Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa
File: 03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa (raw, json)
Hash identifier: BmzGMX0irAFyztoO4sfubc4jVVkUXU9yb9UrOQ9pTK8=
Subject key identifier: 30:58:B9:C1:E2:BF:3E:05:50:A6:3F:40:60:3C:32:A0:0D:AE:AE:94
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483B4FFBA623FF25BD069D92C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 130.137.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:fb:a6:23:ff:25:bd:06:9d:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=c2e1030d-1b1e-4ef8-8ee5-8988ee19f982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:d6:2d:d7:09:3c:c5:d8:14:1b:e5:a7:b4:
7e:0c:bf:4c:26:6a:53:39:7e:f2:db:ef:cb:e1:da:
2f:4c:ea:b8:00:86:b2:91:56:cb:73:83:7b:8f:30:
5f:22:f3:79:d1:52:29:ad:63:ad:48:5b:f0:d0:de:
f9:96:b0:4d:39:02:f3:35:c3:0d:77:69:36:5b:da:
49:63:e9:1f:00:c0:3a:29:95:70:d9:83:9a:7e:c4:
9b:80:35:9b:4a:47:9e:55:7b:95:f7:88:d3:6d:7a:
8b:9c:d1:2c:d6:3a:d2:df:ed:6b:1c:35:ce:86:e3:
c6:58:5b:39:a8:46:27:29:c0:33:be:9e:18:9b:08:
f7:a9:1f:70:ad:fb:0c:06:b0:29:35:99:d0:d1:c1:
22:dd:8b:97:bf:38:43:81:4c:7a:06:c8:69:27:23:
b0:20:16:a2:f4:2f:93:94:33:82:d4:0f:4d:11:06:
ef:37:4d:88:e0:dc:c5:92:b4:33:2b:ee:2a:fe:cb:
2b:04:5a:55:a4:f2:0e:3a:23:d6:40:ba:7f:f7:fb:
72:4a:59:5e:1d:b2:ca:7a:a9:8b:d6:90:19:31:57:
67:f2:38:94:75:e8:bf:f8:67:0c:b0:fe:0c:65:c5:
17:3f:4c:cf:75:2d:4b:df:2d:61:37:a4:61:0c:1a:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:B9:C1:E2:BF:3E:05:50:A6:3F:40:60:3C:32:A0:0D:AE:AE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/03a0d8cd-e353-358f-bd4f-fefa9f24b249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ed:81:65:57:12:7f:33:70:26:d4:b5:24:e6:6d:38:3f:e9:
3d:8d:9a:9e:e4:3e:79:fc:0a:03:fe:09:45:04:0e:18:88:74:
3e:67:05:1e:68:05:b2:b2:2b:f7:a4:60:7b:06:86:1b:55:50:
22:46:0e:f3:9e:d0:34:fa:e8:76:f5:1e:e3:eb:6e:0f:9a:e4:
1b:84:a5:92:56:ef:ec:8b:4d:fa:36:38:e1:5e:24:03:dc:86:
4a:e0:75:fd:cc:d1:2e:39:66:d6:44:66:96:85:2f:b0:c1:19:
fc:0d:49:9a:ae:c8:35:6e:c7:20:ee:3a:6b:32:52:2d:ae:65:
5c:88:bc:b8:d0:d0:16:0b:6a:3c:97:70:fd:1e:80:1b:f4:22:
9c:6c:79:e4:76:63:3d:76:27:e8:cd:b8:e3:7b:bb:4a:86:ac:
54:2b:6a:52:d6:6d:2b:fb:23:df:1e:29:ed:4a:8d:24:29:cb:
c3:40:79:0c:a6:ff:75:94:6c:90:d7:16:ea:83:19:7b:82:56:
c6:32:72:ab:e9:69:fe:63:49:6d:05:dd:ef:b4:f2:e1:81:8d:
bc:52:1f:ac:9e:5e:3d:77:4e:f8:78:7e:93:be:ee:86:a8:1f:
0e:20:a8:60:d8:84:35:73:ba:65:6b:cd:47:ce:00:aa:61:45:
be:0c:f9:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/umI/8lvQadksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
YzJlMTAzMGQtMWIxZS00ZWY4LThlZTUtODk4OGVlMTlmOTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOrWLdcJPMXYFBvlp7R+DL9MJmpTOX7y2+/L
4dovTOq4AIaykVbLc4N7jzBfIvN50VIprWOtSFvw0N75lrBNOQLzNcMNd2k2W9pJ
Y+kfAMA6KZVw2YOafsSbgDWbSkeeVXuV94jTbXqLnNEs1jrS3+1rHDXOhuPGWFs5
qEYnKcAzvp4Ymwj3qR9wrfsMBrApNZnQ0cEi3YuXvzhDgUx6BshpJyOwIBai9C+T
lDOC1A9NEQbvN02I4NzFkrQzK+4q/ssrBFpVpPIOOiPWQLp/9/tySlleHbLKeqmL
1pAZMVdn8jiUdei/+GcMsP4MZcUXP0zPdS1L3y1hN6RhDBp5pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBYucHivz4FUKY/QGA8MqANrq6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDNhMGQ4Y2QtZTM1My0z
NThmLWJkNGYtZmVmYTlmMjRiMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTtgWVXEn8zcCbUtSTmbTg/6T2Nmp7kPnn8CgP+CUUEDhiIdD5nBR5o
BbKyK/ekYHsGhhtVUCJGDvOe0DT66Hb1HuPrbg+a5BuEpZJW7+yLTfo2OOFeJAPc
hkrgdf3M0S45ZtZEZpaFL7DBGfwNSZquyDVuxyDuOmsyUi2uZVyIvLjQ0BYLajyX
cP0egBv0IpxseeR2Yz12J+jNuON7u0qGrFQralLWbSv7I98eKe1KjSQpy8NAeQym
/3WUbJDXFuqDGXuCVsYycqvpaf5jSW0F3e+08uGBjbxSH6yeXj13Tvh4fpO+7oao
Hw4gqGDYhDVzumVrzUfOAKphRb4M+a0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:24 2025 by rpki-client