Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa
File: fa6f41c2-ba54-3381-a318-c231d13b19b3.roa (raw, json)
Hash identifier: nYWxHSRHAdo4z/BRaxxRH4kEkWyw0rrNgH6FB5hMzUY=
Subject key identifier: 2E:12:16:90:C5:77:BB:5F:9E:DE:00:00:35:F1:19:8A:61:82:95:B6
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584953C41D478BE505EFA0CABD80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 2152
IP address blocks: 137.164.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1d:47:8b:e5:05:ef:a0:ca:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=2d9e3bcf-57a4-4dc0-8db0-4d34725653aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:53:99:d6:07:5c:4d:1b:70:30:58:40:c2:
21:0e:f6:dd:d2:51:e4:24:1b:de:22:20:79:5e:7a:
3f:03:9d:dd:b1:b0:14:ff:35:55:42:95:f9:dd:c6:
37:5f:09:12:b8:e4:da:3c:84:2f:7c:a6:d8:49:72:
71:c3:21:7b:fe:4b:1f:c5:97:69:d4:84:bb:73:34:
40:dd:40:d6:4f:b3:26:cc:bc:ce:0d:c3:2c:22:c9:
99:30:c0:94:2d:2d:5c:ea:f2:c9:cf:74:ef:57:dc:
15:0b:c4:ee:07:33:77:b0:4a:bd:08:43:eb:08:9e:
0d:43:76:01:d3:5f:74:2f:9d:5a:95:2b:22:4c:aa:
49:98:45:3c:44:fc:6c:1f:36:1b:95:6d:d1:37:55:
e7:33:09:98:f6:5a:b1:a3:43:93:b3:84:a5:ca:2b:
d0:2e:bc:d1:b4:00:4b:4d:23:4e:9a:f9:aa:0f:3b:
3d:f0:b6:1c:a9:bc:7d:f3:09:fd:cd:4e:50:cc:36:
36:64:2c:6f:c1:85:46:22:26:a9:ed:e1:43:ab:98:
e1:04:f9:85:ed:14:e7:8e:53:dd:2d:01:ff:75:22:
c8:2f:7b:53:3c:bb:d6:2e:06:5a:43:ba:55:34:2c:
6b:44:21:ad:a3:57:23:b3:bf:d7:9e:e1:ad:f7:66:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:16:90:C5:77:BB:5F:9E:DE:00:00:35:F1:19:8A:61:82:95:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:03:67:f5:52:f6:9c:eb:b4:5b:b2:9e:26:07:17:e3:f0:07:
44:ff:12:8c:e3:a5:fd:96:16:d1:f7:54:cc:3b:21:17:17:d7:
04:cf:45:ae:4d:09:fc:8d:fc:ba:8c:9e:af:41:d0:fc:a9:e7:
23:1a:2b:f7:bf:30:e0:79:a6:71:59:b8:a7:31:d7:63:0b:91:
b4:93:84:9d:e6:b8:c7:f2:62:d3:8a:19:d9:f7:af:16:57:ab:
13:af:a6:27:cb:e4:07:87:e2:e4:f1:ea:0c:f6:1c:6b:8c:b5:
c9:5a:e6:6c:37:89:35:84:34:c4:42:6a:02:c1:a4:82:1b:84:
f1:35:a4:df:e5:ac:ca:8c:c9:1d:28:f0:2e:cb:14:9f:45:5e:
2b:0c:d7:a1:a1:74:2e:72:c0:ec:9e:a7:64:c3:33:43:5c:55:
f0:a3:85:6d:5c:69:d7:c6:50:18:ae:00:4d:fe:b0:db:ec:5e:
df:c4:dd:1b:06:12:98:8e:73:f4:05:36:31:b1:3e:bf:92:be:
1c:36:96:ba:4c:6b:82:7e:58:d3:da:4d:8e:b6:5b:9a:b6:49:
7d:b2:f8:e7:d3:a8:71:62:34:e3:87:f3:ed:b2:9a:27:38:bb:
2b:c4:26:6f:42:24:e6:30:34:b2:54:f8:f3:3e:69:d5:59:91:
de:5d:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:26 2025 by rpki-client