Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa
File: c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa (raw, json)
Hash identifier: zGygQgL2GH9Xw8T2TQN0UhNAaKqPC6XJBFTEscgzKpU=
Subject key identifier: E9:D0:A3:11:27:B5:A5:5B:ED:25:9F:2B:D4:D5:55:62:EC:E8:CE:85
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AF9E98A2D1B34E81916C00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396557
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:9e:98:a2:d1:b3:4e:81:91:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=505d2b80-ec1c-437f-a379-0a0267a02707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:33:59:36:55:a5:c5:6e:e9:f2:0c:8d:38:
b3:06:29:0d:e7:f5:02:0a:e0:d1:82:f0:e5:47:7d:
56:fb:fb:be:db:ce:bb:79:12:70:f8:9b:8b:2c:9e:
73:9a:ca:f0:7a:1d:47:93:cc:84:53:ba:7b:ee:bc:
5c:91:1c:e6:5c:7d:30:33:77:44:a3:7e:74:13:4f:
53:5b:47:95:b6:28:22:97:67:aa:97:23:7e:1c:ac:
59:30:af:fd:d7:fa:ae:14:02:6c:21:17:77:19:ce:
84:0d:d8:30:5d:01:d9:2a:a8:4f:34:e9:00:d1:b6:
f3:ca:2e:ae:1a:bb:8c:ed:eb:a3:7c:79:4f:07:9a:
7a:f9:6a:cd:43:ff:bc:ea:ff:ba:86:e7:10:bc:40:
5f:f9:8f:52:d2:19:e2:92:68:36:3f:79:93:f7:dc:
41:c7:10:f2:cb:85:d4:7c:ca:a7:81:59:77:89:4b:
95:4e:be:c1:af:10:5b:aa:73:21:9f:ab:be:76:73:
31:45:ac:f7:c3:75:ec:80:51:b0:e0:56:c4:6f:01:
dc:dc:6a:b4:fb:08:fc:c8:84:2b:45:8e:f1:59:ba:
58:51:43:8f:70:bd:d0:9c:fc:4c:05:2a:ed:cf:51:
7e:ff:14:81:87:27:ed:d3:d1:ac:3c:6d:4d:1d:c0:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:A3:11:27:B5:A5:5B:ED:25:9F:2B:D4:D5:55:62:EC:E8:CE:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b3:90:f4:d0:f8:e0:35:d7:e5:d7:06:8d:83:8c:35:ca:3a:
5c:a3:4c:78:a5:f9:e9:71:53:48:8d:84:eb:b6:7e:6a:0a:58:
b3:cd:9f:97:f1:d6:e8:fe:4f:7e:46:ad:b7:df:b6:f2:1f:00:
e1:3a:4e:5f:49:37:a3:8a:70:f5:87:7c:07:b9:3a:51:fd:ee:
c5:72:94:62:64:1d:bb:2d:73:87:c5:f4:87:ad:e7:90:ee:90:
2a:6e:40:9c:ed:b1:c8:73:7e:f5:cb:3f:11:a4:84:80:3a:80:
6f:cf:2a:85:42:db:f8:74:e1:75:be:d7:a6:e8:40:8e:e4:de:
f0:af:b6:da:25:a1:53:0e:a1:cd:27:c6:38:86:e3:da:2c:ae:
42:85:bb:55:9f:ad:23:6b:7f:a5:02:46:e2:a6:fd:22:42:a2:
4a:4d:09:71:4a:5e:26:94:ee:dc:a6:1f:fd:b6:7d:30:6e:32:
78:2e:32:d5:9d:00:a7:fe:2b:bd:86:11:fb:1d:bf:c1:ca:49:
0f:c8:af:85:2f:a1:13:f7:cb:13:8e:83:cc:ff:bd:06:79:7a:
72:22:5b:37:3c:71:7f:7b:4b:c3:78:a6:ed:af:4d:70:27:62:
d6:9d:fc:85:02:32:aa:e9:75:9d:37:c3:ff:96:db:c0:b0:17:
7d:f3:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:23 2025 by rpki-client