Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa
File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json)
Hash identifier: 08nWMQBPbkk962l0Lb8M/gOfgaDwWZPea1JKtUPxyYI=
Subject key identifier: 7D:14:8C:8D:D7:E6:F7:D5:8E:B6:44:44:E4:0C:18:96:EF:3C:D8:C1
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F43285847E4C4AE3750B825F0ECAECB00
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa
Signing time: Sat 16 Nov 2024 02:00:28 +0000
ROA not before: Sat 16 Nov 2024 02:00:28 +0000
ROA not after: Fri 14 Feb 2025 02:00:28 +0000
asID: 2153
IP address blocks: 137.164.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e4:c4:ae:37:50:b8:25:f0:ec:ae:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Nov 16 02:00:28 2024 GMT
Not After : Feb 14 02:00:28 2025 GMT
Subject: CN=7cb8d411-83dd-440c-91ab-4c9c8bdc10f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:61:b0:72:c1:66:63:ee:4d:03:2c:b8:89:
a5:dc:e6:52:3a:4c:0f:7b:5c:2b:57:9f:b8:44:a2:
e9:9a:ae:f2:3d:1d:c7:17:90:3e:fd:75:76:68:e4:
2c:c6:a4:51:f9:06:7a:8c:1d:ae:10:cc:14:10:46:
4c:4b:c1:dd:94:26:1f:a1:90:d0:46:03:49:9f:a5:
56:b4:04:8a:63:cf:b7:1e:cc:93:be:38:67:09:d6:
24:8f:57:a9:ab:ea:8f:9a:fe:08:c0:6f:ad:ff:da:
72:e3:92:79:b3:d9:03:b0:4c:d4:4e:17:d9:a0:b2:
97:c4:f2:6d:ba:46:57:b0:e6:20:b9:c5:2d:ab:0f:
33:94:6d:fd:83:e2:55:00:8e:39:34:3a:39:d0:54:
62:42:89:53:28:2c:fc:fe:10:3d:93:ea:ea:ee:9c:
19:ce:2e:38:a7:fd:d6:75:3b:3d:bb:af:55:7a:bb:
ce:40:3e:4c:bb:11:03:c7:2b:e1:0c:1e:a8:4a:99:
06:5e:73:21:fe:cb:e5:d0:d1:6a:26:5c:24:d4:60:
86:55:d9:17:97:3d:6e:af:a4:3e:fb:91:c1:4b:00:
d7:65:70:66:e4:b4:f7:14:e7:51:7a:de:b2:5f:ec:
fe:45:31:43:3c:93:73:ae:f1:ee:3d:06:57:47:98:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:8C:8D:D7:E6:F7:D5:8E:B6:44:44:E4:0C:18:96:EF:3C:D8:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:40:3c:32:68:2c:9d:34:cc:a6:c7:89:62:bb:38:c2:d1:38:
db:fb:7e:e5:6f:33:0d:25:09:11:47:5f:b7:53:08:13:38:00:
c1:6d:cd:0e:6e:74:4d:82:a4:d9:cb:c9:8d:06:6e:f1:a6:13:
5c:b8:6e:fa:df:98:51:24:30:7f:5e:fa:06:d8:44:ee:c6:71:
94:16:31:16:4e:63:d8:30:69:89:b3:55:20:89:c9:1d:46:c0:
a0:0a:33:da:50:42:73:97:f1:5d:8e:64:c1:d9:fb:4d:d5:7a:
cd:50:f9:f1:77:d2:e1:b1:4e:f5:2c:b8:38:ca:8c:35:74:65:
70:c4:c2:58:47:47:fb:8b:32:f2:0a:d5:68:c8:4e:2b:bb:fc:
0a:c9:db:28:93:d7:11:23:3c:53:7a:b3:63:a1:90:03:80:58:
be:a2:d4:cc:3b:ea:60:fe:95:ad:48:d1:ca:af:dd:19:63:24:
91:20:5a:f7:2a:71:61:57:ff:0d:c0:48:70:80:6b:b9:f5:ac:
a8:c3:e9:1f:ed:72:e3:c5:7b:cf:08:dd:a0:1f:9f:93:0e:18:
ae:a8:53:73:71:17:34:37:15:ec:7d:f3:7f:37:e8:2c:80:c6:
48:5d:5d:fe:42:3c:5e:e9:ad:03:cc:82:70:b3:6f:e6:06:c3:
4c:f2:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:05 2025 by rpki-client