Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa
File: 4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa (raw, json)
Hash identifier: YZHsM0uUu/p5gD0sY9wYPKLer5Tie5ePw5pecFHjmfM=
Subject key identifier: 97:5C:AF:DA:48:07:87:B2:C1:BB:2D:15:64:2D:6E:3C:5F:93:DB:9D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D9056FB517CAE32E75DE2C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 209.112.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:56:fb:51:7c:ae:32:e7:5d:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=0fe563fa-74bb-4815-9346-775db35aa792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:be:34:41:bf:76:de:45:9d:af:69:40:d9:
58:86:4c:7c:0e:b5:59:d6:7b:0f:18:c5:a6:d4:ba:
57:a7:74:c2:6a:d9:9a:2e:ba:6d:d8:cd:4a:19:a2:
91:5f:5d:89:43:9b:24:00:f5:69:ad:b6:95:b5:ed:
3f:16:80:3d:98:be:69:7e:27:cc:9f:c5:12:0b:35:
af:94:4d:04:e6:2e:70:68:ca:70:51:41:d6:68:aa:
58:d8:ee:d2:b8:9b:ea:b9:cf:48:29:ff:17:df:7a:
d3:de:3f:72:ac:51:12:ce:84:a1:77:55:af:04:18:
f9:f3:87:f6:b1:6b:b8:22:24:08:5a:ab:41:d3:31:
0c:02:1f:41:a2:37:e4:98:77:b0:96:fc:cd:c2:29:
14:3a:1a:ec:bd:a6:f0:af:bf:8f:42:19:be:4b:d0:
f7:53:19:11:cb:85:f6:0d:fe:53:fd:62:c3:a7:cb:
01:0e:97:f2:e9:17:66:0c:27:05:66:43:37:86:20:
8e:20:51:d6:72:c2:33:86:1d:b3:94:44:2c:f3:19:
b8:b9:96:33:45:29:cf:e5:48:f1:a0:9b:bc:29:92:
60:54:2e:6b:03:c9:9a:cb:e2:f7:0f:53:f3:2e:4a:
ec:ef:26:e8:aa:18:ee:f1:ec:11:a0:fe:15:19:08:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:AF:DA:48:07:87:B2:C1:BB:2D:15:64:2D:6E:3C:5F:93:DB:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:fa:bf:3b:0f:82:ba:14:a7:5a:cb:8c:a0:b5:e4:b4:fb:fb:
80:a6:1a:ad:2f:00:d9:50:8a:27:d6:d2:ac:59:ce:67:79:d2:
9d:e0:44:4b:88:48:66:ad:7b:c8:1f:46:59:fa:1c:a4:a0:26:
75:a7:6f:4b:4b:c0:af:a4:1d:06:45:49:53:36:7e:d5:35:af:
b7:26:99:3a:4c:0a:a9:cf:13:3b:96:93:f1:0b:71:b1:f3:8b:
31:21:0b:72:cb:6d:09:91:ab:fc:9f:2d:ba:a7:60:f1:40:18:
e7:c2:da:72:eb:5c:4c:d8:cf:c8:71:49:ea:fb:3b:82:c4:ee:
36:36:4b:ea:4b:ca:a5:2a:73:c5:98:f2:c9:09:1e:75:87:ff:
01:37:81:63:54:78:32:c5:70:a2:95:8b:df:64:14:ab:88:b9:
ad:c4:77:74:95:29:24:77:5a:4d:e1:b6:04:53:6b:87:95:b7:
da:22:54:eb:1b:25:79:7d:13:ae:b6:bd:3f:39:eb:3f:25:89:
13:e0:01:e2:f8:74:93:1b:75:71:12:f8:c3:9e:bc:35:bc:60:
d5:14:04:ae:67:e7:b1:9a:31:4f:73:60:2e:63:8c:1c:cf:14:
28:f2:cb:f9:9d:3c:64:87:04:06:17:98:fd:98:99:7d:74:10:
b0:e1:29:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:07 2025 by rpki-client