Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa
File: 8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa (raw, json)
Hash identifier: s72Lg1emtqtY8B7J44Ap5q5RvUg+Qkoh5P/sTK95BiU=
Subject key identifier: 07:30:1C:2A:2B:4A:C0:FB:7E:1F:7B:6C:90:F1:B9:F1:F2:66:A2:47
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA7744267776AF7449C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 36627
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a7:74:42:67:77:6a:f7:44:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=5a607468-1d6e-47be-9481-7a15fe8ed49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:87:62:f3:36:73:30:57:d8:17:98:d5:4e:f1:
a2:38:d5:58:c6:21:36:6a:0a:b6:b6:4b:94:c0:97:
5e:52:29:f5:04:88:0d:8d:ce:66:2d:bf:81:2e:71:
67:8a:df:e7:98:80:58:5f:44:4d:fa:1e:f0:bc:73:
a0:29:50:d6:8a:29:88:46:13:74:e3:5c:a3:8c:5d:
63:f5:d4:93:e0:17:76:f0:27:bc:7b:83:cf:96:b1:
ee:c9:3f:9d:1e:44:67:f7:4e:0c:98:be:c5:22:ef:
00:75:f8:3e:92:1b:71:6b:ff:b3:ff:37:1c:44:bd:
be:58:a0:9b:25:83:b0:13:78:3c:c3:85:f6:1d:c9:
8b:12:b8:cc:f5:5c:62:b6:b5:1a:b5:cf:13:43:82:
2e:56:16:f9:5b:c8:a2:a1:b1:32:a2:09:a9:d5:69:
66:19:48:57:9a:84:2d:11:0b:05:8a:f8:e0:36:8c:
85:5a:34:38:9c:47:6a:dc:7b:c1:76:35:43:8c:a2:
e0:14:b9:82:53:ce:84:e7:60:7d:fb:e9:88:d2:a1:
7d:c4:7f:42:3c:c5:57:02:e7:fd:b3:74:3d:91:81:
1d:91:75:61:d1:9a:4c:87:1d:2a:82:01:43:71:01:
46:a5:cd:65:40:13:a1:f8:56:09:3c:c0:84:4f:43:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:1C:2A:2B:4A:C0:FB:7E:1F:7B:6C:90:F1:B9:F1:F2:66:A2:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:6d:55:dd:b3:96:3b:8f:ee:0a:87:e0:43:39:22:e8:2e:e0:
cc:a5:19:8c:bf:27:bb:d7:f5:34:66:2b:c2:56:cf:78:68:0b:
df:cb:ac:a1:87:52:dd:72:3a:ef:bf:7b:69:4c:44:e2:9b:b7:
ea:31:78:3b:f3:82:ff:c2:83:72:f6:0b:40:a4:58:68:9d:84:
cc:33:2d:f5:aa:1a:65:76:dc:46:d5:26:f6:7d:b9:f3:ad:5e:
0f:6d:bb:71:46:fa:32:3b:3f:73:69:9f:64:4a:8f:db:c5:4d:
ec:e4:05:70:a2:eb:7a:76:f3:63:be:72:62:be:2a:4a:5d:c4:
8b:ab:25:df:47:07:60:ca:ce:a1:7a:2b:bd:43:1f:53:51:50:
27:90:47:4d:a5:0d:af:7a:4f:fa:25:28:1b:bd:28:ed:f7:41:
b2:9c:12:75:02:29:05:91:e5:53:76:5c:13:e9:f3:b5:80:80:
e3:ba:03:d6:8f:97:0b:47:ab:6e:c0:2f:16:22:ec:9d:44:1d:
6e:1a:d3:b4:11:35:6a:b7:51:fd:db:31:ff:54:00:0a:c5:dd:
0f:fe:bd:33:1d:67:fb:bb:d7:ab:67:f2:4f:0e:f2:c2:6c:5b:
af:b6:67:69:78:95:0b:ef:3e:24:d6:01:28:eb:a7:4b:1b:33:
ef:e2:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:55 2025 by rpki-client