Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ecb34759-107f-3717-bf8b-4a36f23d9b1f.roa
File: ecb34759-107f-3717-bf8b-4a36f23d9b1f.roa (raw, json)
Hash identifier: XQs1Lo2VyN4hVV9ZbFXhwrJlFKkAFrntDmXoc0A0q/o=
Subject key identifier: F3:A9:C3:5C:CA:8F:3E:8A:C4:12:39:9F:ED:4B:E2:AF:71:C2:58:89
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584800AF9D6D69DCA09D8A5D0780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ecb34759-107f-3717-bf8b-4a36f23d9b1f.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 396593
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:9d:6d:69:dc:a0:9d:8a:5d:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=4c627fc1-c154-469f-a90e-48d2b5baddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:73:b5:4a:9d:92:dd:86:19:10:7a:bb:6d:fb:
cf:9a:69:46:68:c0:b2:15:af:1a:12:a8:58:b0:60:
7c:92:28:8b:0a:bf:ed:0d:cb:b7:42:bd:d2:22:cd:
1c:aa:3e:5d:7f:51:de:93:18:1a:78:d9:99:4f:cd:
c5:22:8f:88:e7:c3:28:53:de:95:5e:5d:b7:21:06:
ee:7a:38:52:26:91:f7:d0:b3:cc:4b:e0:42:2e:3d:
b8:7a:47:8f:a7:e4:6a:72:90:b3:ba:96:1f:36:00:
62:af:9e:9b:cc:df:b0:18:6a:78:97:1b:02:2a:c4:
3a:15:5d:12:28:c9:fe:bd:3e:fb:4c:22:8e:a7:98:
92:d3:5b:c4:d8:b3:48:b6:6d:94:fd:6c:27:5a:50:
6a:a1:14:94:8c:73:fb:dc:99:e1:0c:e5:72:c6:12:
d7:35:2e:f4:f2:2a:ea:ce:f1:c7:e5:1a:ea:85:d3:
3c:cb:53:1f:8e:e1:4f:82:7d:68:b2:e5:b4:9e:38:
b6:c8:46:56:00:1d:5d:8d:00:d4:b3:72:a2:ca:a1:
13:e2:97:ba:6d:0a:29:09:e1:39:b8:b7:b3:2f:a6:
71:a2:2d:5f:a9:59:07:9f:be:d0:91:0b:5b:70:28:
39:f3:04:cf:11:6e:fd:9b:5a:41:83:ba:74:46:60:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:C3:5C:CA:8F:3E:8A:C4:12:39:9F:ED:4B:E2:AF:71:C2:58:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ecb34759-107f-3717-bf8b-4a36f23d9b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ab:b3:9c:d0:79:5a:19:15:9e:5a:66:e7:7a:da:d3:7c:c4:
1d:15:3a:4a:4d:b0:53:fc:6d:81:f7:14:a2:11:08:e8:70:b3:
fd:3b:b3:2b:2c:04:53:8c:44:ab:11:43:9c:09:a5:4e:c3:94:
71:48:28:96:46:4c:9c:c9:7c:a0:76:77:17:ff:c6:2b:32:ff:
56:ac:9c:e7:44:64:53:b4:d2:e5:dc:83:86:ba:1c:ed:8c:2f:
28:a6:40:ab:a3:51:19:78:6b:77:fb:cc:a6:cb:ab:e9:ce:05:
bf:bb:85:3c:64:eb:b7:45:b1:ab:14:29:82:1c:ab:c4:47:78:
a6:c2:cd:fc:1d:42:7c:fd:9e:72:e0:a5:db:28:4a:1d:6f:b4:
64:e6:a5:e9:54:b3:c5:a8:54:ee:19:d3:a5:a4:89:1c:7b:11:
1a:24:b5:71:6e:d2:5c:ea:49:3f:63:de:8e:42:a4:24:90:89:
d0:2a:5e:03:b3:21:a9:e0:23:72:ad:67:fa:1c:1d:fc:04:3b:
3e:4e:35:78:86:23:a3:2b:7b:f2:0b:12:91:69:55:85:12:6f:
5e:6b:9d:18:4a:45:43:5a:6f:f1:de:c7:7d:c6:e3:09:e6:69:
97:31:75:46:16:99:2e:af:0b:a4:d7:eb:4e:22:e2:45:51:38:
3d:b7:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:47:58 2025 by rpki-client