Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb9a40a1-8b0c-398f-8a13-fb7cf359f529.roa
File: cb9a40a1-8b0c-398f-8a13-fb7cf359f529.roa (raw, json)
Hash identifier: HA5cuqkhtsDgSfTcpRPm4BqJARyikpCeODJ3c7TXf70=
Subject key identifier: 37:7A:3A:0F:96:F2:29:FD:0D:83:5C:F2:24:E8:DC:45:FD:E8:5F:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B88276BCA9FC7AFF37200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb9a40a1-8b0c-398f-8a13-fb7cf359f529.roa
Signing time: Wed 11 Dec 2024 15:17:56 +0000
ROA not before: Wed 11 Dec 2024 15:17:56 +0000
ROA not after: Tue 11 Mar 2025 14:17:56 +0000
asID: 396613
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:88:27:6b:ca:9f:c7:af:f3:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:56 2024 GMT
Not After : Mar 11 14:17:56 2025 GMT
Subject: CN=df632c41-25c3-4032-999f-b87723751ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:c6:fd:e4:61:bc:e1:71:a2:56:3d:ce:06:
a2:fe:c9:9a:1e:ee:ae:71:4e:c3:b5:f3:65:1d:52:
ba:62:f6:20:79:a0:12:80:ec:2a:15:75:9d:a5:20:
9a:95:d3:c5:7b:c5:ac:3c:d9:34:8a:9b:07:a1:f4:
e0:38:bb:26:58:78:a0:0e:d5:34:fa:97:73:a1:de:
d3:c9:21:de:04:af:2f:8e:45:67:f0:5d:b7:51:c8:
9b:e4:b7:ed:a1:ac:10:34:79:a9:04:b4:c6:6a:3c:
98:7e:1b:b5:7b:0a:48:f5:54:e0:d5:43:ca:4f:95:
d5:2a:20:69:50:fe:12:d8:d1:b5:40:c7:60:d5:a8:
67:67:ec:0e:ff:c3:f5:57:ef:6c:ae:42:39:61:a1:
85:d6:6a:cf:3e:4b:4c:59:70:43:7b:97:22:f7:79:
81:5c:89:78:38:bc:ad:bd:94:93:be:ed:05:44:ea:
49:88:39:e2:31:56:57:5c:7d:8e:02:b0:a9:07:b5:
a7:f7:15:cf:61:97:7a:ad:3e:93:74:65:a3:7c:46:
94:a2:3d:4e:86:c7:aa:a8:ac:08:fa:f9:8b:6c:d0:
e4:6f:cd:56:df:f8:43:21:14:16:b3:ff:5f:5d:d9:
29:f5:10:3a:1b:e7:ac:2a:b6:1d:43:3e:50:80:34:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:3A:0F:96:F2:29:FD:0D:83:5C:F2:24:E8:DC:45:FD:E8:5F:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb9a40a1-8b0c-398f-8a13-fb7cf359f529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:57:90:f4:c2:7f:52:63:84:d5:ad:2f:49:f7:64:54:db:fd:
bc:2a:cf:d6:ec:64:fb:3e:58:80:91:d6:c3:33:80:12:3d:d9:
c3:22:c8:2d:a6:ea:27:09:ca:72:50:43:ff:ca:ca:ef:1b:1d:
fe:0d:f3:b5:d8:18:a2:d0:fc:c3:6d:32:0b:ce:12:7b:cf:1e:
95:1f:f0:ed:43:98:25:69:61:60:8e:a3:dd:ba:74:7d:1d:0e:
f1:56:88:71:c3:80:f2:0f:55:c3:7b:14:85:54:cc:28:4d:1b:
36:82:cc:87:31:44:62:8b:ff:64:37:cf:cb:8c:d0:f2:63:d3:
4e:0d:46:8c:49:c3:d1:d2:bc:e4:88:80:62:f6:6c:15:5e:a2:
52:69:f7:11:c4:03:14:e6:ea:4d:04:55:4c:ef:8f:ab:8c:51:
5b:89:57:74:94:53:89:46:47:b2:04:80:19:bc:af:1d:0d:3b:
a3:f4:c8:8d:87:63:2c:c3:b1:2e:5c:b0:d3:8e:00:a7:d5:1f:
af:ab:5a:ac:56:51:01:c0:34:ab:9b:a7:9e:ec:f5:2f:3a:5d:
e9:a9:32:89:c4:28:6a:9c:df:5f:fb:07:16:29:28:e2:a4:7c:
95:f8:bb:cd:ac:9b:9d:c6:1e:61:da:3e:5d:47:29:26:c1:35:
3b:98:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:37 2025 by rpki-client