Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/09f936fc-95a0-3018-bf28-0440ff7d50e5.roa
File: 09f936fc-95a0-3018-bf28-0440ff7d50e5.roa (raw, json)
Hash identifier: 6nh7ZuFk37VMT/Nndmj2YiHx2//imKPvt4vhRzbGReI=
Subject key identifier: D4:A0:04:A7:48:D7:A7:0E:AA:C9:07:61:70:0A:DD:56:11:6F:B6:4B
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848388551E67F9BDAEF8AA01288
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/09f936fc-95a0-3018-bf28-0440ff7d50e5.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:51:e6:7f:9b:da:ef:8a:a0:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=1e995d91-d7aa-48d0-a8fd-5a7bbc5622fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:41:d1:ef:1d:a0:3b:4c:58:8c:dc:b4:ca:
c4:27:6d:6a:19:90:de:f6:f4:f2:2b:cd:88:9d:7d:
ee:c3:f3:6f:a6:83:bb:7a:e9:65:bd:d7:db:7f:3e:
d5:ca:cc:f5:1c:df:32:49:47:87:c4:f5:04:61:45:
66:39:87:ff:00:de:73:5b:1b:ea:cb:cf:c8:14:75:
36:52:63:be:0c:7e:9b:ca:9d:b1:ad:e6:d0:5a:30:
b4:e8:d1:0d:d2:89:73:d1:0a:80:36:a8:73:e4:00:
b8:41:54:fc:c7:72:23:70:3d:fe:a0:83:3e:ee:90:
e9:25:ae:23:0b:54:98:8c:e4:e5:5b:cb:7c:f0:d6:
c1:6f:13:e5:80:b3:db:98:fd:25:fe:66:91:46:eb:
b0:60:a3:05:61:0c:d9:a4:d9:37:3d:16:55:d3:fe:
12:8d:3f:d7:14:6f:7c:f6:ba:8e:0f:f4:47:fa:b8:
9b:4f:ef:8e:3b:ff:a7:0d:d2:e9:33:ae:95:c5:92:
80:3b:69:47:ea:8d:ff:55:d9:7f:57:dd:70:20:7d:
90:29:ac:9a:76:b6:f3:80:bc:51:7e:24:45:5a:55:
30:80:d7:e9:2b:11:7d:81:6d:2e:71:58:3b:03:2d:
3b:a5:67:33:93:5d:cb:2d:4b:df:5f:2b:08:cf:6b:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:04:A7:48:D7:A7:0E:AA:C9:07:61:70:0A:DD:56:11:6F:B6:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/09f936fc-95a0-3018-bf28-0440ff7d50e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:43:a2:61:23:30:c6:ed:53:ae:b8:3e:64:d9:53:58:1e:c4:
04:34:a6:a4:a4:d9:4c:1c:9a:c6:6d:6d:7b:df:de:37:7f:32:
d4:da:7b:d8:90:e0:49:86:0e:6b:d2:bc:61:9d:fd:64:9b:bb:
94:e4:f0:04:a4:d2:5d:f8:e0:f2:ba:bd:36:ba:84:dd:ee:4c:
66:37:5d:23:41:11:1b:f7:7f:ce:01:43:e7:dd:f6:c5:d8:54:
99:36:2a:95:89:5e:2e:3e:1a:e3:7f:3e:af:0f:3f:ba:fe:d4:
c0:2e:14:f2:ee:f2:98:8e:ac:9a:52:15:f4:c2:5d:75:a3:5c:
a0:ff:a7:f9:3b:04:85:88:15:ec:0d:99:52:65:82:4f:a2:55:
e9:45:bc:a9:ea:06:68:87:8e:e9:f7:67:8c:97:19:a3:5b:2f:
da:c6:94:0a:ef:6d:53:b7:cf:3e:e1:94:88:7b:76:2f:6d:89:
97:fd:bc:44:69:cf:37:11:d2:9a:08:62:67:74:e9:c8:44:4c:
bd:9f:01:32:11:5c:76:96:67:65:70:74:79:9c:08:40:db:87:
36:ed:63:6c:91:f8:56:6e:a5:ff:da:a0:0d:e8:a5:c2:ed:b8:
ca:1d:0a:ee:cd:47:e8:c3:bd:f8:e0:48:16:b1:fa:c4:5c:fd:
1f:37:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:36 2025 by rpki-client