Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2b34f04-9eef-3f5c-b264-c842ff0ef1db.roa
File: c2b34f04-9eef-3f5c-b264-c842ff0ef1db.roa (raw, json)
Hash identifier: l0dsOljnjr+55mkBX2QBwJkw18YTUK3W0/ReWIYBwI4=
Subject key identifier: D5:44:F4:0E:E6:19:99:0A:B8:33:43:BD:F9:ED:FC:BD:AA:F5:AD:B7
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFAB88DF0C61881D71A7C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2b34f04-9eef-3f5c-b264-c842ff0ef1db.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396570
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ab:88:df:0c:61:88:1d:71:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=9b6c0517-e668-4c06-bbdb-40cb9bac04dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:ed:a0:15:3e:20:b2:a8:8b:e6:b6:7d:84:
c0:99:a8:3d:4d:4e:08:dd:d8:0f:0b:80:0e:c4:14:
23:bc:40:2c:b8:d4:56:0a:87:72:af:77:44:51:e1:
92:44:85:0d:e6:1f:30:74:27:12:51:90:39:93:bc:
db:a2:16:32:b5:25:06:e9:5e:69:41:c6:b1:2b:bd:
56:e6:5e:d0:49:60:9c:e2:60:15:0b:57:e7:28:78:
81:f2:f3:14:21:04:39:a8:ba:6f:55:0c:7b:58:51:
ee:14:47:57:41:d0:9f:0f:1b:f0:d7:0b:b1:b3:30:
69:b5:07:72:37:22:ff:c8:c2:28:5b:a0:1f:ce:41:
f6:30:50:70:78:84:22:84:78:e5:61:af:97:52:3f:
1c:94:c7:76:5f:7f:0a:a5:e8:0c:2d:b8:fe:6e:35:
e5:9c:52:78:0f:6d:80:a0:25:da:4b:e0:13:0f:22:
c5:b5:7b:e7:f0:71:84:33:f8:52:f7:ed:39:7d:69:
f4:b4:8e:66:a9:bf:cb:61:52:9c:dc:dc:1f:c3:e4:
43:b7:47:9c:aa:da:3d:ed:06:0a:2f:58:90:5a:cd:
4d:ab:c5:45:22:0b:c0:ce:fb:0a:dc:68:04:4a:71:
e3:7c:75:cb:1b:df:06:c3:5e:df:37:4d:e3:25:78:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:F4:0E:E6:19:99:0A:B8:33:43:BD:F9:ED:FC:BD:AA:F5:AD:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2b34f04-9eef-3f5c-b264-c842ff0ef1db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:67:38:47:20:5b:4f:d1:08:e8:d3:94:42:08:17:dd:3d:01:
48:5e:27:e4:89:45:f8:e6:d8:7e:97:c0:71:c0:11:4c:08:04:
62:bb:43:2d:a5:bc:18:8e:41:1d:2b:70:76:91:6a:11:12:7e:
0b:dc:7f:e8:1a:0e:72:79:73:7a:7c:31:49:8d:3a:3f:69:e2:
79:be:06:1b:8a:ad:33:fe:5b:dd:3a:35:de:ba:30:66:6a:30:
b6:b9:7c:2a:00:e1:c7:a1:98:2c:4d:ec:af:cf:1e:29:b1:71:
9b:e9:9f:03:6a:58:65:c6:b3:c0:99:2e:33:6e:91:1c:e3:22:
0f:bc:7f:01:15:8b:aa:8c:7a:17:d9:e9:b4:2a:a2:8a:d0:79:
e0:e0:8d:40:ff:6d:7c:7b:44:9c:a3:d5:9f:29:6e:e3:40:29:
40:f9:92:1f:42:a3:97:73:eb:ea:c8:f7:23:b5:79:5c:4e:15:
32:95:24:a8:a9:2c:9e:70:7f:ff:6d:d0:8f:62:f3:9e:4f:30:
36:3d:76:b4:b1:74:84:6a:f5:47:34:69:b9:ca:48:d2:79:40:
9a:ee:99:42:7e:a0:b2:23:5c:ac:d0:e9:18:63:6a:95:5e:eb:
12:29:56:7d:42:ba:a5:44:da:bc:a0:57:73:28:23:b1:11:aa:
01:6c:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:45 2025 by rpki-client