Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa
File: 1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa (raw, json)
Hash identifier: EpqepFYdxqo32HD54rjBkRge5/SfIVyTCgqDpFB0p7o=
Subject key identifier: CE:76:9A:48:A3:81:13:75:25:4E:F7:E7:92:23:88:17:57:29:6F:84
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFAAE97A58A9515E6A8260
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 397208
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:aa:e9:7a:58:a9:51:5e:6a:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=0ac30358-fc15-43b3-a124-76daa906e5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:f1:aa:24:4c:d8:c6:97:16:4a:a4:9f:53:
9f:15:67:ab:8a:4f:63:67:79:c3:1d:fe:85:ae:f8:
03:90:1d:9b:5b:f2:f3:ee:40:f8:c5:db:8a:91:de:
f1:38:36:aa:11:e9:2b:9b:97:64:90:08:85:2b:ae:
d2:ab:ea:ac:a7:4a:9a:59:79:ec:24:e3:6a:4a:7f:
8b:4d:26:a8:cb:fb:2d:fd:7e:a4:6a:3d:b8:1f:8c:
1e:84:92:fd:1f:ee:4d:a4:f8:97:52:3b:30:26:60:
80:03:a1:0d:a3:41:41:a5:d5:be:90:7a:f9:27:78:
e7:9d:1e:29:24:38:27:1c:d4:4a:cc:c3:5c:d4:da:
f9:f1:cb:d6:07:ff:56:73:78:cd:b6:b6:9d:78:64:
be:7f:ed:b6:93:f1:ed:65:ca:e0:c5:fc:e8:69:d4:
90:4d:8d:34:3b:3a:29:72:ac:20:f1:de:77:bc:67:
80:9e:de:04:40:c5:2c:ff:ed:90:dd:62:62:f8:de:
36:76:18:8d:cc:0f:19:0e:bd:d7:3a:bc:25:1e:27:
7a:6e:e3:28:de:69:27:50:bf:86:28:f7:16:cd:5c:
d6:32:0c:c7:fb:36:77:d6:11:dd:5d:6b:9b:64:77:
50:df:bf:78:d2:8e:29:08:a2:fb:4f:bf:be:8c:31:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:9A:48:A3:81:13:75:25:4E:F7:E7:92:23:88:17:57:29:6F:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:91:ea:3d:9e:20:ec:fa:4f:a8:8c:b0:36:d6:e9:43:b2:96:
01:d3:68:29:38:ef:96:79:89:47:70:34:09:d4:49:d8:c0:bd:
27:72:b7:6e:73:6f:12:68:d6:bf:a0:e3:6c:22:cf:a9:45:a5:
9b:ef:e6:a9:34:80:e6:5b:98:e6:e5:7f:77:74:76:65:a9:83:
dd:3d:3a:92:f9:d6:da:19:ba:44:b8:a8:ef:81:87:c3:43:48:
e2:15:9a:30:7c:01:a8:90:2b:6c:57:4d:f7:6a:80:94:b0:ae:
d6:fe:e0:f5:7c:02:43:63:a4:07:be:b6:08:ae:2d:61:8b:21:
37:b4:4d:0e:19:df:9c:49:02:0c:bb:59:1a:50:d1:38:1a:70:
df:09:34:36:70:01:92:ee:f3:a3:bb:cc:2b:ad:df:5d:1d:cd:
e1:d0:1b:c1:05:4c:13:11:73:10:7f:bc:68:ee:6a:d9:c5:7b:
63:06:a1:fe:82:b7:f4:b2:4e:b7:fd:65:a5:ac:0f:30:f2:6f:
17:de:b4:f6:b6:11:5f:96:b1:cc:d6:31:48:da:39:0c:82:e1:
3a:46:b2:76:5b:a4:2d:bc:78:4d:0e:db:b3:1e:05:04:55:bc:
64:4e:35:19:12:03:cf:60:3a:66:a6:63:06:36:82:f7:79:27:
8f:28:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:52:30 2025 by rpki-client