Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa
File: 9641d997-69b0-376f-a225-6c0526f238da.roa (raw, json)
Hash identifier: FrtOeoVM8NTTvnx+xbLORHx48RCMQ9C8ptcBhpyu/qk=
Subject key identifier: 63:E6:53:A7:33:F7:94:1A:FD:2D:4F:32:12:76:FD:19:0A:5D:EE:F1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0068076BC1E094FE1077280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 396546
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:80:76:bc:1e:09:4f:e1:07:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=2d7b2552-d464-4d24-9b1e-682daca02886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:d0:10:a7:6e:5d:c9:5a:5f:10:b8:cf:69:
64:a8:5b:31:99:88:66:b0:5b:25:b0:35:89:a3:dc:
39:a3:96:67:48:58:ad:9d:99:fd:fc:a0:83:d3:7e:
0f:23:9c:06:fb:0a:7d:72:8c:7f:4e:a1:2a:7f:91:
f6:8c:16:42:63:05:f9:3c:24:73:54:02:bf:7d:f9:
b2:82:60:29:0c:31:ad:41:2a:bd:05:d6:32:bf:da:
36:3f:d6:29:2d:8e:4b:ac:04:24:7e:a7:4e:ed:be:
28:fb:b0:6d:47:fa:36:d0:00:ad:a3:af:6b:4d:1c:
92:d7:97:10:aa:c1:14:f9:47:0b:86:fb:32:48:96:
81:d3:6e:ac:73:50:82:f6:f9:f3:d8:a1:16:74:24:
49:3a:bd:e6:af:a9:6f:0f:f5:50:06:9b:62:d0:20:
90:88:93:2f:e2:ee:fd:8e:86:88:18:f7:6c:18:f8:
a4:9f:35:00:c9:ca:dc:f3:b4:19:3e:f0:aa:bc:a4:
01:7c:5f:19:b4:9c:38:10:00:cf:19:51:38:7c:1f:
da:32:ff:4e:97:a8:f3:4d:da:fa:d8:b4:ed:53:ce:
61:13:12:00:7f:e3:d9:4b:50:3c:1e:b0:71:a0:3e:
e6:f7:be:88:e3:12:db:7c:37:89:f6:da:d0:4e:5a:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:53:A7:33:F7:94:1A:FD:2D:4F:32:12:76:FD:19:0A:5D:EE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:24:5e:a0:03:37:b0:3f:cf:05:07:eb:ad:46:d1:08:bd:71:
a6:da:5d:f3:f2:86:f2:4e:95:aa:0c:86:39:68:9b:56:32:a1:
05:6b:0e:f5:15:13:75:d4:df:28:3d:48:a9:23:76:9b:2d:0e:
73:14:e6:e2:80:9f:e6:b6:6d:10:f1:4f:d3:06:9f:a1:bb:7a:
d1:73:ea:b9:3d:b2:4d:52:ac:0f:96:f6:06:9f:9a:7a:dc:ed:
82:33:38:d6:86:cf:7d:a4:e6:73:36:f3:61:7f:55:f3:38:d3:
19:03:f9:bc:a3:a2:b4:3a:4c:e1:0f:6e:aa:b8:5e:6e:0b:e9:
90:23:c8:67:35:24:c0:11:62:7b:6c:fa:b6:f7:7b:cd:6b:03:
03:65:4c:62:52:fb:1c:a9:91:42:80:b7:07:a6:70:71:a4:61:
59:14:99:6f:ed:06:d5:c3:3b:82:bd:52:cd:51:df:9c:bc:d5:
bc:fa:11:f4:db:e1:90:4e:3f:ea:63:eb:07:7a:75:7f:f7:9b:
4a:f6:90:7b:4d:a7:2d:f3:8f:b4:54:64:7c:5d:53:7d:5a:78:
8f:e6:8b:9c:56:a6:39:a1:cf:16:ed:3e:50:de:97:c8:62:8d:
d1:6e:7c:44:4d:aa:fb:0a:c0:ed:3d:d2:2a:02:14:a6:af:02:
d0:d1:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:37 2025 by rpki-client