Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa
File: f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa (raw, json)
Hash identifier: DE4+SxM6PKaCwBXal8OJWb7l+xWKgYdbgsjZevHrHwE=
Subject key identifier: 72:47:3E:CA:25:24:28:D5:6F:92:E3:E8:F3:4A:D2:56:7E:A0:E7:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482C1BA565D69E7A7F72D4D380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa
Signing time: Wed 11 Dec 2024 15:18:09 +0000
ROA not before: Wed 11 Dec 2024 15:18:09 +0000
ROA not after: Tue 11 Mar 2025 14:18:09 +0000
asID: 10515
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:1b:a5:65:d6:9e:7a:7f:72:d4:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 11 15:18:09 2024 GMT
Not After : Mar 11 14:18:09 2025 GMT
Subject: CN=2a158f9f-7bc3-46c0-960c-4d6f60028a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:50:2d:7c:7b:76:07:1c:d3:ad:c3:16:f1:
9c:70:92:bf:aa:ef:04:c6:49:48:fb:8c:1c:22:39:
21:87:8d:af:1b:08:88:63:66:38:eb:77:f2:76:8c:
31:13:7a:8c:57:c2:73:3b:46:b6:29:fc:54:43:76:
53:c8:85:bf:37:03:59:e6:2f:06:f7:9d:0c:e1:91:
89:07:2a:55:4a:ee:36:2f:91:6c:a6:73:ed:b3:49:
88:69:05:67:b3:80:22:f7:6c:3a:10:b9:0f:46:29:
94:9e:d1:ca:b1:e9:e2:a7:3c:58:1c:90:3a:01:fd:
c1:22:27:c4:d0:4a:df:6b:4d:80:ed:b6:fc:62:79:
ab:cd:59:a3:c6:59:fb:ee:63:09:b5:ab:04:29:5b:
4d:16:e3:d9:b4:5d:d0:97:fc:d0:df:61:ff:19:ea:
22:6a:d6:c8:1c:d8:91:37:93:e8:19:fe:86:23:af:
37:1b:62:bd:19:18:05:f5:3e:8a:f2:2f:e6:e8:80:
89:d5:93:1f:eb:f2:41:07:df:e5:5b:f0:ca:8b:c2:
0f:02:6c:02:41:16:e6:19:a8:17:86:69:44:56:4f:
d3:f0:4e:e8:5d:f8:87:88:62:e3:0f:a9:9d:e9:e6:
13:90:a3:6a:76:a1:e3:9a:a5:e8:72:b6:3e:08:f2:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:3E:CA:25:24:28:D5:6F:92:E3:E8:F3:4A:D2:56:7E:A0:E7:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:2b:ac:6e:6a:79:5a:ca:3b:ee:97:8d:3d:6f:68:18:07:dc:
95:52:88:0d:19:62:52:f9:85:1a:60:49:b4:f4:7d:a5:ae:91:
40:da:29:be:eb:80:db:79:e6:ac:b0:b2:a5:25:50:e1:e4:39:
3d:f0:4a:2e:08:e6:92:9c:b4:da:03:d3:b5:78:2d:d5:53:3c:
2b:f8:c4:8e:46:2a:2c:f4:26:f4:01:30:08:b0:42:5d:3e:27:
5e:e6:96:8a:60:3a:68:42:ff:1d:37:e5:aa:40:5a:ad:3e:fa:
4c:3d:8c:d2:7c:13:19:eb:90:02:37:ff:5c:69:91:13:ba:98:
63:7a:44:34:f0:c4:68:26:cd:9b:97:4b:2e:f2:71:d5:d3:b7:
72:b8:0c:2e:2f:60:2c:c6:98:e5:44:b4:14:61:80:0a:75:e2:
24:e0:78:f2:1b:69:3b:91:7e:5b:0a:cf:fb:59:16:99:d6:dc:
76:6e:8d:4a:64:c7:c7:63:0e:10:53:4a:70:e4:bc:57:4d:b6:
df:12:86:bb:ef:1f:39:0f:99:bc:78:e2:16:5f:97:34:6e:da:
a3:9d:e7:34:87:b7:8f:1f:ef:27:90:90:7d:95:4a:c9:74:4a:
87:d1:64:98:a6:74:af:1e:ba:60:49:0c:c2:23:b4:b1:1d:36:
a8:94:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:10 2025 by rpki-client