Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa
File: 3635bacf-d73e-3f47-8a82-a8a92a109fac.roa (raw, json)
Hash identifier: 1ciIihz/gx4uufWJ26MChoyOk8xgs2qMsFD/i+GPnLM=
Subject key identifier: 54:A8:A3:78:7C:63:59:4C:42:08:6D:15:4E:F6:83:12:B8:E5:E2:0B
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0067EA9F0C3694011C5DAC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 396613
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:7e:a9:f0:c3:69:40:11:c5:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=99826593-57fd-46d8-9910-bc113a3ff66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:04:ed:b6:19:03:23:4c:87:d9:17:98:fb:
0f:66:5c:92:ed:ac:b1:76:66:ac:eb:35:53:e7:ba:
7b:ca:a1:5c:ce:b0:38:20:19:1f:1e:2d:6b:dc:96:
63:6f:9c:47:d4:44:f9:77:ca:70:1f:a3:7e:33:2e:
60:5e:fb:07:02:57:1c:c4:c9:4e:97:13:a6:d2:15:
7e:97:04:23:d5:f7:24:e0:6d:e3:47:ae:dc:b1:78:
2d:45:07:6a:fb:0a:97:20:c0:34:09:44:b8:3f:38:
92:fc:3f:9f:46:49:ba:30:95:c0:1e:45:d3:64:74:
18:80:ef:d2:f1:a4:cc:45:18:d3:ef:7d:11:fc:02:
d8:55:fe:9c:d4:a8:cf:ff:1b:71:7c:9c:e9:65:66:
ba:82:a6:a3:b6:25:6e:75:a6:5f:4a:d6:ef:77:be:
38:ac:5d:6e:1d:4c:ca:1b:cb:43:12:cf:58:bd:38:
2a:1b:52:52:52:a3:a3:b7:ab:93:d9:16:b5:5f:ad:
04:ef:4f:bf:01:2e:50:18:a5:e2:85:a4:4c:01:94:
b6:34:8b:78:51:95:2d:e6:8a:c7:e8:d3:34:43:b8:
c2:12:7c:54:0e:12:df:74:35:ba:01:c7:26:33:dc:
05:8f:6d:ab:1f:35:e3:78:3b:80:47:0e:88:ae:48:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A8:A3:78:7C:63:59:4C:42:08:6D:15:4E:F6:83:12:B8:E5:E2:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:9b:85:51:64:44:f4:6b:96:bd:ff:e4:51:14:cd:9d:45:b8:
8b:df:6a:76:ac:66:ed:29:48:bf:8f:e4:a3:be:ec:c3:0d:df:
63:1d:bf:7b:df:cf:d5:98:e6:3d:76:de:1f:55:67:b7:32:95:
19:90:bd:5f:04:9b:c1:3c:16:8c:27:db:ab:9e:70:54:a4:40:
0c:9e:11:76:92:05:85:05:bb:f2:42:46:fd:6e:67:08:1e:31:
f4:bc:8a:c1:2f:a0:92:ce:22:f5:89:d0:10:3d:84:05:45:8d:
9c:45:fc:f8:c0:9d:06:a8:00:11:28:2d:3f:d9:46:c5:b7:4d:
be:24:12:fc:f2:88:ff:d8:67:4d:f7:c9:88:2a:d4:09:55:43:
6a:04:45:d1:0c:7b:36:8a:90:53:85:e2:20:fe:2c:fe:da:59:
9e:81:d3:39:b4:3b:ac:38:9d:4a:af:01:71:a1:66:e2:b1:d3:
20:c1:42:11:72:71:c6:7c:21:3b:38:eb:87:4e:12:40:1b:db:
37:67:c7:7b:56:55:f9:3c:54:5a:bf:b1:0b:83:6f:cb:e1:5d:
20:fb:3c:d0:c5:ab:a5:f3:92:4d:a9:5d:b5:a4:80:40:22:7b:
07:50:9b:1f:42:cf:c6:e6:b6:bf:2a:1c:4d:4f:5d:8e:8e:11:
8b:be:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:04 2025 by rpki-client