Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20e5248-9746-3a74-a064-ba8eb476730f.roa
File: e20e5248-9746-3a74-a064-ba8eb476730f.roa (raw, json)
Hash identifier: 6mC5MmWq0gB81rfzbL6rD3SWJdIt+FqYJqsZdDZ7jcU=
Subject key identifier: 08:DF:AF:65:E5:0B:73:84:1F:BA:99:76:92:F5:34:AE:9C:9F:AC:0B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA5B4F60BE0515B7BC300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20e5248-9746-3a74-a064-ba8eb476730f.roa
Signing time: Wed 11 Dec 2024 15:18:10 +0000
ROA not before: Wed 11 Dec 2024 15:18:10 +0000
ROA not after: Tue 11 Mar 2025 14:18:10 +0000
asID: 396541
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a5:b4:f6:0b:e0:51:5b:7b:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:10 2024 GMT
Not After : Mar 11 14:18:10 2025 GMT
Subject: CN=dbed6450-28b9-4db3-89f5-301238f6054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:06:21:1e:8f:07:a4:70:fa:3b:47:94:01:
e6:54:4c:e0:8c:e0:e0:bc:2d:d0:cd:82:c8:34:a5:
01:be:76:8c:e6:74:8b:f3:f2:d2:80:6d:28:c1:54:
89:d5:e5:70:39:32:7e:7f:66:fa:a1:13:d2:ac:fb:
49:34:c6:a9:bd:b8:f4:43:3b:77:b6:62:8b:00:ac:
1f:63:d1:7d:0b:0f:44:ca:4b:33:87:90:1b:78:1a:
6e:2a:97:b7:28:ba:3e:50:32:e2:2c:60:60:49:91:
09:67:13:cb:71:91:bc:53:e0:40:3c:84:91:96:0d:
05:27:9d:af:41:89:36:d9:ad:ae:7a:70:14:13:27:
75:c1:8d:3d:e7:e5:e7:66:54:10:28:66:d9:0d:d8:
b8:f0:31:ef:34:e6:05:7a:58:55:a1:cc:16:35:df:
51:91:47:6e:62:56:9f:6c:97:ae:f9:08:63:bc:68:
34:0e:ff:0c:d8:c3:32:e7:8d:db:9b:20:fb:64:ab:
81:75:f0:82:23:e4:5f:ff:99:22:67:94:88:1c:70:
18:6e:f4:de:4e:a1:94:3d:c8:40:02:0d:a9:7d:55:
c7:97:8c:dc:47:11:63:29:8b:d4:80:7d:b8:4c:60:
22:2d:ff:df:25:fe:bb:47:c0:2d:6a:f3:44:b0:a6:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:AF:65:E5:0B:73:84:1F:BA:99:76:92:F5:34:AE:9C:9F:AC:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20e5248-9746-3a74-a064-ba8eb476730f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:86:d0:cb:53:4c:b9:78:19:6e:09:ec:b6:80:b8:1e:37:10:
f3:19:98:8c:de:a8:8e:e8:58:90:f5:52:3e:64:6c:e8:35:73:
4f:c7:68:db:76:89:14:4f:1e:92:ba:44:81:a2:82:f9:06:07:
a7:fe:13:e9:4d:02:c6:dc:6f:ca:dd:72:00:a6:f6:79:38:81:
57:93:64:22:d7:4f:b1:5f:5d:b7:12:1e:05:14:54:cb:3f:1f:
34:8f:83:b9:3c:4b:3e:6a:e9:3d:01:e8:67:91:12:9f:66:2c:
b9:cc:e0:47:5a:fa:38:1b:75:21:d7:cd:f0:de:f4:51:b7:fc:
b6:f2:4a:c4:65:0e:e1:66:00:5c:21:20:8c:99:e1:3b:b2:90:
a4:58:09:19:36:09:1b:49:f3:e6:55:ff:b1:c5:d8:d9:d5:d7:
6f:79:b8:40:f0:55:4f:0b:c2:64:2d:ae:b7:5e:fd:d0:4e:4f:
fe:da:32:54:99:5e:8e:c3:78:25:4f:63:98:9b:b9:55:73:a2:
84:f5:6e:54:e4:29:dd:a4:80:d1:e7:ae:3d:2a:b7:f4:38:83:
cf:c0:b7:93:da:c5:d9:b1:7f:95:51:b1:fd:98:ad:ca:5e:9c:
6f:c6:a7:94:35:b9:48:25:85:07:06:68:a9:19:2c:91:2f:c2:
68:d6:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:57:17 2025 by rpki-client