Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
File: e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa (raw, json)
Hash identifier: buZwiiroxpMNxu+qPIwU4oQlPnmwM9JLct3L3J6Gmdk=
Subject key identifier: B7:5A:D5:5F:D9:F8:11:C2:EA:DD:BC:B7:90:2B:F5:F5:0B:38:C7:B4
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285848451580781A58415C98AEAD00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 164.90.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:80:78:1a:58:41:5c:98:ae:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=ac02ee2b-590a-47cc-8c25-a32c748a1d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:59:05:c1:c3:0d:88:a0:a0:a4:ba:6c:c8:
7c:dc:7c:51:62:6c:e1:21:d0:53:b0:5d:b9:12:b3:
d7:9b:79:f9:7b:55:8b:4a:f6:67:56:ab:de:f5:d7:
65:47:98:8e:0e:26:13:3e:14:1c:28:29:c6:8e:a7:
c1:51:d6:51:cc:92:7e:ed:41:ce:e6:64:b8:23:64:
5c:be:b5:ce:67:e4:be:0d:2e:ba:06:1e:d8:a8:1e:
95:ee:ed:4c:db:a7:9f:92:82:5f:83:fe:5a:24:e1:
7f:36:a6:60:d9:a4:1d:87:0e:17:c8:a1:e8:ce:ee:
f8:63:d2:5d:29:32:94:30:67:2a:b8:2c:ac:3d:40:
72:83:ad:78:8d:ad:af:5c:0a:91:33:d1:ef:e5:7c:
4d:9c:0d:0a:c1:90:f1:4b:f9:e5:4b:db:d1:a0:5a:
16:55:3f:86:08:6c:03:de:d0:2c:e1:da:d3:c8:7a:
7f:9c:55:f4:f5:68:62:df:60:95:69:52:cf:50:a3:
fe:27:db:b8:9b:ab:d8:93:ad:83:20:2b:20:34:73:
96:d7:70:dc:c8:51:d9:1b:40:aa:56:26:92:b1:3f:
f3:96:a0:46:7a:60:67:a3:35:ab:87:7a:dd:dd:61:
a6:bc:ca:86:d8:57:e6:63:1c:9b:d1:69:87:27:16:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:D5:5F:D9:F8:11:C2:EA:DD:BC:B7:90:2B:F5:F5:0B:38:C7:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
164.90.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:40:9b:00:61:cb:ce:f6:ce:d1:90:26:2d:78:02:62:02:a1:
7b:b4:f6:78:5c:81:80:cd:46:45:65:04:51:57:6b:85:90:7c:
a5:1c:e1:c8:d7:43:fb:f3:85:13:2e:fd:fc:4c:9f:7c:fe:39:
2a:1a:f6:0b:5f:0d:06:39:c2:be:2d:6f:cb:c1:40:88:40:dc:
e0:39:c1:34:0b:b4:f6:58:60:1b:77:a5:a5:b1:a2:00:0f:09:
0d:f2:ed:e6:31:dd:cb:1d:78:b2:67:22:be:f4:95:ac:03:b9:
52:79:99:35:9a:af:7c:00:ab:f1:a5:39:57:e6:c3:fa:3c:81:
52:8d:47:b4:62:fe:3b:04:81:7d:58:2b:c0:e0:62:55:2a:49:
02:ca:cd:ad:9a:7a:d2:bb:d2:32:cd:a2:c9:dd:c1:44:b4:38:
67:89:1f:5e:f2:6e:01:81:8c:32:be:02:a3:2d:ea:66:a6:b9:
ad:64:99:de:63:d3:3b:1f:aa:dd:41:d7:ab:aa:d6:73:99:4c:
cd:06:34:91:91:b7:b0:35:43:c5:60:17:57:c9:3b:3c:a1:a5:
4d:e3:a4:49:3b:e2:30:c0:c0:d5:81:1d:2a:1c:8d:36:53:07:
68:4f:b7:a4:28:8e:9e:92:01:c3:8d:7f:30:dc:b4:3e:89:d7:
1c:63:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:32 2025 by rpki-client