Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa
File: aea63acb-037d-3e18-9b17-e44e4031484e.roa (raw, json)
Hash identifier: qnXSgE2xt35ffX1HovCICn0GBQbHO0WkaUVEJ+2c9kM=
Subject key identifier: 2E:D6:93:B5:B5:55:A1:F1:65:2D:CF:19:C8:95:2A:F3:3B:25:D7:7A
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F43285848E9CBE3211A9B4CCFF1A7229C
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 2152
IP address blocks: 137.164.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e3:21:1a:9b:4c:cf:f1:a7:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=fe1d4cc8-8b22-4e23-bbfe-daf682544264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:19:92:32:a2:96:68:a2:70:54:01:16:f4:
41:f9:74:36:9f:81:3d:d9:3b:d7:b3:7e:24:1f:83:
3b:cc:16:ab:90:89:a0:dc:df:d1:3b:2a:1f:e7:3d:
bd:7e:37:d4:08:02:d9:bc:dc:46:d8:9e:f3:8c:4f:
97:65:f3:eb:86:02:3a:b5:e7:86:23:ba:61:bb:4a:
cd:62:71:7f:14:ef:75:9c:43:63:09:f1:b4:d5:de:
96:6f:22:fe:cc:b6:5e:ca:86:0d:7b:0b:57:76:0e:
08:94:c0:9d:20:79:78:33:c8:c3:95:39:37:31:a4:
4e:a6:40:f4:da:18:ae:05:e6:74:45:00:dd:9c:b1:
7e:7d:8a:66:c7:f5:90:a2:1a:4b:40:b7:14:23:c0:
e7:36:e8:09:7c:8b:95:56:0d:eb:a9:18:66:79:38:
7a:c9:02:15:1c:5a:21:17:f1:b5:ba:5f:8f:68:88:
7b:84:94:29:57:20:05:f3:5c:57:74:97:97:6d:0b:
87:56:84:f1:75:2e:d1:7f:86:d9:07:84:6e:62:cb:
f0:7a:23:b7:28:1b:ce:ac:42:13:21:66:30:55:de:
df:09:3c:66:91:b0:99:7d:6a:bc:06:60:3e:a9:20:
9b:c9:aa:d0:39:c9:0d:01:bb:09:bf:73:c6:7d:90:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:93:B5:B5:55:A1:F1:65:2D:CF:19:C8:95:2A:F3:3B:25:D7:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ab:48:9b:f7:74:0f:19:02:5b:8a:34:03:06:9d:2a:b5:e6:
f6:9f:23:f6:e9:cb:89:56:5c:31:3f:88:91:03:39:b7:33:15:
16:60:06:91:be:2f:3f:83:36:80:04:41:a7:4a:a8:cf:6d:d7:
cf:8c:ab:6b:88:67:59:0d:64:ba:3f:ab:17:13:45:73:2d:58:
1c:45:89:10:ae:ee:00:94:b9:4e:33:95:2a:a1:b2:96:08:af:
e5:3a:3a:e8:72:49:8f:60:be:a4:0a:64:7f:ad:a2:e8:7e:4a:
43:4e:84:8c:ac:78:1b:cd:2c:1d:25:e9:e4:4b:9f:48:9d:09:
b7:6b:c8:e9:e8:49:58:78:c3:71:7a:20:dc:78:e4:b3:ed:f5:
58:48:f3:82:8b:8c:7d:dd:db:84:72:b3:cf:2b:51:bd:66:d7:
7e:2a:48:c6:65:1c:cc:96:21:34:34:c3:1e:be:d1:0c:47:6a:
82:25:71:1b:61:9c:c4:c4:8d:e8:29:f5:b6:f2:0f:b2:76:3e:
9f:66:55:37:c4:7c:3f:61:dc:b8:62:37:77:3b:2b:16:28:4f:
24:07:d5:ce:69:6e:f2:b7:10:1c:af:52:fb:f9:04:12:ce:e5:
cc:95:79:6a:cc:fc:c8:02:49:2a:4f:10:c4:59:43:76:14:7b:
e8:48:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:11 2025 by rpki-client