Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b3b7ea8-d637-32d3-946d-d7eba904b552.roa
File: 8b3b7ea8-d637-32d3-946d-d7eba904b552.roa (raw, json)
Hash identifier: tq5DkQghZEev1ZXSMOKNgT0yqpjvakjaQnhLllE/GQ0=
Subject key identifier: CB:6E:14:CB:78:0F:14:B8:A5:B5:11:DC:DC:93:25:05:6E:D8:E0:0B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA0F3716B77F3DEF25D40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b3b7ea8-d637-32d3-946d-d7eba904b552.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396586
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a0:f3:71:6b:77:f3:de:f2:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=fb51db87-e884-45c3-bb2a-6a83491241b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:42:4a:f2:e8:92:5d:bb:f4:38:3e:77:41:
fb:c4:d7:3f:44:34:b0:c8:dc:0d:f6:59:9a:44:ac:
f7:83:8a:19:34:79:20:43:22:98:38:22:8a:ef:4d:
bb:75:d8:31:c8:6c:c4:cb:6e:f5:2f:e6:75:98:a7:
c2:37:bd:d1:39:9e:cf:6f:92:8b:da:9e:31:f8:42:
1b:33:21:17:68:ea:f8:69:43:14:a7:05:34:ff:84:
67:60:12:54:c2:29:29:43:7e:13:ab:44:ff:37:16:
6e:aa:85:33:17:b0:79:6d:dd:4a:6d:67:da:9c:73:
67:ea:d7:b8:67:bb:88:d7:04:21:ba:e4:69:ef:d0:
ae:9f:25:97:1a:24:4a:c5:84:e1:16:05:ef:b8:d5:
d0:38:83:87:b2:95:93:8e:b8:87:45:a7:0b:3c:19:
08:a2:cb:c0:73:f1:91:69:42:17:42:29:59:34:65:
a0:87:52:37:01:aa:41:ec:14:8d:6b:cd:70:5e:86:
bb:fd:01:d8:ff:d9:f1:e0:cd:9a:90:16:2b:dd:87:
f9:04:21:19:63:da:ab:ba:3d:11:69:39:d0:e5:2b:
8b:b0:9b:ad:90:5d:af:37:3e:50:c0:f4:6a:fc:ba:
cb:da:42:69:43:26:df:3c:07:66:9d:74:b1:e4:1c:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:14:CB:78:0F:14:B8:A5:B5:11:DC:DC:93:25:05:6E:D8:E0:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b3b7ea8-d637-32d3-946d-d7eba904b552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:27:80:6e:d7:5b:89:23:f6:ed:34:d3:93:42:6c:00:12:c6:
7a:1f:ad:6e:13:84:d2:ac:f7:dd:79:00:8c:3e:37:b9:c7:eb:
65:0e:e6:bb:b6:6e:8a:3d:5e:e2:98:29:b9:58:96:3c:ec:1f:
a5:c4:6f:36:20:47:26:bd:07:5c:41:1e:64:47:f3:1f:33:e6:
c3:27:8c:31:9b:5b:f9:58:aa:0b:e3:f4:4e:86:11:14:b2:ee:
1e:8f:1d:cc:25:cc:e3:c8:3c:97:5f:7c:17:41:9d:7a:15:1f:
b3:f1:30:00:84:be:51:4d:e6:c1:b3:6a:41:c0:c4:9b:73:dd:
d7:35:23:65:75:52:69:ec:c2:61:f1:18:9f:07:cb:bc:16:bf:
e5:a3:c8:26:f6:1b:75:04:df:8e:b1:72:71:ea:d4:b9:2c:90:
06:5b:26:dc:2e:eb:29:ef:5a:9c:29:68:94:39:e8:e1:73:25:
88:64:f6:7f:ba:81:0d:7e:3a:50:74:91:fc:65:e4:31:5b:90:
5c:c2:93:97:63:9e:10:35:e4:d2:20:83:90:b2:df:cd:3c:5b:
b2:ea:27:3d:54:93:41:9b:9b:47:41:bf:e6:17:b5:a5:53:5b:
ee:5c:1e:91:10:4e:67:bf:f9:c6:6d:cd:e0:13:f9:5b:c3:64:
ca:04:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:22 2025 by rpki-client