Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c579bcf-edde-307b-a978-dad3c595d297.roa
File: 5c579bcf-edde-307b-a978-dad3c595d297.roa (raw, json)
Hash identifier: OceAOtgQn2IZAgN95mPSMnTEBGs33NXpRzWtF5jj1Vg=
Subject key identifier: AE:00:07:66:29:D5:C5:82:F7:34:67:A6:19:B1:E6:BE:E9:60:2A:D9
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0067A4ED9DA0A8511540380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c579bcf-edde-307b-a978-dad3c595d297.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 397193
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:7a:4e:d9:da:0a:85:11:54:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=c2f4f016-97b2-4e43-b095-f8cc51324595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:c6:af:54:c6:0b:e9:0a:81:24:7d:5a:5b:
2a:46:12:61:a3:be:d9:c9:b2:7e:ac:9f:46:07:18:
ff:f1:5e:59:86:c0:58:95:63:8f:a2:7b:33:10:63:
96:ba:8f:be:ba:9b:15:b6:9d:c9:a2:34:ee:29:8c:
39:f5:4f:b9:de:88:20:76:60:c1:61:0c:00:ee:ef:
54:f2:b0:85:de:81:4e:14:c8:54:45:d9:d2:3b:66:
f2:f0:49:bd:53:2c:a5:66:be:68:98:f6:42:5c:8d:
e0:1a:0b:52:24:42:07:48:0b:5c:67:74:de:d4:ee:
d2:a4:91:c9:6b:41:19:89:fe:ae:50:27:d0:29:0a:
ce:fb:d1:a0:be:23:ea:a8:b6:5e:21:de:b9:2a:27:
20:4f:72:ea:75:c3:04:13:75:eb:32:32:35:4f:7d:
3c:98:04:2d:41:86:34:5b:72:b3:8c:32:a5:d3:d0:
3d:b9:52:8a:46:b2:89:88:10:91:7b:36:98:9a:76:
46:08:2d:6a:d9:a2:57:41:d4:8a:57:d8:d9:34:e5:
38:a0:b2:d3:b8:f8:5e:41:7e:a7:9d:b8:93:57:67:
0d:dd:24:89:e9:24:0c:cb:1a:bb:2d:b7:90:cc:4b:
89:e6:3c:51:27:49:0b:01:70:2c:3d:0c:a2:4b:4a:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:07:66:29:D5:C5:82:F7:34:67:A6:19:B1:E6:BE:E9:60:2A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c579bcf-edde-307b-a978-dad3c595d297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:5d:6b:78:e4:5d:9c:61:c8:4f:a9:10:d3:0c:20:7e:bc:a4:
f5:6f:1d:7e:35:e0:95:e9:23:d9:0c:47:98:8a:bf:0b:01:22:
05:0d:ec:1f:87:e6:b7:62:33:3a:8d:1a:87:5b:c3:49:b1:89:
d9:e5:cb:57:44:41:19:90:82:be:ee:38:b6:07:6c:d7:c0:2d:
cb:b8:95:c4:a1:f5:82:84:7e:f1:5b:88:5d:5c:b2:f3:c6:4f:
b9:55:5e:ab:d1:a3:8b:02:03:b3:53:50:81:11:34:52:41:6f:
43:0d:6d:fc:1c:db:7e:13:18:af:c2:8d:bd:ae:39:7f:5c:18:
a0:b3:cc:5b:45:e1:5d:38:ad:ab:5a:ca:fd:45:ab:54:68:10:
e4:82:b6:98:12:6c:0c:8c:84:16:c1:d9:8a:fb:98:38:ea:01:
b7:65:a1:c2:06:11:d1:d9:f8:bb:36:31:5a:4f:de:c3:6c:9f:
e2:8f:75:db:d7:72:9e:d7:3a:d8:da:5c:d6:a2:f9:38:99:41:
cc:89:88:4c:d8:88:b6:0d:e6:1f:79:51:75:a7:04:de:c4:15:
05:76:dc:bb:23:21:00:b6:13:81:01:69:d1:2b:3e:48:8c:25:
dc:76:8c:19:75:2b:8b:f1:b0:d8:8c:32:d1:e2:02:32:6b:11:
84:b5:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:14 2025 by rpki-client