Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa
File: fa6f41c2-ba54-3381-a318-c231d13b19b3.roa (raw, json)
Hash identifier: OWR9TTFuy6h9+NrHWT70WCUTBfZM4Q1fUbmGe6S3LA8=
Subject key identifier: 91:6F:B7:8F:3C:D0:4B:F4:1D:FA:A1:DB:F2:AB:F6:C5:FE:68:B2:47
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F432858487325A96AFC64F71A4DAE1F80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 2152
IP address blocks: 137.164.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a9:6a:fc:64:f7:1a:4d:ae:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=6c323b51-ddb8-4041-9efe-ea97391e0b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:32:64:56:fd:da:ef:e0:8a:cc:ac:86:01:
e1:6c:4a:06:9f:d1:70:83:cc:9e:16:a4:1d:3a:42:
cd:3c:5a:b5:1f:4b:a2:ee:d9:b4:3b:5d:27:d9:a7:
9e:45:df:10:0c:36:75:b3:b3:f2:06:7c:3a:12:02:
88:ed:97:18:c3:62:2e:c4:5b:f0:8f:76:b4:21:03:
a7:36:67:b1:4c:68:78:bb:83:7d:fa:0c:3b:b0:49:
de:d0:66:00:9b:b8:8d:2c:6a:55:cd:cd:1d:82:7f:
57:da:f3:53:06:ab:25:ac:11:d7:36:d8:9c:24:05:
da:78:ac:f7:19:1b:66:1d:e9:46:a9:ab:a5:90:4b:
e0:35:a0:f4:4a:9f:50:e4:12:d9:dd:92:ef:a4:72:
92:dc:2f:e3:a7:a2:a5:e4:4b:44:2b:a7:54:cc:0b:
47:af:ce:da:ba:e3:cc:83:0f:46:5c:5f:c4:93:52:
70:04:0d:f2:46:98:8f:c6:2a:19:22:cd:bc:90:c5:
11:c6:3e:53:9f:53:ad:39:24:19:80:fc:7e:b5:7c:
30:d2:cc:a3:d9:e1:aa:7e:ea:ad:48:ca:3e:10:98:
ab:22:8d:ea:7a:5b:7a:67:e9:b3:70:f3:79:93:a6:
5d:b5:ee:79:3d:a6:4c:50:5e:55:7f:8c:a6:27:e5:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:B7:8F:3C:D0:4B:F4:1D:FA:A1:DB:F2:AB:F6:C5:FE:68:B2:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
137.164.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:04:78:d4:1b:c4:a9:57:69:03:22:61:d6:bb:65:e9:67:9b:
2a:b6:a3:96:03:05:b7:06:23:cf:18:b4:17:f7:12:52:c0:02:
55:93:89:8a:81:f1:4e:78:73:49:a5:22:10:2f:15:0e:c7:ed:
c4:8a:86:b6:e2:28:83:bb:d6:55:39:84:1c:3e:96:ce:90:6b:
dc:46:87:ee:9c:9c:a9:14:48:19:55:47:11:b7:09:b1:87:c5:
35:0c:33:f6:4b:76:9f:aa:2a:29:54:fd:cd:f0:c5:18:82:5d:
80:8b:82:65:53:f0:82:18:35:4c:2f:fc:9c:96:0e:05:5b:09:
55:5c:68:c2:58:20:a3:5b:60:4b:4d:33:77:51:30:56:b6:73:
9b:8b:61:53:8b:cd:dc:38:44:24:a5:77:3e:08:35:47:73:9f:
ee:b9:b7:29:da:13:cd:fa:89:e2:37:78:56:5b:39:a9:b0:6f:
24:52:9c:b4:46:89:b4:bc:11:42:a6:7d:c4:c4:29:23:1b:c8:
40:24:b3:41:40:41:02:d8:0a:f6:35:90:db:fe:22:d9:4e:41:
63:41:e0:bc:b3:00:1d:bc:6f:41:0f:80:db:2f:77:c8:60:91:
5a:b7:a6:9d:49:c9:82:e8:2a:97:96:89:fe:7c:1e:de:ae:1f:
b8:62:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:44 2025 by rpki-client