Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/149f6f87-5d36-3bb9-8101-3bbd3bfc8b4f.roa
File: 149f6f87-5d36-3bb9-8101-3bbd3bfc8b4f.roa (raw, json)
Hash identifier: umVrAFysrTq2JQZ0l2itpC7se9qTjvmZvXY+Buql0Kc=
Subject key identifier: 8D:C4:52:1B:DC:97:53:A4:86:D4:37:A1:4E:0A:F1:1D:7F:92:5D:B9
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA0A680B9EBA818AAB300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/149f6f87-5d36-3bb9-8101-3bbd3bfc8b4f.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396609
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a0:a6:80:b9:eb:a8:18:aa:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=a7d235ec-cbc8-4988-8219-8e4ee0dd378d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:9a:4f:39:b6:f7:d1:0b:20:ea:65:d4:bc:
dd:70:4a:f3:88:48:68:c3:a8:81:03:c1:2f:55:1c:
bd:b7:a8:c0:18:be:66:0a:90:47:7e:de:4c:e6:8b:
ae:3d:e1:cd:d2:9d:42:e8:a0:88:30:81:72:55:d7:
28:23:fd:3b:04:fe:6e:56:dd:31:83:23:68:07:46:
d5:a6:98:47:30:60:03:22:d2:a5:7a:f0:71:3e:f2:
2a:6f:d5:5d:d3:e5:51:fc:02:b7:99:ee:25:7f:ca:
1f:dd:08:42:0e:ea:d6:4d:88:9e:e5:33:09:d1:e5:
2d:ed:15:7a:56:10:48:14:5d:99:93:e4:85:90:ad:
56:56:82:dd:6c:c3:09:eb:83:34:26:c1:55:22:25:
3e:c4:78:f8:b2:c4:18:16:2b:33:5d:f3:ba:f5:15:
af:91:8d:12:9b:5a:05:fa:8b:9e:e2:1c:4f:8c:62:
99:3b:21:43:fb:6c:c2:1a:31:7b:c2:a0:3c:a7:5b:
07:1a:73:cd:4b:16:a8:f5:e8:10:aa:b0:5c:72:9d:
fb:6c:47:f2:de:af:94:30:dd:10:5e:ac:94:0a:db:
a7:46:bd:38:f2:2e:9b:ee:f5:68:75:b6:59:fd:f9:
dd:ce:f5:a1:21:53:e2:c8:60:c3:29:b8:ae:bc:f5:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:52:1B:DC:97:53:A4:86:D4:37:A1:4E:0A:F1:1D:7F:92:5D:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/149f6f87-5d36-3bb9-8101-3bbd3bfc8b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:14:cf:25:4e:fe:12:7b:90:41:21:fa:b7:bd:b0:3c:cc:d3:
dd:18:9a:da:85:22:e7:46:ce:12:60:09:1a:9a:0f:c9:c6:7b:
18:59:d3:27:52:91:99:1c:24:0a:1b:89:1f:25:58:93:fd:3c:
e2:4e:43:ba:5f:72:53:ac:5b:9b:85:c4:ab:62:b3:3b:00:c0:
32:b0:1b:36:e6:b3:10:45:43:17:80:46:0d:b2:53:e5:a8:be:
14:f3:e3:10:19:e5:d5:3d:fd:df:4a:fe:4b:df:dd:ac:44:b7:
50:68:0d:8c:35:94:d6:43:94:47:d0:52:9f:66:c1:6c:45:74:
13:d3:6c:df:ed:04:aa:d5:bd:13:75:72:c1:b2:a5:51:bd:f9:
c4:04:a9:ec:0e:84:61:3b:c8:35:a2:31:18:62:19:b8:24:5b:
bb:c6:27:53:4f:43:97:40:ec:4a:af:1e:4a:31:45:17:b7:62:
c5:2b:78:95:df:55:f5:a7:d0:b6:c5:c9:02:fd:4f:2d:15:db:
bd:a3:17:8e:dd:a1:4e:a8:c3:79:bd:88:8e:70:01:7e:1c:fa:
d7:1f:71:0f:7f:35:ef:d7:3c:41:dc:0a:fb:05:e1:1b:b1:48:
18:23:dc:d5:f4:0c:a3:d9:4f:a9:ec:d7:ba:77:52:d1:70:ff:
2e:03:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:57 2025 by rpki-client