Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa
File: 4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa (raw, json)
Hash identifier: 2KJnpnA3UTM6+CQNPazK37bVhdJIeBBJUJAftdm/Irk=
Subject key identifier: D1:E1:CA:69:AE:06:D7:9D:5E:FA:B6:2A:C7:02:A6:7E:F8:62:9E:D2
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0067E9E021566DEEF6CEC40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 396543
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:7e:9e:02:15:66:de:ef:6c:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=d3c64cc5-7f66-4808-ab4d-63ece27921d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:15:df:c3:22:af:ea:ea:d8:0e:17:ec:be:
f6:2a:33:cb:9c:d4:9e:d1:c6:ba:75:e5:5a:97:dd:
51:79:43:69:18:c8:4d:9e:9e:90:f6:32:37:3e:b4:
21:84:bc:07:98:a9:cf:36:b6:e6:f7:c1:2a:0d:43:
53:83:23:a6:ef:05:c6:45:2a:a9:cd:80:e3:0b:ab:
3a:dd:bc:72:a1:59:7e:11:43:5e:b1:44:9c:f3:12:
51:7b:c9:7f:13:9e:e1:e1:cd:e0:a8:60:4b:98:22:
05:1a:31:ef:3e:50:2b:60:e6:54:55:ee:8d:d3:5b:
19:98:77:34:28:a3:ed:a2:38:c8:df:4e:ea:0a:9b:
db:3e:9d:bf:b4:c9:cf:d0:53:08:74:0c:53:33:4c:
0e:61:02:8b:e5:00:81:2a:54:80:9c:6c:d6:5f:1e:
c2:48:29:2b:68:a0:2a:ff:4e:6a:80:7b:73:e1:8e:
24:70:c6:4a:88:d5:fe:dd:db:a5:ee:23:40:4f:6e:
57:c7:ca:79:c8:74:4a:61:b2:13:97:f4:e0:a6:e9:
49:06:a8:7f:ee:c3:74:04:2d:cf:9e:d7:35:ae:b9:
95:66:c6:dd:d0:58:b2:8c:98:8d:b4:10:90:f3:cc:
96:eb:3e:89:a1:68:0f:ba:bf:80:4d:41:47:70:56:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:CA:69:AE:06:D7:9D:5E:FA:B6:2A:C7:02:A6:7E:F8:62:9E:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:75:b1:bc:24:ad:3f:d8:ba:00:88:9c:e4:6d:aa:f3:4f:9f:
d0:8a:06:99:01:c3:42:20:9e:0f:a0:7b:b7:ae:da:9e:9e:92:
26:1e:74:42:49:60:43:c7:9d:9e:31:be:8b:b7:f6:e2:7d:72:
84:c6:c6:61:d5:3a:d5:c1:bf:5b:6d:a8:1c:fe:15:ea:f9:80:
a7:a4:27:1e:b8:50:7c:e7:47:21:45:c2:8a:d2:1f:41:87:a1:
ce:da:60:41:a0:78:0d:3f:28:9f:60:16:f5:58:5f:b1:7c:fd:
4c:db:c3:dc:32:b5:64:5e:46:c4:9f:cc:5a:2b:52:e2:e8:b9:
bb:3d:d4:21:75:4a:a3:b9:05:66:0c:e7:cd:67:33:d8:6a:27:
b7:88:a6:1c:4f:21:41:81:e6:e9:05:b8:30:7b:48:d0:eb:90:
05:4c:f7:a5:75:dd:62:79:1c:f3:af:0e:3e:e7:a8:7d:0c:cb:
d8:f1:8a:01:80:1e:c9:7f:85:68:fd:66:22:8f:41:80:46:2d:
f8:2e:c8:cf:5d:7a:49:93:11:e7:ce:c0:29:b0:85:e9:9e:98:
98:61:8e:6a:d7:a5:7b:15:a7:bc:ac:6e:11:fa:a2:32:c2:08:
99:76:d4:76:c2:ea:fe:54:cb:71:ae:66:93:45:18:a6:c7:bd:
96:f4:5c:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn6eAhVm3u9s7EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDNjNjRjYzUtN2Y2Ni00ODA4LWFiNGQtNjNlY2UyNzkyMWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTAV38Mir+rq2A4X7L72KjPLnNSe0ca6deVa
l91ReUNpGMhNnp6Q9jI3PrQhhLwHmKnPNrbm98EqDUNTgyOm7wXGRSqpzYDjC6s6
3bxyoVl+EUNesUSc8xJRe8l/E57h4c3gqGBLmCIFGjHvPlArYOZUVe6N01sZmHc0
KKPtojjI307qCpvbPp2/tMnP0FMIdAxTM0wOYQKL5QCBKlSAnGzWXx7CSCkraKAq
/05qgHtz4Y4kcMZKiNX+3dul7iNAT25Xx8p5yHRKYbITl/TgpulJBqh/7sN0BC3P
ntc1rrmVZsbd0FiyjJiNtBCQ88yW6z6JoWgPur+ATUFHcFbAdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNHhymmuBtedXvq2KscCpn74Yp7SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGUwMGEwYTItZGU5OC0z
ZDM1LWI3NDgtNGZjODFiMzMzZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBrdbG8JK0/2LoAiJzkbarzT5/QigaZAcNCIJ4PoHu3rtqenpImHnRC
SWBDx52eMb6Lt/bifXKExsZh1TrVwb9bbagc/hXq+YCnpCceuFB850chRcKK0h9B
h6HO2mBBoHgNPyifYBb1WF+xfP1M28PcMrVkXkbEn8xaK1Li6Lm7PdQhdUqjuQVm
DOfNZzPYaie3iKYcTyFBgebpBbgwe0jQ65AFTPeldd1ieRzzrw4+56h9DMvY8YoB
gB7Jf4Vo/WYij0GARi34LsjPXXpJkxHnzsApsIXpnpiYYY5q16V7Fae8rG4R+qIy
wgiZdtR2wur+VMtxrmaTRRimx72W9Fz1
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:18 2025 by rpki-client