Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
File: 0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json)
Hash identifier: cAOrynPaKWRTnsUeIjxXmjbJw41yMBWqxZTGKIlOznA=
Subject key identifier: D5:CF:E1:04:97:EC:5A:5F:6A:35:2B:6F:1E:91:70:83:BC:9C:6A:C2
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F432858487325A91BD74A7E0A75792880
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 2153
IP address blocks: 137.164.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a9:1b:d7:4a:7e:0a:75:79:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=dd9025b5-6d50-435f-88ec-b9e7e7ab49ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:0b:be:90:be:db:ef:d8:82:c8:7b:c7:9b:
5d:82:c1:c8:d6:c4:5c:07:a6:22:07:c8:cf:ea:09:
9f:44:25:a8:40:0c:6a:13:01:cf:5d:b7:51:e8:27:
80:a4:cb:12:2d:b2:1b:9d:e5:51:14:d5:84:49:07:
9d:fc:0b:c3:ed:7f:14:c1:8a:e3:5a:74:c2:a4:34:
cd:be:b8:d8:f0:f9:e9:a7:f5:46:2e:b9:2a:9a:d2:
fa:81:0d:a1:41:50:18:51:07:ec:a8:27:d6:65:13:
46:30:15:59:98:7b:e4:dc:7a:08:2a:12:bb:6a:22:
09:31:3f:2a:2b:d1:55:25:b1:87:37:39:5a:53:48:
4d:29:1e:9c:68:b1:9c:16:53:42:cd:82:3e:4a:03:
b5:19:54:06:18:53:4f:66:d4:17:d1:63:c7:01:83:
29:37:71:15:fb:9a:f8:d5:52:1e:f8:21:eb:04:d7:
b7:cc:18:89:5d:75:b2:3a:6e:9c:fe:41:78:2f:75:
91:1c:ae:bd:a8:5a:89:d5:5f:ed:6d:52:ff:a9:a7:
e4:09:87:7e:ed:1e:8e:24:f9:4f:ab:34:4f:25:c6:
26:28:7c:73:a7:91:5e:38:0e:24:ba:49:c2:f6:fa:
42:46:aa:28:79:11:7f:0a:94:d2:76:5e:41:4b:fc:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:E1:04:97:EC:5A:5F:6A:35:2B:6F:1E:91:70:83:BC:9C:6A:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:77:57:b4:d8:4e:ee:48:a3:35:36:54:33:1a:94:10:09:8e:
da:b9:86:40:2c:60:1c:02:8c:80:2e:dd:d0:30:4d:bd:dd:b9:
d5:33:1e:f7:f3:4e:02:53:9e:1e:28:9c:f4:b5:c0:d6:0a:84:
ff:c1:7e:a5:ce:ec:dd:98:00:3a:e9:23:4f:a3:93:bf:4f:97:
6a:99:a3:68:29:62:01:89:b1:37:05:56:b7:6c:a8:77:a6:6f:
9d:f7:ad:32:1b:14:70:50:67:57:da:e3:b8:4c:e2:8f:a3:8a:
28:b7:0d:90:11:61:47:2b:cb:64:8a:c0:62:f8:39:b5:e2:ca:
23:69:cd:2e:a0:3e:6e:86:65:3c:05:c5:bc:29:37:44:47:36:
65:fc:a6:4c:7d:40:12:1a:06:02:97:5e:4e:48:64:e2:0e:a6:
3e:6d:8a:0f:52:d1:6f:09:c4:2a:17:f1:ee:00:ce:87:f8:a4:
3d:f2:8c:52:b6:43:29:42:b8:80:43:df:e1:bc:c3:54:9e:e5:
55:de:d6:0b:fa:e4:60:89:c1:2f:6d:8b:5f:f0:fb:dd:42:f3:
38:f6:14:c6:cc:2a:71:fb:92:7c:19:53:3b:4a:65:a9:1f:0c:
f3:28:c1:71:3f:dd:b8:fc:fe:82:90:e1:da:7b:dd:d6:b3:ce:
90:05:3a:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJakb10p+CnV5KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
ZGQ5MDI1YjUtNmQ1MC00MzVmLTg4ZWMtYjllN2U3YWI0OWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UsLvpC+2+/Ygsh7x5tdgsHI1sRcB6YiB8jP
6gmfRCWoQAxqEwHPXbdR6CeApMsSLbIbneVRFNWESQed/AvD7X8UwYrjWnTCpDTN
vrjY8Pnpp/VGLrkqmtL6gQ2hQVAYUQfsqCfWZRNGMBVZmHvk3HoIKhK7aiIJMT8q
K9FVJbGHNzlaU0hNKR6caLGcFlNCzYI+SgO1GVQGGFNPZtQX0WPHAYMpN3EV+5r4
1VIe+CHrBNe3zBiJXXWyOm6c/kF4L3WRHK69qFqJ1V/tbVL/qafkCYd+7R6OJPlP
qzRPJcYmKHxzp5FeOA4kuknC9vpCRqooeRF/CpTSdl5BS/xwYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXP4QSX7FpfajUrbx6RcIO8nGrCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMGM5MjQwMjYtMTJkMS0z
ZTc5LWEzY2UtZTUxZjcxYTNhZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALZ3V7TYTu5IozU2VDMalBAJjtq5hkAsYBwCjIAu3dAwTb3dudUzHvfz
TgJTnh4onPS1wNYKhP/BfqXO7N2YADrpI0+jk79Pl2qZo2gpYgGJsTcFVrdsqHem
b533rTIbFHBQZ1fa47hM4o+jiii3DZARYUcry2SKwGL4ObXiyiNpzS6gPm6GZTwF
xbwpN0RHNmX8pkx9QBIaBgKXXk5IZOIOpj5tig9S0W8JxCoX8e4Azof4pD3yjFK2
QylCuIBD3+G8w1Se5VXe1gv65GCJwS9ti1/w+91C8zj2FMbMKnH7knwZUztKZakf
DPMowXE/3bj8/oKQ4dp73dazzpAFOgw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:02 2025 by rpki-client