Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca0cb4d4-9752-38eb-8f34-f2b9f84f4d4e.roa
File: ca0cb4d4-9752-38eb-8f34-f2b9f84f4d4e.roa (raw, json)
Hash identifier: Je11KZbt+aqpxhBp2Bwrl6Yc0B3UGVgPB8Kn2fCjPiY=
Subject key identifier: 28:3A:00:F3:E4:5D:45:0C:3E:D1:04:B7:92:0A:98:73:65:6F:3D:03
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584839EADAF0B96B1B150544BA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca0cb4d4-9752-38eb-8f34-f2b9f84f4d4e.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 7342
IP address blocks: 199.7.48.7/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:da:f0:b9:6b:1b:15:05:44:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=7233fc77-314f-4783-9c17-c6812d0aa215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:90:33:38:92:4a:db:93:b2:bc:cd:3e:ee:
69:2c:db:87:e9:10:80:f1:3e:d3:e6:d3:6d:f0:b2:
3a:6a:c0:9d:5c:f2:73:d4:3e:f7:9f:c4:23:f4:1c:
7c:17:9b:f4:8a:2f:a8:63:6e:f4:50:9f:5c:01:58:
4e:6d:d0:a7:bb:11:10:27:fb:d7:c8:ea:e9:cb:37:
cc:1b:be:a1:79:ab:39:f2:91:a4:81:b2:c9:ea:5c:
15:97:4c:4a:c4:53:05:16:72:7c:c5:d2:12:d4:1c:
96:ea:8b:f6:cd:21:c3:ca:1e:94:b7:31:fe:d0:42:
4e:5c:dd:96:8f:b3:d6:50:4c:98:f9:15:0b:06:24:
6c:3c:3f:b8:f5:6b:56:2f:c9:85:0f:48:6f:45:71:
09:ad:26:a2:95:e5:5a:0e:98:cc:5e:1f:3f:36:aa:
7a:25:00:e6:8f:62:f7:81:d8:1a:2d:21:cb:2d:27:
41:d2:07:1d:74:a1:63:f9:45:2c:f4:39:69:4a:bf:
d8:00:3f:1b:2b:fc:35:04:8b:c1:60:4b:11:eb:b0:
d7:3a:11:7c:82:71:f5:7b:a1:88:ae:fb:ad:5a:ec:
1d:70:e0:f5:46:80:b1:13:3c:ab:d9:02:63:7f:b9:
cf:e0:56:39:35:78:76:04:f4:b5:40:d3:20:33:25:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:00:F3:E4:5D:45:0C:3E:D1:04:B7:92:0A:98:73:65:6F:3D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca0cb4d4-9752-38eb-8f34-f2b9f84f4d4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.48.7/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:44:15:db:61:15:ce:90:ef:c6:80:db:e2:6b:05:85:55:58:
58:8f:3b:cb:e5:57:6a:c2:88:66:37:de:74:ff:9f:03:85:29:
0e:2e:d7:46:25:13:20:40:0e:45:29:72:7e:ec:ed:65:b4:cc:
69:87:26:82:d0:97:b2:62:f1:2c:8a:2a:25:0f:70:0b:0c:15:
dd:2e:08:eb:68:83:0d:01:f4:a5:9c:35:4d:7b:02:cf:af:e9:
41:1b:1d:e6:3e:04:ae:8c:7d:8b:01:0f:fd:03:8c:c7:b3:60:
54:16:7f:e3:38:e7:11:b5:08:52:fd:c1:29:a3:e9:c9:8c:2c:
66:67:1e:68:36:b7:ae:f1:60:9a:26:b2:8b:11:8d:34:53:e3:
07:f2:9c:1d:20:85:b6:64:62:6e:1f:8e:ca:ac:8c:4e:2e:26:
70:cf:4f:d2:2f:b3:b7:68:ca:fb:10:e2:e7:c4:67:22:f9:ef:
30:4a:33:e8:a6:cd:11:0b:53:b2:a0:e8:52:c8:ff:06:76:0e:
be:5b:9c:f4:c3:61:f8:43:bc:40:c3:7c:3f:e6:f8:f7:38:13:
d8:cc:53:b7:80:71:b7:6e:1d:c0:58:7c:87:ac:43:2a:4d:4a:
bf:29:db:46:2c:0a:69:47:6d:e4:40:c9:b0:30:ca:eb:64:f2:
90:0a:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:39 2025 by rpki-client