Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa
File: d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa (raw, json)
Hash identifier: yWcP89BhL/s4UTeGmOxS1E5XIxvI0SG7K9eVe0KT8LA=
Subject key identifier: 54:94:6C:4B:DE:5E:DE:92:FD:15:79:22:3B:FD:74:74:89:4D:F8:04
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AF9D7E3633C3EA0FF64580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 36630
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:9d:7e:36:33:c3:ea:0f:f6:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=29027bb3-a396-4c10-b5fe-0b53972df55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:09:bb:69:9a:39:22:75:ac:de:da:13:46:
02:dd:c7:8c:fb:7a:3d:d8:c9:5c:c8:45:9d:d4:c5:
ea:a8:17:a4:fb:c2:01:74:52:b3:e7:65:7a:3b:6a:
3e:2c:72:8c:48:3d:dd:9a:40:33:61:49:bb:bd:24:
9d:b9:8f:c9:7f:27:37:b9:c8:f9:56:58:60:78:6f:
c0:02:99:aa:ec:06:83:db:a6:1e:30:4e:78:25:8a:
ec:06:ee:2a:a7:ac:87:a4:c9:10:a4:24:ec:ba:75:
1d:27:45:3a:c7:98:8c:f0:34:01:dd:e8:5c:9c:cc:
a7:e2:b7:44:8d:63:47:fe:f7:d3:85:ee:59:6a:4c:
e3:1d:70:ca:ed:cb:45:a6:52:c9:76:c9:b8:c6:fb:
35:cc:c4:c3:95:3c:a6:cf:60:a1:b5:c2:5e:64:72:
76:9b:1b:8c:3a:a7:93:23:02:fd:d3:67:98:37:b0:
9a:48:49:77:bf:f5:bd:32:b8:b4:b6:0a:fc:79:fa:
71:fd:3f:31:9a:02:6e:a2:06:eb:1f:6e:39:c1:6e:
fa:63:ce:07:ed:0e:f1:88:4e:99:4a:b9:ab:d7:c5:
6a:0f:90:ba:ab:13:96:97:6d:2f:5c:a8:d6:dd:d0:
02:1d:f2:14:5e:7d:6e:c2:6d:9d:99:f6:86:74:8d:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:6C:4B:DE:5E:DE:92:FD:15:79:22:3B:FD:74:74:89:4D:F8:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:d4:77:de:74:e6:2f:d9:25:ba:cf:17:ad:10:9c:54:f8:67:
8f:46:d9:c0:11:18:14:b8:98:a1:14:92:c8:71:08:5e:14:45:
05:cb:5a:87:8f:d7:58:4f:14:02:9e:be:3e:1e:a1:5f:46:35:
36:47:de:ab:b6:ef:eb:a2:08:07:dd:28:ea:10:c2:6c:c9:71:
ff:a0:33:cb:92:d6:bf:92:ea:4a:9c:12:75:05:4d:e8:33:de:
6b:3d:c1:11:b4:6e:93:21:ae:fa:24:d2:25:e4:f3:ae:fc:84:
ee:95:21:cf:a1:40:e9:f6:04:e9:b0:66:1a:5e:78:01:c4:30:
3b:5e:50:b4:5f:98:c7:3b:30:c9:87:31:d0:b9:0e:a6:f0:cb:
52:5e:21:0f:fb:e2:0d:70:d4:ca:87:e6:2e:06:81:dd:68:80:
4c:55:f0:71:93:f6:1f:45:75:45:74:ab:cf:5a:c8:a1:de:6e:
4b:ee:7b:c7:a9:7d:74:27:bb:e7:85:1f:1c:6f:9b:09:f6:31:
5b:16:b6:eb:0d:a2:d5:71:ba:8e:12:b4:0b:b4:6d:c6:66:cf:
98:0d:86:2c:4b:fd:3a:7a:8e:03:cd:54:a9:87:0c:b3:4e:0d:
ae:7d:2c:93:70:06:df:72:a0:7f:b3:80:11:f8:8e:30:2f:e4:
23:53:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:12 2025 by rpki-client