Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa
File: 3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa (raw, json)
Hash identifier: d6paVy3smE2e+kH+iboZSuepKBcbD8oSM+pG9zG00cI=
Subject key identifier: 9E:C5:C6:93:E3:EE:10:66:82:45:4C:21:9D:BA:59:D9:36:6A:7C:EB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA2FF2069B9B688186380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396608
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a2:ff:20:69:b9:b6:88:18:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=1931153f-12a8-478c-ab69-16c279b02ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:cd:63:02:79:56:c9:2f:54:71:db:16:0b:
28:fa:71:35:c1:cc:d9:e0:a6:c6:42:7e:8d:9a:fb:
b9:3b:a5:00:14:91:2e:9e:1f:2e:f2:00:65:8c:11:
47:81:73:39:38:7b:a1:e6:03:99:0b:a9:ac:32:98:
e7:ce:8d:32:e4:92:76:31:59:86:07:79:a5:e6:18:
7e:07:0f:59:30:6f:54:cf:f2:84:ef:af:6e:c6:07:
9a:87:32:9b:c4:3f:c4:ba:17:38:ae:1b:38:de:f7:
94:9d:45:e7:31:58:98:42:a0:d8:8b:99:f9:26:ec:
53:4d:6a:e0:60:b6:c2:ee:62:ba:76:a9:59:7e:58:
2d:5a:8d:a6:44:b1:9c:e2:9a:fc:cc:c6:a7:39:02:
f1:4e:27:f1:79:70:ab:8f:77:3e:e9:59:ef:78:f1:
87:07:8c:08:87:48:ba:d3:c2:00:64:07:10:2d:a4:
ed:21:85:c4:d8:7b:1f:b3:db:7f:d7:64:e7:1e:35:
b8:01:a3:1d:06:c9:85:33:5f:9a:41:e2:32:78:4f:
b0:18:7c:1c:4d:4f:be:5a:97:75:b3:ce:bc:c4:ad:
c7:82:da:1d:ff:87:5f:c8:09:89:80:68:76:85:ae:
7b:f7:7e:b0:86:91:ac:7a:60:cd:33:28:74:92:be:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:C6:93:E3:EE:10:66:82:45:4C:21:9D:BA:59:D9:36:6A:7C:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:de:56:7e:49:05:c9:86:5a:82:cc:96:12:5a:f3:74:90:40:
8e:28:fa:a3:63:c7:f7:c7:58:61:2b:0c:b2:3e:6d:ea:16:5e:
a4:23:a5:0b:8e:ce:10:03:79:21:97:75:87:42:9f:8b:ea:4e:
ef:fd:73:d1:94:16:dc:8b:81:6c:90:2c:44:db:20:e0:87:32:
90:aa:49:7b:2d:33:4f:ae:af:63:0d:8e:30:b1:39:d8:94:9a:
14:c4:00:aa:80:87:bc:d5:5d:72:19:75:5e:28:4c:ce:7f:2a:
23:e2:ef:89:d4:d7:91:11:eb:56:3b:51:7f:88:be:6b:d3:1b:
0d:c6:4c:c2:ff:45:bd:b8:c3:6a:5c:90:97:9d:34:b8:54:1e:
2c:40:5f:a5:eb:10:f4:0f:ae:e9:08:0b:8f:c0:93:d3:c1:b6:
e7:59:d0:0f:85:e9:a1:8f:60:e2:8b:88:31:05:3d:64:59:5e:
8b:3c:c4:e6:cd:37:88:26:7e:0e:1d:e9:14:7e:15:a8:b1:8e:
bb:c8:0f:b5:9a:d6:66:c7:9b:5b:04:b9:3b:6a:1f:d6:29:4d:
48:67:3f:c1:b0:f9:e5:cb:8b:fc:50:60:6d:cf:18:d2:e5:b6:
4c:30:e9:5b:23:b5:5b:c7:1a:3d:30:b6:ad:ec:7d:1a:1e:a1:
c0:06:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:06 2025 by rpki-client