Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa
File: d1f5c6e0-e080-3525-9b04-a30603f376ef.roa (raw, json)
Hash identifier: RDCGzdBAW9yh9Azath+crirwcaeKcVt9UrUU4n/yDUE=
Subject key identifier: DE:8B:7E:3B:BE:A3:E4:16:0C:3B:2E:49:73:37:94:BC:5E:27:DD:06
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0068362D9F79F6A1A341C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 396586
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:83:62:d9:f7:9f:6a:1a:34:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=935a8afc-0349-45aa-8d59-458c40baceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:44:fd:8f:6a:be:1b:64:3d:4f:f8:68:9c:
4e:4e:e9:ca:bc:3d:ef:89:99:c1:1e:4f:b5:bf:bd:
a9:d7:67:5e:a6:fc:0e:4d:08:2a:ce:8f:bc:85:50:
67:00:c5:d0:7a:b5:c2:49:a3:18:44:36:fd:49:a0:
96:a5:ec:df:9c:02:6a:d1:3a:8d:33:56:a1:17:20:
da:75:eb:9a:49:ee:0a:3e:61:0a:13:77:25:28:80:
ee:22:6b:c2:66:e3:8c:82:2c:3d:11:7c:3e:31:d5:
ee:6f:15:30:7a:49:82:55:00:47:a2:33:7d:b7:fa:
e1:2c:24:bd:6c:6f:e0:e6:bf:49:12:fc:bb:0d:02:
26:cf:77:f2:ba:45:20:64:f4:df:25:98:5a:63:d6:
c1:b6:4b:21:a4:16:a6:09:52:bb:d6:3d:51:d6:7c:
1a:84:9b:c8:40:ed:54:27:78:bf:7d:53:f2:86:2f:
0f:59:d6:28:49:64:ef:a6:bd:7b:02:9d:6c:10:5f:
56:51:1b:10:1e:31:03:17:50:9b:af:cb:df:e9:42:
93:14:4f:2a:5b:5c:4d:49:f8:ee:05:67:c0:67:ce:
d6:49:95:b5:f9:3b:49:96:df:8a:49:66:c9:66:8e:
e2:94:78:e8:c4:3d:15:5c:06:e7:01:ff:a0:be:a5:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:7E:3B:BE:A3:E4:16:0C:3B:2E:49:73:37:94:BC:5E:27:DD:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b0:b3:b1:24:3e:ac:e9:7f:f9:4a:42:ff:2d:11:af:fb:44:
71:99:27:d6:48:66:e0:ce:8d:cb:ea:00:19:56:90:91:76:ab:
f0:ce:95:75:a9:54:bf:ee:a9:6d:99:87:88:3e:ef:2f:27:08:
c9:db:e8:6f:1b:02:ed:13:6a:f3:ab:fc:22:29:64:86:bf:8e:
4a:93:e1:b6:c2:eb:63:1c:3f:9c:e6:f7:d5:13:e5:d5:6c:e1:
7c:38:eb:20:98:d3:0c:66:07:4e:0a:89:d6:64:1e:be:d9:5d:
25:a4:59:7d:4f:31:3b:39:bf:26:26:cc:f5:1c:f1:cd:51:6a:
9e:37:74:6e:41:28:52:e4:a1:39:1d:39:63:e6:08:88:53:42:
86:a2:72:2a:c2:89:5c:e0:bf:db:d4:fd:41:ce:67:39:b9:d5:
57:26:fc:49:fa:d1:fb:69:1c:ff:84:80:90:de:43:80:fd:36:
36:25:b4:dc:38:55:50:df:13:80:3b:46:52:9c:c6:a3:3f:ef:
a2:b6:cf:ae:6e:6f:70:f0:ff:6e:15:65:69:6b:27:b1:7e:f1:
86:a7:12:6b:8c:7f:f4:3a:a9:4f:93:82:da:97:1c:19:f8:97:
ee:3e:5e:6e:06:83:fe:ba:7f:bd:bb:38:5a:88:55:72:23:5e:
e4:74:e7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:55 2025 by rpki-client