Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4a1272d-7129-3604-884e-4449e4d0d8b1.roa
File: e4a1272d-7129-3604-884e-4449e4d0d8b1.roa (raw, json)
Hash identifier: TchTwOwHPFSRxaj/C2d6KXM7QzDz4m7cI6rhias3aXc=
Subject key identifier: E9:54:B1:C2:12:36:C8:B5:81:B5:2F:1A:11:8C:1E:A2:36:31:30:87
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1B87D1C25E69FFA1B60A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4a1272d-7129-3604-884e-4449e4d0d8b1.roa
Signing time: Wed 11 Dec 2024 15:17:56 +0000
ROA not before: Wed 11 Dec 2024 15:17:56 +0000
ROA not after: Tue 11 Mar 2025 14:17:56 +0000
asID: 36632
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:87:d1:c2:5e:69:ff:a1:b6:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:17:56 2024 GMT
Not After : Mar 11 14:17:56 2025 GMT
Subject: CN=8677ae5e-8fe1-45cc-b0e2-bf7c83fc7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:6a:8f:1f:e9:00:66:9c:45:74:64:1d:59:
98:da:db:57:30:a6:f0:c6:b2:2c:8c:9e:6f:c7:29:
49:6a:4e:c4:6a:6d:41:ca:31:39:6c:d3:dc:d8:df:
fd:f9:91:da:1c:7f:be:a5:8a:52:14:87:c9:65:96:
5f:a9:14:ae:0a:5a:ac:10:4e:cd:55:a0:2e:a6:66:
eb:56:4d:e1:e4:28:cb:a1:3e:70:85:d1:98:6e:f8:
69:3e:e3:31:33:e6:f7:e0:89:7e:1b:1b:bd:90:61:
cd:e8:7e:51:50:d3:62:f9:49:b4:29:ab:fb:42:a2:
73:96:51:c8:ec:f6:5d:96:d4:7c:8c:a6:08:e2:81:
96:d2:f3:64:e5:07:0d:7e:87:ee:9c:a6:5c:e3:40:
9a:5e:1e:f4:ce:55:ee:83:83:6c:b4:ce:19:96:0b:
0f:80:85:d1:d8:f0:b6:80:a5:93:42:76:29:8f:04:
f4:17:fc:87:4c:54:4a:2c:2b:0d:21:18:47:41:5d:
3d:b5:56:63:b3:10:a5:08:8f:08:f0:1e:c2:f8:2a:
03:f1:71:a1:09:5a:d4:68:4c:c1:9f:20:b7:ad:c6:
d9:dd:a1:4c:8e:79:87:ff:ef:a8:71:01:d8:52:33:
1f:5b:4f:fb:a9:1b:38:f7:d1:40:78:8f:d8:05:0b:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:54:B1:C2:12:36:C8:B5:81:B5:2F:1A:11:8C:1E:A2:36:31:30:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4a1272d-7129-3604-884e-4449e4d0d8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:02:28:3a:d9:e0:26:c4:64:66:c1:8e:3c:20:ca:57:fc:a4:
37:90:a5:8a:a0:f9:05:61:d8:70:87:29:99:8f:12:d9:98:e4:
b2:aa:d5:16:cb:49:a0:3c:69:36:23:1d:ad:54:e8:d1:2c:40:
16:38:5b:03:50:65:b9:d8:7e:bc:cf:51:70:bb:1a:60:42:1a:
6a:50:16:ca:b0:0c:00:39:cc:65:7e:ec:39:ba:7b:ed:99:9d:
ca:d4:7f:8e:86:28:7a:fa:3f:a6:72:b7:27:33:1a:79:0e:a8:
19:76:19:1f:5f:6b:98:71:c1:e2:fd:16:2f:be:ef:3b:f7:77:
4f:0f:1d:fb:38:5a:21:b1:a9:f8:38:ad:27:28:a1:b4:d9:ae:
e9:40:ef:34:84:47:90:61:28:2e:58:cb:d3:a7:11:2e:31:6d:
59:dc:30:aa:27:69:8d:4c:c4:1e:2d:c4:35:b4:89:7b:5f:d9:
71:e0:80:9b:08:69:19:fa:e5:41:2f:dc:1c:68:12:9a:dc:fc:
61:06:25:30:11:6e:9c:f9:25:a4:a5:4f:5c:6e:b6:7e:6f:c9:
8d:5d:17:09:f1:90:af:25:86:30:ad:77:42:bf:f1:2d:86:52:
77:66:e7:06:4b:8a:bc:02:58:03:51:8a:df:22:62:7d:5b:ef:
da:78:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:55 2025 by rpki-client