Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca536794-46a5-3c67-8d73-c70a5b0e94dc.roa
File: ca536794-46a5-3c67-8d73-c70a5b0e94dc.roa (raw, json)
Hash identifier: d4OsV+vUBV5/7gjaOvdr953B0ugF6MkQjZoLKq1nUgk=
Subject key identifier: 5A:5C:1A:C7:A4:77:09:D5:6D:56:48:26:65:CB:40:2E:1E:25:B2:D9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B826E1A4D96578E201D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca536794-46a5-3c67-8d73-c70a5b0e94dc.roa
Signing time: Wed 11 Dec 2024 15:17:53 +0000
ROA not before: Wed 11 Dec 2024 15:17:53 +0000
ROA not after: Tue 11 Mar 2025 14:17:53 +0000
asID: 396609
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:82:6e:1a:4d:96:57:8e:20:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:53 2024 GMT
Not After : Mar 11 14:17:53 2025 GMT
Subject: CN=f9c6a0b0-d796-4660-8727-4c3bd1f4d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:b4:a8:97:f6:cc:e5:16:4a:9e:86:f6:a9:
80:52:8d:32:a3:17:cb:70:0d:16:f6:51:a8:f8:c4:
6f:24:c5:3f:a4:b9:68:f9:73:f9:b6:f3:ff:0c:76:
1a:81:89:fa:ff:b9:10:66:16:e0:20:07:36:70:e1:
02:ec:be:17:90:c1:01:1d:4f:c4:3e:ee:4a:9d:c2:
57:3d:78:4a:60:8a:24:c5:ba:c2:16:c7:40:a7:11:
33:45:93:4c:fe:b9:9b:fe:89:69:32:ec:1b:c7:19:
b8:8d:0a:cd:a1:25:bb:e1:8b:b7:55:f9:19:94:f3:
fb:a0:1a:b6:96:17:b6:43:10:a6:97:f0:f2:8e:d9:
19:bf:f0:41:d5:43:e5:03:f9:51:4c:be:22:c9:5f:
34:00:47:09:5b:a7:8b:d8:2e:d6:80:66:38:8c:0f:
f0:b1:25:02:cf:11:04:d7:f8:fd:a4:ba:89:5a:f5:
70:60:02:00:43:6f:2f:cf:b6:6d:7f:d3:c3:96:20:
9c:15:05:55:67:3b:57:ae:9a:a0:a8:a7:8e:ad:3a:
4c:46:3b:00:b4:33:12:48:a7:2c:db:03:68:60:14:
8f:a5:b5:7f:a6:a3:07:da:ed:81:7c:91:1e:c3:f7:
92:af:03:da:83:6f:09:0c:e9:3b:fc:97:fc:89:d3:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:1A:C7:A4:77:09:D5:6D:56:48:26:65:CB:40:2E:1E:25:B2:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca536794-46a5-3c67-8d73-c70a5b0e94dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:a7:3f:2e:ae:53:cc:1f:ac:c7:ed:44:1e:8c:47:a4:be:c3:
50:3e:88:c0:56:dd:49:38:ed:55:29:97:96:ea:5c:0a:64:5f:
e6:63:e3:5e:91:9c:32:8e:31:70:c0:bc:be:56:ab:e1:36:dc:
f0:e3:12:a0:2d:03:0d:18:54:93:a4:b8:e5:97:f8:26:91:5c:
a2:52:20:ac:eb:02:4e:8d:b1:89:f0:22:30:e7:03:db:e1:06:
72:01:87:70:b2:b5:c9:2a:9f:ff:ec:95:68:16:c2:7b:c9:b2:
1c:6b:12:a0:1d:cc:7a:d9:65:cb:1e:1d:30:86:68:9f:34:d0:
91:5c:d4:2c:bb:a4:e8:2c:48:77:3b:de:da:06:6b:30:4f:65:
8e:26:0c:e0:06:cc:08:95:12:0d:8d:24:51:9a:a7:a8:32:09:
fa:f7:94:c5:ea:52:c7:fc:01:41:f0:17:f8:c9:cf:a3:3f:ce:
bd:78:20:e7:55:69:a3:5a:79:dd:1c:47:17:96:5f:15:a6:3a:
fa:f7:03:cb:60:23:ea:ab:eb:97:ba:4b:04:48:b7:9e:25:f6:
44:59:76:e5:10:26:51:87:39:8c:48:43:bf:ea:44:3e:44:18:
cb:67:8b:67:79:40:85:d9:28:5b:29:c4:b9:7e:44:e3:b2:17:
a8:a9:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:21 2025 by rpki-client