98:52:7e:5c:dc:
54:02:20:ca:d5:91:d1:a9:49:37:de:cc:85:a0:c1:
44:63:16:a8:41:6b:dc:58:dc:88:db:b7:59:91:de:
4d:d4:45:35:11:95:e3:25:51:2b:14:2c:a7:7b:b7:
63:d4:2a:13:00:51:d1:2e:3f:af:29:10:ce:32:b0:
9d:e4:92:45:07:1c:7e:20:fc:78:0c:f8:b8:1e:cd:
60:24:b7:47:7d:e6:01:e9:5a:7a:b6:19:a5:49:91:
c1:c4:33:03:01:62:c8:bb:57:5e:2e:a3:7b:4c:ab:
2d:03:fa:6f:df:16:05:f1:c3:e3:b9:55:3a:f2:44:
13:24:55:87:0b:9b:1c:27:c4:8a:03:c5:1c:3e:ad:
64:ef:55:75:a3:11:04:04:aa:19:ce:82:3f:76:1c:
71:97:63:03:ff:fe:4e:60:bf:cc:51:de:6a:c4:b9:
6f:57:c7:83:92:61:29:20:1c:1f:d6:ad:d9:45:5d:
4c:1c:65:3d:5a:fd:ee:e5:6c:48:1a:5d:26:fa:94:
91:a9:e2:29:4b:49:98:6c:31:8c:34:1c:6b:fa:e7:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EB:E3:A5:D1:78:79:9A:E9:A4:70:CE:7F:2D:D8:71:54:2B:4F:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c92d123c-f73c-3701-bfaf-c148fda5dcff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:45:3c:dd:bd:1f:2c:11:a2:e4:21:c9:60:75:3b:39:cd:8f:
28:ae:8f:43:15:cd:1c:76:d9:9f:e9:ec:b3:dd:c1:95:36:21:
f2:d0:bc:56:59:76:da:f2:d8:96:fe:e3:d4:d1:9e:94:be:66:
59:03:45:f3:1e:d5:81:d6:fc:fe:47:8c:b5:12:d4:6d:87:38:
23:d5:94:5c:b7:12:6c:e1:33:1f:f6:0a:77:96:66:a3:38:09:
1e:e9:6d:e5:d5:e9:18:59:17:d7:e8:7e:bd:e0:a5:5b:29:b0:
65:4f:a2:c6:e8:29:69:cf:73:4b:02:ec:3f:eb:29:01:f6:e6:
c7:f2:85:0c:62:81:e9:65:9d:39:e6:79:c8:8e:1d:1a:3d:3b:
9c:80:8e:d9:be:e8:19:87:eb:35:9e:d5:58:b2:be:bb:d7:2a:
9b:32:2a:e7:d9:de:b3:af:de:b6:fd:db:0c:75:bf:e4:37:f4:
42:d7:6f:2f:27:e4:e6:35:9f:e8:eb:1a:43:ae:c7:a6:e2:64:
d1:c0:09:a8:30:cd:5f:af:85:30:6d:d5:e3:44:8e:20:e6:13:
e3:8f:34:45:03:a1:9b:6d:d3:31:ae:1e:fd:8e:06:de:55:fc:
3f:de:a7:7c:5a:52:9f:25:b1:f5:1e:b2:12:d1:98:8c:f3:63:
40:a8:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:04:46 2025 by rpki-client