Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
File: 44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa (raw, json)
Hash identifier: IHLUUA1AX2YkJSqg3yXoNv56MxnoHmOAVhWdlFIevo0=
Subject key identifier: EF:96:D3:70:9C:70:2F:1F:C2:EC:99:81:78:2D:BD:11:D4:7B:0D:30
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA6500834D8B163723B44
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 40717
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a6:50:08:34:d8:b1:63:72:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=d24930f4-0259-4db8-b620-867319b7af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:cb:78:e5:6a:8f:ef:8d:42:20:fb:71:4a:
bf:99:5d:78:df:d3:9b:46:55:1e:9a:8b:93:0a:8a:
b0:bd:11:ab:83:2f:2b:62:a3:b2:66:86:b6:74:ab:
71:c8:ab:82:7a:8b:7e:dd:cb:de:78:8a:d9:8f:02:
89:60:57:ce:62:ba:b3:93:99:87:93:ba:3d:02:56:
b9:c8:39:d7:a9:82:bd:b9:ae:5f:c0:c4:f9:8a:2c:
95:47:35:0c:81:68:6f:4e:89:79:24:be:17:67:05:
9d:ab:b8:6b:bc:32:92:46:97:69:5d:ea:ca:e0:38:
b3:7b:73:c4:69:ac:09:e1:63:1e:ef:e8:79:08:13:
fc:96:0d:01:7e:90:e4:cc:ae:2e:ee:45:46:c9:e4:
68:8e:db:34:b7:8f:75:0c:73:2a:bd:93:d9:5c:9d:
6d:7c:df:ce:7b:09:24:12:51:77:73:3e:22:cc:83:
4d:17:cd:63:ff:15:c1:61:34:58:df:12:61:02:27:
64:b2:6e:6a:0a:35:d7:15:d6:df:84:51:c9:8c:b8:
b8:9d:98:81:a4:3f:81:a1:be:aa:4d:87:4e:57:61:
74:ee:3d:76:23:a3:b3:0e:fa:29:a0:18:b3:27:fe:
70:d1:f6:b3:9f:31:2b:55:44:d4:03:a2:f8:a0:14:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:96:D3:70:9C:70:2F:1F:C2:EC:99:81:78:2D:BD:11:D4:7B:0D:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44190ce2-bf70-3bb5-b4ef-814d7f349a0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:1f:62:a6:bb:a0:ee:03:c2:9c:87:29:4a:e9:b3:a5:08:29:
fa:e6:b3:b4:df:78:0e:78:0d:67:ce:a0:e4:09:95:d5:cf:6a:
15:79:0a:2f:61:15:2f:23:b5:1b:d9:b6:ab:14:81:ff:a4:bd:
6b:c5:32:32:99:2d:93:28:cf:17:3b:c4:2c:b7:d6:b6:e5:5a:
52:31:40:94:b3:01:79:d0:d2:d8:be:b1:5d:2b:94:4a:76:b1:
cb:a0:88:74:29:b1:73:3b:28:1a:e2:dc:eb:09:e9:68:a9:c1:
f5:74:b5:74:d3:92:5b:17:25:7d:93:7a:8c:ab:b9:32:18:36:
cf:dc:07:56:c7:9e:8b:11:8e:e3:d9:26:35:6a:d0:54:a0:76:
fa:8f:49:ed:e7:6d:e3:b9:33:08:44:b8:90:04:d7:8d:5a:82:
c9:8d:4f:15:a4:59:d4:a4:a9:69:c5:ee:96:85:d3:1a:4c:be:
9e:04:3f:59:e2:54:d9:7e:99:ec:d3:49:62:5d:f3:e4:97:be:
ea:cd:12:53:e0:08:3d:fa:39:3d:79:78:9a:23:79:12:d6:76:
ab:c8:fb:54:f2:88:b6:ad:b0:c1:f3:57:2f:63:8f:38:05:09:
50:82:bd:20:7e:13:27:8e:03:d7:31:d7:fc:ca:b8:57:61:30:
60:5c:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:53 2025 by rpki-client