Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa
File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json)
Hash identifier: RzZOpblMyQcL9IIlR8nZYqhi6LaibY5PrOYOFfQtlxo=
Subject key identifier: 09:D4:88:77:4B:C6:CB:E1:60:BA:4E:83:55:EE:61:0F:9A:43:DD:DA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E00682E62B091AB0F0718600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 396578
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:82:e6:2b:09:1a:b0:f0:71:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=5db42ad7-9e27-436b-9c23-a43323792e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:01:24:bd:4f:f2:cb:9d:7e:fc:83:44:99:
fa:a9:b4:a6:b3:fb:9e:95:d9:83:78:94:0b:25:2e:
d7:f0:47:04:d1:c5:0d:a0:55:80:8d:09:ef:e1:b7:
98:b8:2a:40:72:b4:5f:f4:5e:6c:72:7c:16:4a:83:
25:53:f7:6d:40:ca:62:4e:1f:97:99:d1:ae:9a:a9:
80:bc:10:f1:96:8f:5c:33:fe:ef:90:9d:99:ff:10:
49:96:9b:cb:d6:93:16:3f:b0:e5:2e:a3:d2:2d:45:
9e:10:34:2f:72:1c:0a:f3:c5:fd:2a:39:f0:18:f4:
2f:a3:90:1a:38:9d:7b:a4:2d:e8:ae:ef:38:ab:5d:
39:35:ba:e3:c4:af:9e:2f:de:0b:ef:62:11:b2:e5:
2d:7b:a7:46:a1:2e:b6:3a:fa:48:a1:ed:1f:47:b0:
d0:11:5c:94:08:10:d5:fd:f0:48:46:6c:31:22:86:
d4:4e:4e:0b:d4:e7:38:d6:1a:c6:ca:b3:01:f9:56:
6b:63:df:03:96:ec:c3:b4:27:cd:af:5c:85:25:cd:
33:fb:08:cc:3c:cc:2e:08:17:35:ed:23:11:e6:97:
99:86:ed:63:a9:f6:7f:12:b8:fc:db:7b:a9:7e:df:
7a:e7:1c:e0:37:74:8c:59:03:56:fe:62:3c:09:fb:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:88:77:4B:C6:CB:E1:60:BA:4E:83:55:EE:61:0F:9A:43:DD:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:46:a4:bd:3b:45:3d:c6:39:4e:a4:f1:32:4b:c7:e2:2d:58:
8c:89:d9:5a:86:fd:bc:27:f8:c4:d6:d6:35:d3:ce:6f:00:91:
f5:f8:ee:e0:1b:59:70:76:f0:e9:52:18:70:95:56:3d:83:68:
67:58:c7:86:54:43:89:eb:4a:cc:60:39:a6:cb:9c:19:84:a9:
fd:6f:22:99:99:84:87:50:35:9a:bc:02:c6:1b:6b:93:d5:49:
80:4e:01:98:a7:81:96:59:6f:b5:bb:df:c3:9b:20:47:da:35:
92:20:9a:49:7c:ce:b4:93:5b:da:b9:d7:7e:89:ff:75:e3:4a:
d1:11:53:2b:90:f4:f6:6d:7b:62:87:77:19:62:a9:fc:56:73:
2a:fd:9e:62:3f:4d:1e:a4:53:4c:9e:f1:72:d1:4f:86:42:c0:
82:42:06:7b:41:f9:27:55:09:e3:2a:e6:37:9c:87:4d:d9:0e:
da:af:c7:98:ae:eb:05:9a:98:47:74:35:e6:5a:d7:5c:5b:4e:
9b:59:78:2f:2c:63:b8:46:27:93:81:0c:6a:43:b7:8f:7b:06:
3a:ff:93:e9:b1:b2:37:87:ff:90:35:1a:2f:e1:77:04:bb:e1:
5b:48:64:91:90:2c:d9:ba:f0:27:8a:f0:12:d4:d3:3c:4e:0f:
a0:22:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:09 2025 by rpki-client