Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa
File: 5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa (raw, json)
Hash identifier: Y0yJavP0eFhargdZBEjAWUE8JWvV9/f7U7Ov3F/AxKY=
Subject key identifier: 80:0A:2B:1A:EB:A0:09:FA:F8:54:ED:D1:A8:AF:2E:20:21:64:32:56
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F432858487325A95805CA48698ADE6B00
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 2152
IP address blocks: 137.164.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a9:58:05:ca:48:69:8a:de:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=a29fd4fc-11ee-4b0e-8a57-17f8103086fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:8f:73:47:bc:05:25:0e:4d:0b:d2:a2:4b:
44:50:04:2b:6a:81:1d:fe:21:3f:e6:d1:70:02:cf:
79:c0:d5:e3:56:fc:e2:7c:33:47:c5:8d:81:36:77:
c2:4a:28:40:f9:b5:02:bd:4a:19:e1:43:75:93:62:
f3:9f:9d:96:28:83:ec:4d:e4:80:40:03:eb:36:1f:
dd:95:ce:ca:34:23:74:80:7e:b8:12:80:75:c6:93:
ec:f5:f9:0e:08:90:21:ed:56:db:7b:38:ac:18:4a:
06:98:a7:7b:e5:2c:1c:7d:a0:a0:19:1a:86:7a:3f:
98:a1:84:59:8d:27:d8:50:ee:1e:ec:09:44:c1:54:
5e:57:a0:4d:ce:23:de:f1:66:b4:78:b1:98:ad:7a:
e3:ca:d3:06:52:c4:f6:e5:ee:1a:ec:7b:7d:f2:95:
09:04:e9:e0:d5:59:7d:d8:e3:7f:8d:f6:5c:63:c6:
be:66:ad:61:80:e5:e2:c5:5b:b5:d1:8c:61:3e:06:
50:1e:5b:5c:05:81:33:82:f6:3c:0d:8f:23:2f:7f:
ed:7d:32:c1:49:37:32:6a:20:65:27:8b:0d:eb:50:
c1:d3:02:60:22:ec:6d:6a:6d:58:e9:fd:f1:6c:9a:
d4:f7:4c:dc:6b:65:91:5e:f0:77:5a:93:36:47:2d:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0A:2B:1A:EB:A0:09:FA:F8:54:ED:D1:A8:AF:2E:20:21:64:32:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:2f:d3:31:20:26:09:56:0c:5f:d3:7b:18:1e:a7:ab:79:7d:
80:30:a7:5f:be:d0:d7:a8:28:a4:d4:52:50:17:ec:5b:88:b0:
69:ae:ef:fb:f9:11:f1:03:e9:90:e6:84:70:5f:88:e2:14:a8:
31:37:7a:e4:ec:28:d9:f9:45:1a:9e:3a:e7:fb:d7:8e:6b:6d:
ec:7b:5b:13:87:99:2f:ce:12:c2:59:64:28:18:8d:ac:e8:dc:
97:38:78:00:19:2e:a0:cc:58:0c:6c:2e:53:22:21:a2:5e:e5:
fb:49:0e:48:92:69:58:7a:50:86:45:94:e0:fa:dd:5a:41:2b:
38:e0:b3:57:1b:37:8a:e1:94:ce:84:4b:9e:ad:8b:7e:a5:20:
ea:64:f9:c0:91:d9:63:2c:b8:47:56:9d:ce:cf:77:89:eb:52:
25:17:e0:c0:d3:d3:09:b6:d2:21:bd:fb:80:5d:ae:29:d8:2c:
1a:b4:75:dc:4a:6e:ad:d3:83:9a:07:c2:99:31:ba:63:47:60:
6d:75:3c:40:39:00:bf:4e:84:67:88:73:94:41:bc:23:65:33:
3a:19:05:da:ac:03:e2:81:55:8b:87:0d:fa:3b:a8:0b:37:d4:
86:80:6a:c6:80:c6:a1:65:39:62:00:08:25:07:cd:99:fe:2d:
d5:23:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:01 2025 by rpki-client