Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa
File: c5521b7b-5f32-3762-9366-9c7f948e9eac.roa (raw, json)
Hash identifier: +cFPigmw90IeENyr4DVYOaEx9DXNs/Mx4jU+LFpyoxk=
Subject key identifier: 06:5C:A4:2D:13:D5:AB:3F:18:9B:02:5F:3A:0D:A0:67:0D:42:D5:E5
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E00678EE77F5FFC6B745DD20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 36627
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:78:ee:77:f5:ff:c6:b7:45:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=1edc5913-c3f0-481d-9349-37d2a7fbaa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:58:cf:ac:bb:e3:3a:54:31:ef:e8:f2:55:
24:c4:f7:28:4d:03:03:6d:b5:0b:60:06:47:18:d7:
81:32:99:e0:16:ca:e0:90:cd:17:69:53:8a:41:03:
e0:19:57:89:e9:3a:81:7c:f8:eb:e6:42:0e:97:3f:
15:dd:41:17:9b:ce:a0:6d:a3:0c:85:06:3c:a4:40:
d0:83:6f:03:63:97:ee:3d:63:9f:29:86:ce:cc:3a:
cd:f3:7f:db:89:1d:e1:50:de:ed:e1:4d:43:11:3a:
38:f8:5f:10:77:f6:a4:b0:0b:da:bb:8d:29:22:51:
4f:d8:6e:13:df:ea:87:c8:76:37:48:9c:a9:3d:e8:
b9:5c:bb:7c:b3:c8:19:7f:56:80:0c:05:f6:6c:53:
da:c2:f8:1c:92:c5:7b:5c:9b:cd:31:4b:62:28:ea:
c5:6b:a0:8c:f7:05:34:46:89:fb:34:2e:48:15:9d:
b6:ab:19:d5:fd:e3:d7:46:09:12:79:f2:aa:1a:d8:
37:28:64:32:de:c4:e6:59:53:6f:b5:cd:2e:de:11:
95:a6:68:84:25:ac:61:4f:a2:54:18:47:15:42:a6:
d7:38:3e:69:d6:8a:9a:fc:5e:75:58:fb:5e:d9:82:
56:04:a5:49:b7:6d:03:7a:d4:5b:00:69:bf:d9:1e:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5C:A4:2D:13:D5:AB:3F:18:9B:02:5F:3A:0D:A0:67:0D:42:D5:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a5:a9:2e:2c:35:5d:29:e7:0e:93:fc:f0:0b:44:76:6d:31:
30:19:78:4b:db:0d:4f:62:20:08:96:cc:25:ad:3f:42:1e:bb:
b4:90:cf:30:df:af:16:cd:36:63:b7:85:37:30:22:07:05:cf:
7e:2f:28:37:41:e2:66:a4:f8:c2:1c:08:e0:51:fb:1f:41:fa:
61:86:c2:33:a0:f1:34:9b:55:21:db:74:fe:65:00:ad:3e:e3:
c7:28:83:a1:53:d8:75:be:28:7e:5a:f2:ae:55:3b:a5:81:a1:
6b:81:18:33:8e:9e:0d:9e:a3:28:53:cf:d1:55:75:de:6c:19:
28:48:7a:fa:db:40:40:cd:44:57:4e:01:83:d6:5f:3f:43:08:
59:d4:e2:6c:63:78:f5:6a:78:05:e2:f6:1a:52:da:4b:eb:cf:
43:f9:17:11:69:84:eb:d1:c0:cb:50:ff:7e:ef:8d:d3:bc:66:
80:7f:d7:60:11:db:33:2e:80:bf:72:33:7d:7b:51:56:a7:9f:
89:2a:a1:8e:14:e1:d4:7a:bc:a0:a1:1a:c3:1d:84:b7:eb:69:
82:c7:70:68:95:f4:52:54:e8:c1:16:b5:7e:9d:ec:1e:a3:31:
fd:87:bc:85:a6:8b:1d:27:7b:33:39:4a:6e:61:05:3f:10:6d:
83:7f:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:43 2025 by rpki-client