Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa
File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json)
Hash identifier: CxXgdZXkGh6F/kqR8vAfB/yDLMRQ1yIKKqdNwBpGuBg=
Subject key identifier: 75:C5:EF:A8:C8:3B:F7:FA:4B:EB:C8:6E:C7:54:C0:98:17:22:E8:B1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AFA6EEEA09918C513C5700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 397198
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:a6:ee:ea:09:91:8c:51:3c:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=9396238d-8d35-40fb-be3f-79cd84fd6e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:53:90:ce:42:ca:4a:71:15:0a:8a:f8:a4:
0f:a8:7a:e6:4e:4f:91:3d:2a:52:6a:c6:2a:5f:a0:
81:b1:ad:a7:31:01:44:23:53:f0:ab:49:6a:60:c6:
ad:bb:16:8e:3a:f3:81:f6:89:55:d9:ae:9b:30:86:
a5:4f:a0:08:74:d3:85:8d:73:2c:5d:2a:04:d6:c2:
65:3f:1e:a0:08:4f:90:35:61:06:35:43:48:f3:f7:
1c:4c:bb:fc:64:e9:8f:1c:c2:f4:5d:54:aa:57:48:
d8:b8:ef:a0:16:92:e4:8b:1d:c5:05:a5:16:7b:2a:
7f:6b:c7:df:40:38:c4:fb:07:4c:be:95:c9:67:11:
62:01:fe:6c:de:1e:c6:d3:44:ea:be:3a:e2:f9:71:
61:af:dd:7d:df:ef:a0:b3:2a:be:f6:eb:d9:5c:7f:
86:80:ad:60:b5:78:f4:0d:61:fa:3c:b9:16:41:ad:
36:d0:e1:ac:34:71:8a:c5:91:e7:3e:82:72:00:9d:
19:24:c8:d0:02:e8:f8:96:bd:cc:d0:9c:92:6c:1e:
2a:56:ef:53:60:9d:b4:0c:15:d2:c8:15:b2:dd:61:
36:99:72:72:b3:c3:78:d2:da:8d:31:eb:7d:10:b5:
62:d9:8e:13:7e:d8:61:e2:9e:dd:40:ba:c7:9c:ed:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:EF:A8:C8:3B:F7:FA:4B:EB:C8:6E:C7:54:C0:98:17:22:E8:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:83:7b:b2:b3:5d:f5:8f:c5:b4:e8:a9:0a:06:2b:5d:ad:f1:
1a:1e:47:ab:a2:de:b8:28:e6:b3:5f:21:ec:00:b2:49:d6:81:
89:04:ba:d3:3f:67:f4:aa:e7:e4:98:7d:9f:1a:37:d6:32:f5:
a9:22:46:c5:8f:39:8b:69:27:0b:0c:92:4e:55:78:51:49:17:
3c:6b:46:4f:a0:53:5e:b5:ee:3c:ef:c9:8e:26:29:31:1e:51:
5e:92:2c:7a:c2:a8:94:63:c2:40:b7:04:36:6f:ef:39:4c:7f:
00:a5:9c:b1:89:d2:f3:f4:a5:89:cb:f4:e4:c5:46:0f:6e:a1:
35:33:b7:8a:46:b9:38:f7:5d:69:8d:c2:1d:fa:af:8e:a0:10:
58:32:dd:0e:dc:94:a1:f3:7c:3f:fe:b5:e6:d6:4a:3d:00:49:
c0:85:9d:d7:46:82:37:5a:e7:59:15:55:37:6b:32:6c:4c:8f:
9d:d0:0a:5c:4e:3e:89:81:f3:7f:c1:ad:b9:2d:75:24:5c:e5:
30:8a:7e:c7:fd:27:49:da:db:ca:06:1f:af:e6:e9:6a:4c:73:
6c:d4:0c:b0:50:c1:96:ce:14:fd:61:ca:d5:91:85:fd:8e:0f:
92:6d:32:ba:f3:84:ca:81:2d:07:b2:95:0c:2d:06:5f:f6:b3:
6d:de:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:25 2025 by rpki-client