Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa
File: 46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa (raw, json)
Hash identifier: CWRekPrAVtM5ZbTKZuDXfWRN3YSSyEHm348+B+sLytI=
Subject key identifier: 23:16:B8:98:5B:FA:77:A1:F2:B7:94:45:88:8F:4F:1D:F3:84:2D:E0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E00684DA84784DBF96573880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 36617
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:84:da:84:78:4d:bf:96:57:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=4ed4cff4-64de-4818-b2a7-6bca69098147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:d8:1c:35:33:ed:5c:5f:26:b6:1b:0f:db:
fa:47:8b:05:30:64:c5:97:9d:25:86:6f:b0:41:a9:
c0:49:58:46:d8:10:98:c4:b5:84:05:e1:eb:23:df:
5f:31:f7:16:fc:5a:02:5d:8e:de:4b:e3:5d:98:77:
aa:92:39:5f:a7:b7:f9:4a:d6:9b:5d:af:56:9f:99:
1c:61:5f:21:c4:06:c3:0a:45:52:cc:a8:3c:d2:50:
97:92:03:e2:93:16:8c:8a:4f:c3:ff:27:3e:16:aa:
11:7e:f7:c0:d4:6f:f7:fa:a7:81:ce:da:0c:94:69:
06:d8:41:0b:4e:dd:e9:89:27:ab:e6:e9:37:82:40:
d6:76:41:54:ea:aa:8b:e5:e0:b5:4f:82:b9:3f:8a:
45:39:19:a7:e0:34:a8:69:ec:10:81:76:69:c5:e4:
c7:db:c2:f9:42:aa:01:1c:74:be:7e:ce:b3:98:f3:
73:d0:4c:c5:35:d9:68:5b:42:06:09:b8:1e:96:44:
26:a3:6f:d1:4e:7b:e2:ab:42:50:9a:8e:34:5f:b2:
7a:8e:ff:7a:77:14:52:06:78:b7:45:88:bb:b8:98:
30:c1:37:b8:df:97:38:74:95:da:82:19:44:c1:bb:
8e:e5:f8:b7:2a:33:2d:eb:49:65:94:55:a3:24:b4:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:B8:98:5B:FA:77:A1:F2:B7:94:45:88:8F:4F:1D:F3:84:2D:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:4a:8e:bb:1a:08:82:e7:49:64:9d:a6:a8:f3:3a:b1:4f:77:
14:d8:ac:cb:b0:c5:35:99:d1:0f:ba:af:3c:4d:48:ea:82:69:
ec:2f:dc:68:41:fe:2b:c3:2b:34:1f:20:bf:b7:25:36:c9:c3:
a8:f9:e1:75:a6:20:f9:49:a4:0f:5f:b8:d4:ff:34:75:8b:f9:
da:f0:50:e7:7d:1a:e8:5f:f8:e6:88:ad:c4:92:e4:7d:f5:77:
2f:30:bd:51:a4:bb:e6:3f:09:f9:32:c2:e8:34:02:29:66:c5:
9d:16:4e:37:25:c7:93:ac:0c:5a:af:96:ae:d9:d4:53:df:4d:
d7:f3:32:89:d5:5f:8c:bc:28:5a:4f:ae:af:a2:79:28:93:09:
5e:89:10:58:f0:e7:ec:86:f5:66:cc:b4:ce:7a:8a:de:e3:c9:
c8:e7:b8:72:b1:56:9f:aa:44:ca:a4:6c:80:1d:e3:84:74:17:
26:1a:a1:e7:46:33:fb:04:c8:da:d2:72:8a:11:64:a6:6c:f7:
29:bd:48:02:b2:9e:85:b6:4c:5a:38:20:94:ed:ba:c1:be:5f:
46:4c:f7:cb:74:d5:ea:a4:69:f3:d7:5b:0b:55:39:fb:8f:57:
ab:1c:4d:62:ea:7e:a6:fb:4f:33:0c:82:76:ef:66:bc:c8:b9:
79:32:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:48 2025 by rpki-client