Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa
File: b3423c00-b230-3f93-8431-4c2418fe72ca.roa (raw, json)
Hash identifier: +jPfh/RE8qOVvgEw9sGs12RQGvI+jAyo7a5GqmhtH+0=
Subject key identifier: ED:00:FC:B6:93:8A:C5:F6:A8:66:DF:44:A3:F0:78:27:63:EB:46:68
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0067C5B97FB452D966A7540
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 36620
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:7c:5b:97:fb:45:2d:96:6a:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=2bde5256-6080-483f-941e-ecea7d0db1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:17:53:3a:32:4b:17:36:0b:b3:35:3f:11:
7e:a4:d2:03:1f:f0:61:fe:14:b1:5e:c9:81:ae:40:
30:f5:7b:ed:da:ca:88:d1:93:78:05:4c:a0:48:f0:
87:2c:40:30:fc:1d:03:7c:b7:3b:2a:63:ef:83:d6:
a1:fc:eb:46:c6:ac:7e:d9:79:10:5f:bd:1c:90:d6:
5e:56:5e:28:4d:38:c0:35:f7:dc:95:12:07:5d:17:
60:5a:b8:e4:d9:80:b8:02:cc:31:9d:02:e4:19:ad:
9f:70:18:fe:f2:58:38:2a:be:ee:a2:ca:d4:40:ae:
12:2e:59:cd:89:d4:48:ca:b1:37:95:46:9f:5e:47:
f9:a6:39:1a:04:71:95:f3:35:79:1b:b4:da:c3:c7:
d3:d5:c6:95:30:bc:7e:a2:14:6f:e2:8c:04:22:29:
74:d2:04:e3:01:d6:4c:46:d7:7f:96:51:28:b7:00:
e3:28:6a:d0:ad:ad:8a:c0:3e:b2:96:bb:4b:00:a3:
8a:48:ec:55:e0:b9:9d:9e:ff:23:2b:ad:e5:85:4d:
ab:5b:74:1a:3b:c7:3a:9b:22:4f:9b:49:3b:92:57:
24:c1:a0:cc:6b:2d:15:f7:62:b9:4d:9c:21:4c:e2:
aa:54:f4:06:b3:88:35:b6:6d:ed:4f:a7:1b:e8:d0:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:00:FC:B6:93:8A:C5:F6:A8:66:DF:44:A3:F0:78:27:63:EB:46:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c9:8e:80:b2:33:f6:4b:d3:b7:4f:e4:52:36:72:6f:e5:ed:
3d:9f:a9:97:d0:d2:c5:0d:3a:cb:64:f0:d1:b4:2f:c0:ba:37:
7d:a3:e5:25:20:cd:5d:1b:c7:8b:4e:c7:60:47:45:f6:58:9c:
22:43:d6:09:fe:47:6f:65:98:6a:59:c4:54:d6:4b:14:c1:cd:
6d:89:66:bb:1b:d2:69:73:11:33:ca:b0:96:71:34:4e:e2:69:
54:a4:04:a2:f0:37:1e:b4:aa:4d:d9:6d:4a:64:e6:01:ff:1e:
9a:e0:86:46:2f:4b:d8:ef:05:f6:9f:db:a2:65:40:d7:7e:01:
f6:b3:d5:01:4d:08:cf:73:4f:9a:22:e0:07:8f:93:52:01:2b:
84:1b:c3:d9:7b:90:31:4c:82:9c:02:26:84:33:ef:b9:64:fa:
f3:c4:f3:ca:42:56:22:c9:52:8d:10:66:25:11:28:b9:59:b1:
7b:db:be:a1:54:fb:ed:36:44:7b:69:62:0e:27:85:b8:23:86:
5d:62:89:8e:54:a0:ec:fe:85:43:d0:87:30:85:75:07:86:d5:
70:e5:7c:62:1b:44:dc:95:38:d5:dc:26:4b:09:ce:0d:c8:5c:
82:ee:33:85:a0:b9:35:88:11:09:b6:38:49:c8:af:19:0c:7c:
d6:77:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:34 2025 by rpki-client