Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa
File: df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa (raw, json)
Hash identifier: K17TRvpn5OU2ZJIHtDzdjrcqosr67I12W/wLvjRmo48=
Subject key identifier: 78:1D:AD:39:AE:8D:4C:06:28:BD:17:0E:05:14:EF:1D:55:70:1C:87
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E0067D24B1CE6B3359850424
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 396574
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:7d:24:b1:ce:6b:33:59:85:04:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=f72a47d7-ee11-44c7-8425-b2e540512525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:d2:d9:5b:dd:47:11:6d:3b:93:66:2d:11:
be:59:55:8a:03:56:64:9d:82:b7:96:28:68:bf:e7:
d0:3e:08:8f:e3:9d:5c:2b:e5:5e:ad:60:00:7b:0e:
83:73:54:d5:b9:88:c4:28:08:3b:f2:94:b2:0e:08:
75:96:a3:2e:3c:1e:3c:95:af:6c:ec:7a:c1:34:ff:
68:ce:85:b3:d3:3b:52:ed:0c:bb:88:16:70:70:c1:
a1:9f:35:0e:c7:14:79:06:88:06:67:95:c4:fc:a4:
69:45:63:c5:76:e5:0b:95:08:b8:98:7e:9c:df:f6:
6d:68:a2:d7:a6:f9:60:bb:a1:10:a8:bd:ef:a4:b9:
20:10:01:af:44:31:6b:d4:b6:da:ac:7e:6a:65:04:
09:a3:5c:5d:aa:55:26:51:21:93:45:3c:59:34:7b:
2b:32:01:49:16:70:53:6c:6e:b5:4d:20:13:c7:e8:
5f:15:1b:99:14:fa:fe:77:d5:d2:6a:fb:06:14:42:
a5:c1:66:6d:ca:ab:0d:e4:9c:ff:ee:cd:65:f2:a6:
85:36:f8:da:e3:35:1f:4e:60:06:da:57:6c:5d:ae:
23:52:74:91:47:97:de:28:e0:45:c2:5f:7b:40:8b:
fe:ab:9c:67:fe:16:d9:3f:e2:7c:0f:bd:78:a7:25:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:AD:39:AE:8D:4C:06:28:BD:17:0E:05:14:EF:1D:55:70:1C:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:81:75:43:0b:2c:ce:9e:95:98:0a:7d:54:19:d6:8e:25:e4:
42:54:55:df:6a:f3:3c:c8:43:42:cb:3c:a4:dc:33:24:a8:0d:
af:3d:6b:5b:6c:2b:12:f8:00:f3:67:f4:d4:53:39:82:5f:4d:
f5:b3:1a:57:69:09:d1:f8:1b:91:ff:c1:5a:79:1c:fb:be:dc:
1a:ec:19:99:e8:2c:65:64:0c:f4:f1:34:75:34:7a:05:da:f3:
e0:e9:ff:aa:d3:d8:90:d3:1e:1a:43:77:5b:ab:d8:6c:99:83:
3e:f3:7b:af:6d:54:da:56:25:a0:df:21:66:6c:1b:c1:0a:bd:
81:58:22:1f:d5:ba:89:04:ca:70:46:ef:49:41:bb:70:bb:7e:
d9:ff:f1:12:9b:24:74:48:b9:6b:5e:62:64:dd:c6:4f:30:a5:
c0:cd:19:c8:4a:d6:64:ee:66:a5:11:54:b6:b9:63:38:22:71:
14:f5:5a:15:f7:94:8e:fa:94:86:b0:96:0b:47:c1:63:56:84:
28:7f:e8:04:37:2e:7b:61:28:39:8a:23:96:60:66:b7:b3:f2:
ef:fd:92:aa:f2:34:07:ed:9e:17:f0:a0:37:8e:23:69:7d:6d:
4e:c8:6a:02:4f:4e:c3:5d:11:84:28:47:01:91:e4:c2:30:87:
b1:f7:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:29 2025 by rpki-client