Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa
File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json)
Hash identifier: ggHzQ+JxAQICopvvG000zlogl8B1lmIxoVx1ecUdGjE=
Subject key identifier: 8F:5D:33:63:33:67:FE:04:E7:82:2C:26:A3:2D:FE:BB:69:BD:23:0D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA91D3D3955AE3028BE00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396578
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a9:1d:3d:39:55:ae:30:28:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=6d0ddf68-195a-4dd0-ac7b-4e687c96ae25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:27:66:c5:e4:a7:9c:60:e6:7a:99:57:a0:
9a:5f:47:07:e8:46:68:f0:73:1e:ce:2f:d8:d8:66:
27:de:56:97:b1:7c:76:72:80:8d:48:48:d5:f8:6a:
dd:be:3b:d5:c1:cc:27:4f:a4:54:c8:fa:69:4f:cb:
d6:b9:41:5f:d4:88:68:a3:19:4f:e2:4f:6d:54:a3:
a6:9a:72:b8:ab:f1:d9:d8:02:8e:96:6f:81:83:c7:
ff:1d:68:76:61:cf:5f:5d:21:f3:61:a1:fe:8a:a3:
ea:bb:4f:c9:90:19:6a:4a:d9:f9:b6:23:f7:42:0f:
3c:56:7f:58:af:8d:33:63:f8:31:6a:5f:2b:7f:c8:
26:bb:8e:ed:44:ca:b7:79:ed:69:79:89:82:29:f9:
a5:ad:a3:8e:0e:b6:3e:46:b7:5b:3d:49:fe:78:ef:
e8:5c:a3:81:34:b0:ba:10:9f:0e:1f:38:d5:1c:a5:
26:d4:df:b3:4b:8b:80:42:b2:e3:81:9c:5b:e1:5a:
04:ef:aa:45:dc:17:ca:b4:80:28:d7:9d:f8:b8:91:
e7:db:75:e7:af:48:65:d2:6d:66:57:4f:2b:28:db:
47:3e:b5:d9:b2:68:45:73:a5:c8:aa:9c:da:ca:89:
5a:f5:79:b8:32:48:6e:a4:ca:03:c4:17:4f:d7:95:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:33:63:33:67:FE:04:E7:82:2C:26:A3:2D:FE:BB:69:BD:23:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:3b:07:74:c6:f9:a8:b7:43:da:5a:c1:eb:67:5e:0c:da:b4:
61:e1:c7:ec:cf:d2:1f:c8:bd:d5:02:11:96:ee:6a:2e:b4:7c:
2c:be:8c:97:78:f1:db:3c:bc:5a:ed:ee:fc:16:36:bd:cc:1f:
00:1d:90:47:ab:50:9b:5e:e7:98:56:a4:c2:b5:2a:17:86:56:
0c:0d:44:1f:3e:f7:25:10:03:7f:1f:fc:89:1d:05:a6:43:36:
29:6f:bc:09:ed:ee:02:ad:71:d8:9a:53:c7:b1:50:f7:a2:c4:
e5:de:95:7d:4f:42:fb:00:a5:54:b6:d4:2d:c4:9b:bb:48:80:
fd:07:c0:74:09:46:2c:55:be:4f:57:b5:03:7d:12:6a:f3:a4:
bc:e4:82:aa:4b:3b:3d:79:12:3e:7a:3c:87:46:da:e9:94:df:
28:e1:a0:a1:76:df:b2:68:49:0c:40:94:94:c7:ea:88:57:0a:
d4:a1:16:83:61:c7:7a:bd:85:97:0b:73:88:9d:83:2b:d3:ed:
71:6b:64:bd:55:87:1a:cc:a9:15:53:c1:76:36:9b:dd:42:54:
6a:3c:3d:78:48:79:93:b9:6a:f4:30:68:a4:73:74:7b:6b:af:
70:72:7b:12:6a:a0:21:fa:5c:6c:0a:22:bc:46:af:73:95:40:
82:c8:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:35:10 2025 by rpki-client