Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ac6bc7c2-127e-3308-a13e-4e6463a46fd4.roa
File: ac6bc7c2-127e-3308-a13e-4e6463a46fd4.roa (raw, json)
Hash identifier: K5YR1zE+XgCBHSFD+fQGOycsfSVm9N9uA02q2UywTu8=
Subject key identifier: D0:82:A4:E3:CD:41:0C:40:EB:3C:10:84:51:07:19:86:9F:02:B7:EB
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584944694D916F4DBF3A2C903F80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ac6bc7c2-127e-3308-a13e-4e6463a46fd4.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 137.164.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:4d:91:6f:4d:bf:3a:2c:90:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=a6d61fc2-0a61-401c-96be-96a0a897bc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:41:f2:81:ff:61:0a:99:35:08:fb:aa:1f:
b7:63:9d:2b:5e:b8:d2:be:fd:56:55:a7:4f:07:2d:
e6:63:d6:7e:8e:bc:4f:30:d5:3d:33:c4:86:9d:73:
9d:69:29:e0:e7:4e:ba:ca:49:d4:64:81:8e:d1:d6:
e3:7f:75:90:5c:cc:e0:bf:30:07:4e:9b:b5:91:a9:
2a:26:e7:e8:56:54:0b:17:19:66:7a:bc:26:5c:30:
c2:81:6d:fc:e9:a3:7b:d6:67:b2:34:44:00:02:62:
e9:86:07:fd:31:27:e5:45:6f:7f:9f:96:14:ad:0d:
5d:3f:e2:e6:87:e0:2d:41:26:6f:18:6f:e9:77:6c:
d0:56:82:da:b5:b1:4f:0d:9e:f7:a7:57:8d:9d:ec:
c9:13:dc:4d:23:0e:d2:f2:db:7d:c6:b5:42:85:0f:
e3:77:42:78:fe:0a:f9:f5:3a:50:68:66:75:75:b1:
05:0c:8b:82:aa:c1:95:aa:0d:75:d1:41:e1:61:a5:
2f:82:41:09:a1:d9:a4:5d:7e:8d:bf:b6:25:63:c1:
60:b9:21:1d:6f:02:93:3f:f6:8c:68:cb:e6:92:80:
3a:b0:92:35:2b:90:c9:cd:c4:84:5f:d8:4d:e9:b1:
11:1a:2c:25:1b:9d:92:ea:58:e0:45:23:88:bb:11:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:82:A4:E3:CD:41:0C:40:EB:3C:10:84:51:07:19:86:9F:02:B7:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ac6bc7c2-127e-3308-a13e-4e6463a46fd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:5c:9e:09:f9:24:24:40:56:f0:47:a2:b8:08:8f:7f:0d:20:
ac:38:da:92:d0:70:c0:cd:61:c2:6f:0c:73:58:b3:6f:18:e8:
2e:6d:50:84:47:a3:2d:a0:d5:41:c5:59:7a:8b:05:61:55:f3:
df:09:fb:b9:3e:bf:45:43:b6:70:23:85:52:d1:ad:96:4a:0f:
f6:d8:f2:5f:77:10:87:79:ca:ae:27:7a:93:f3:36:9a:48:6b:
74:6b:0d:6e:da:38:c1:c0:0c:94:9a:95:f8:3d:bb:ed:e8:f5:
15:86:1d:a3:fc:5c:ca:fa:9f:4f:89:36:a0:db:7f:5d:3b:ac:
0f:43:3f:5c:b7:15:b8:45:2b:91:8d:6a:c5:09:0a:fc:ea:64:
6b:93:f3:d1:1c:36:8d:b4:0f:8b:0d:7b:49:88:2d:87:5d:34:
0c:48:f1:6a:eb:63:9b:ea:71:09:94:69:9d:3c:9c:40:9f:f4:
41:3a:2b:e7:c7:d9:80:da:36:13:e2:9e:80:b7:c9:e0:09:b9:
7e:7f:fc:9f:fa:36:e5:ad:10:d9:54:78:5b:dd:bf:cf:17:3c:
7a:58:c5:21:cc:c0:b5:19:f5:0c:ea:f3:3f:31:88:68:8c:56:
3c:93:31:79:d9:a3:6b:bb:76:e4:65:9f:8b:74:0a:15:af:b1:
5c:b2:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:24 2025 by rpki-client