Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52ea225-af70-36c9-8151-034c4cf784fa.roa
File: d52ea225-af70-36c9-8151-034c4cf784fa.roa (raw, json)
Hash identifier: qDMuDi2MTfX1roFnLXUOT8uOWsLI9dgv1ud0wqdfYeg=
Subject key identifier: 89:02:7F:49:97:D9:78:33:98:B6:DB:95:3A:AC:2D:9E:D7:3E:51:14
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BAF367C96EEDF46869080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52ea225-af70-36c9-8151-034c4cf784fa.roa
Signing time: Wed 11 Dec 2024 15:18:14 +0000
ROA not before: Wed 11 Dec 2024 15:18:14 +0000
ROA not after: Tue 11 Mar 2025 14:18:14 +0000
asID: 396593
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:af:36:7c:96:ee:df:46:86:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:14 2024 GMT
Not After : Mar 11 14:18:14 2025 GMT
Subject: CN=661b95f7-c124-435d-ac06-f42325b59370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:03:14:e6:f7:6f:ba:c9:8a:e1:51:1f:67:
34:ce:c6:a6:87:a5:d6:2f:93:a0:25:6b:ce:17:34:
54:d3:fa:67:cf:9b:1d:5c:13:08:74:ea:3c:8c:ac:
2c:4d:9d:28:75:8b:57:ab:09:39:04:74:e4:f1:c0:
77:57:7e:fa:3c:d8:10:24:b3:fa:64:89:6e:50:98:
d8:12:59:73:b9:60:85:cb:72:75:e0:32:53:c9:63:
7c:45:f5:7c:bc:97:af:a0:5b:a6:cc:a6:1b:c7:e7:
ca:1c:4f:8d:ac:c2:d9:3f:cb:ea:23:19:5e:d7:22:
92:d5:a6:23:6c:6c:7c:b8:20:5d:17:8d:1c:7d:0d:
96:7e:7f:15:9a:dd:c2:e5:29:89:0b:12:a6:12:15:
a9:ab:9b:3c:e5:06:db:2c:30:59:fe:14:2a:67:f2:
11:a4:d4:4e:03:df:a6:2a:b2:0e:6d:a3:fb:5e:74:
7e:c2:47:40:42:d7:e4:5f:41:f4:7a:4e:eb:dd:12:
14:2c:93:f2:07:62:b3:5a:53:eb:89:6f:e0:4f:c4:
5f:9c:8d:6e:81:77:0b:f0:e2:5b:be:9a:95:89:d9:
da:a2:90:df:18:96:b2:81:ad:4b:d3:9f:73:d8:1f:
39:a0:5a:88:a4:5c:8d:b4:08:49:5e:fa:45:1a:b1:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:7F:49:97:D9:78:33:98:B6:DB:95:3A:AC:2D:9E:D7:3E:51:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52ea225-af70-36c9-8151-034c4cf784fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:4c:da:30:35:3c:d3:94:f8:5f:0d:b3:72:c4:e3:88:b1:b3:
2a:9f:a2:01:ef:f6:62:7e:c2:18:24:7f:e1:6a:ec:aa:5a:bd:
d5:30:3c:12:d2:ed:a0:62:34:5a:03:ed:81:c6:e7:7d:87:43:
a0:88:5e:4b:b3:9c:db:80:fe:54:44:f1:84:d7:16:a1:ad:cc:
12:e7:ad:79:58:33:35:7f:2e:09:49:1c:00:10:a9:4e:7b:5a:
58:77:64:3f:ae:bc:27:ef:69:c7:ad:20:d4:b2:73:34:65:65:
72:c0:99:04:6d:98:b0:0f:9a:54:c7:74:1d:a9:23:e7:57:de:
7e:0e:62:68:71:c6:54:be:6d:74:ce:e6:2d:37:b4:2a:43:d1:
b7:91:69:8f:f5:6c:fa:fd:3d:f1:dc:c7:f6:b1:61:1c:6d:9b:
af:1c:6d:b3:09:cd:1a:e0:fe:e0:a9:95:0a:6f:b0:68:1d:e6:
19:72:9f:31:69:29:d1:38:4a:04:aa:4a:4d:fe:6d:89:1f:29:
ce:3a:05:60:1c:e6:4d:19:28:67:6d:1b:ab:b7:05:45:79:d2:
aa:1c:a9:00:c5:98:e2:e7:05:48:23:1c:da:e4:27:0b:79:16:
37:6f:5e:f4:7e:ee:c2:88:bc:d0:79:1f:eb:47:fb:d0:d0:21:
e2:c6:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:17 2025 by rpki-client