Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa
File: 4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa (raw, json)
Hash identifier: 6yZgaYWGaQ+ra2tq6UFokE9iNsRctnrGdmcr6ZiMo2c=
Subject key identifier: E4:95:F6:76:72:64:07:26:0D:6C:06:03:A6:A3:96:B5:5E:60:5A:6C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858494CC94AB4A634ADF5BEBED580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 0
IP address blocks: 209.112.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4a:b4:a6:34:ad:f5:be:be:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=2b50801e-9fb1-4c6c-9620-86a12c64ef75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:dd:38:5f:49:83:7b:70:96:d0:9b:dc:ba:
25:12:e3:9c:aa:89:07:9f:60:fb:bd:d9:79:e2:ea:
76:c0:f6:5b:ff:ec:94:2c:9b:61:c8:f8:28:65:3a:
41:3b:59:60:65:0d:35:7e:cc:84:1d:ce:7a:f1:66:
e1:ec:e3:ea:fc:ae:9f:49:54:f5:64:8f:98:ee:1c:
88:aa:c1:91:fc:3d:d7:4c:bd:a1:ec:52:c3:c1:bf:
db:09:ac:aa:54:f7:fd:e7:43:a9:86:f5:97:ad:7b:
7e:38:cc:e6:b6:a4:ec:42:20:e8:6c:4b:98:cb:ac:
29:dd:cf:39:4f:f7:62:03:16:42:7c:dd:89:44:20:
85:d1:61:14:36:19:6d:38:75:88:33:0c:4e:0a:b3:
da:e5:7e:62:08:41:e9:19:53:2d:00:1d:67:c6:74:
95:69:ff:90:f8:c5:21:f1:d2:a6:39:a2:03:a8:ef:
b5:6c:ff:fa:4f:1a:75:0d:c7:33:11:2a:51:20:dd:
ee:e3:3b:3f:7b:8c:bf:a2:34:7b:9a:af:3a:43:ad:
65:4d:41:46:86:19:3d:0c:3b:43:cd:55:05:94:6b:
fa:f1:1d:26:85:a6:96:5f:19:99:e9:37:5a:d4:98:
12:af:b2:fa:44:81:dd:61:8f:dc:43:4b:0d:05:d4:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:F6:76:72:64:07:26:0D:6C:06:03:A6:A3:96:B5:5E:60:5A:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:bf:d7:27:59:87:fa:95:c7:80:0d:48:f9:2d:d2:c8:09:b1:
e2:bb:1c:23:f3:0d:40:9d:b5:ae:a8:fc:33:3e:b0:e9:16:a9:
1a:5c:ce:32:41:cd:f7:1c:70:bc:88:b5:9a:32:5c:ac:dd:45:
ec:10:f3:4b:c5:37:25:70:ca:54:2e:77:49:93:d4:10:4e:1d:
9b:74:35:13:d3:1a:5d:0b:37:fc:d8:b4:ae:0c:c0:b7:d9:d6:
b2:76:55:22:5c:6a:94:70:d1:e7:41:af:4c:d3:6d:3b:b3:f2:
91:f9:6f:25:43:e8:2e:22:bd:f1:a6:50:55:18:61:92:11:80:
c7:86:2f:a4:08:9b:7a:52:08:4a:48:dc:ca:c2:fe:03:d2:0e:
e6:72:65:53:82:cb:f0:f4:53:b7:b8:1b:80:be:40:a7:d7:f4:
72:3b:8b:cf:3f:9f:bb:ca:c5:e7:d8:c7:68:4a:92:d3:bc:4f:
57:31:f7:ab:6c:ce:7d:d8:fd:96:49:db:d0:a4:f1:b0:f3:3b:
95:0d:38:7b:c4:9f:19:5d:a4:88:52:a2:f8:75:6c:aa:b8:9c:
6d:f7:bd:6a:87:4f:17:96:c6:57:a9:6d:2b:0d:b2:ff:19:f9:
cf:d2:f7:18:d1:66:7b:10:ac:d4:63:78:e8:f5:b8:3a:94:46:
e1:cd:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:47 2025 by rpki-client