Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa
File: 0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa (raw, json)
Hash identifier: eptB+E8pYQlGYGdH8m8s0DkUn4fEZ8wmFuxMJvIFtp4=
Subject key identifier: 6E:7D:0E:B3:07:B1:7C:65:82:78:19:B8:32:B9:11:80:0E:55:6B:E3
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FAA0D8D73177AEA04B200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 130.137.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:aa:0d:8d:73:17:7a:ea:04:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=561d2cba-a01e-47a9-bdaa-b36724b4d24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:81:7e:99:8d:dd:67:2c:91:2a:5d:38:8d:
90:45:39:63:b5:b4:52:52:13:46:d7:d2:65:91:1d:
38:11:50:a4:ba:5d:00:3c:35:e5:43:93:99:65:1a:
a9:5a:78:1c:16:5c:94:b7:20:5a:ef:de:7c:df:59:
e4:04:8d:1b:dc:ae:e5:e7:84:86:96:b2:2f:f7:53:
36:7a:76:00:fd:1b:ce:da:a3:06:5c:9b:62:64:bd:
6c:11:08:51:0a:3e:ff:61:8e:cf:90:0e:51:52:75:
ef:6a:58:62:14:07:fd:ce:a0:aa:e5:9a:08:59:49:
9c:65:b5:16:c2:bc:0c:86:4f:5d:f5:53:93:a9:df:
c5:48:b0:87:af:34:1d:bb:1b:66:c8:d7:4a:10:07:
d6:50:f0:28:22:59:58:62:92:14:86:ea:b2:84:e8:
0e:bc:ef:b4:34:65:01:6d:ee:33:1c:8a:4d:de:b0:
36:da:c8:65:39:33:59:63:a3:8f:c1:39:96:b7:bb:
c8:19:f3:ed:79:18:56:12:a7:fc:7d:7c:cd:11:50:
34:67:0b:e1:f5:98:28:67:8e:69:ac:4c:33:e9:86:
a5:73:bc:2d:da:1b:05:2e:27:f9:8a:9c:b5:82:8e:
68:78:3e:a1:74:09:6d:ea:78:a3:67:e6:48:b0:4e:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7D:0E:B3:07:B1:7C:65:82:78:19:B8:32:B9:11:80:0E:55:6B:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f3bd1d6-1d88-3a5e-be29-39ee6b797a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:b7:f5:75:1c:0b:0c:1a:99:ba:d2:9f:5e:4a:cb:c9:79:2c:
f9:31:2f:93:b5:c6:ed:b1:2c:46:e9:21:20:7f:21:a6:63:ce:
fb:bf:76:f7:05:22:d9:dc:97:58:19:21:b3:e6:7c:4e:67:fa:
8e:a7:7e:ee:52:8a:35:a0:fc:ea:0b:4a:c3:98:76:19:07:b7:
9d:2b:70:6b:6e:e0:1f:d6:b2:6e:01:98:8c:c2:da:a9:c7:36:
39:0a:59:c3:8a:02:33:1a:e9:b0:38:0e:ca:76:c9:ca:43:34:
25:67:98:ca:b1:b5:a2:06:c7:71:f5:02:a7:ac:ce:27:2a:b8:
37:36:2f:38:12:77:88:3c:32:8c:4c:2d:b2:64:9d:0e:22:97:
9a:9d:47:af:c8:88:bd:96:92:b5:99:01:5a:0f:48:8c:d2:23:
9e:aa:e0:87:b8:58:55:82:20:37:8a:97:dd:26:ac:ed:6f:9e:
53:12:e3:36:33:ff:90:c2:07:99:4a:cd:70:f6:bb:96:71:07:
c2:2b:00:9c:bd:78:76:72:28:d0:8f:77:c0:93:56:31:0c:34:
b7:ef:0c:18:4b:88:4c:18:0d:90:2c:eb:fb:9f:a6:62:d8:5a:
40:2a:20:31:b4:b9:0d:ea:ce:3f:56:ae:3f:74:93:c6:3f:97:
39:7b:b9:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6oNjXMXeuoEsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
NTYxZDJjYmEtYTAxZS00N2E5LWJkYWEtYjM2NzI0YjRkMjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjmBfpmN3WcskSpdOI2QRTljtbRSUhNG19Jl
kR04EVCkul0APDXlQ5OZZRqpWngcFlyUtyBa795831nkBI0b3K7l54SGlrIv91M2
enYA/RvO2qMGXJtiZL1sEQhRCj7/YY7PkA5RUnXvalhiFAf9zqCq5ZoIWUmcZbUW
wrwMhk9d9VOTqd/FSLCHrzQduxtmyNdKEAfWUPAoIllYYpIUhuqyhOgOvO+0NGUB
be4zHIpN3rA22shlOTNZY6OPwTmWt7vIGfPteRhWEqf8fXzNEVA0Zwvh9ZgoZ45p
rEwz6Yalc7wt2hsFLif5ipy1go5oeD6hdAlt6nijZ+ZIsE5u2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG59DrMHsXxlgngZuDK5EYAOVWvjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGYzYmQxZDYtMWQ4OC0z
YTVlLWJlMjktMzllZTZiNzk3YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAW39XUcCwwambrSn15Ky8l5LPkxL5O1xu2xLEbpISB/IaZjzvu/dvcF
Itncl1gZIbPmfE5n+o6nfu5SijWg/OoLSsOYdhkHt50rcGtu4B/Wsm4BmIzC2qnH
NjkKWcOKAjMa6bA4Dsp2ycpDNCVnmMqxtaIGx3H1AqeszicquDc2LzgSd4g8MoxM
LbJknQ4il5qdR6/IiL2WkrWZAVoPSIzSI56q4Ie4WFWCIDeKl90mrO1vnlMS4zYz
/5DCB5lKzXD2u5ZxB8IrAJy9eHZyKNCPd8CTVjEMNLfvDBhLiEwYDZAs6/ufpmLY
WkAqIDG0uQ3qzj9Wrj90k8Y/lzl7uSI=
-----END CERTIFICATE-----
Generated at Tue May 6 00:10:54 2025 by rpki-client