Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
File: 0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json)
Hash identifier: nPFHOSSgj63xDGFXNWn6zVEgrJZWxaQgNd56V4WB1j0=
Subject key identifier: BB:C5:48:29:45:E1:1D:C9:58:72:F4:E2:09:0D:E3:27:1C:FC:46:74
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584838855245601FD02F8DE8FFE0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:52:45:60:1f:d0:2f:8d:e8:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=29856bc5-55ee-483f-965b-ec8bbbf9527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:5c:54:f0:dc:64:95:23:14:6f:1e:bd:bd:
dd:78:92:26:8c:0a:c6:f0:86:62:6a:e0:a3:ca:96:
66:59:6f:47:b4:7c:58:8a:40:39:d9:9b:ed:83:b7:
b3:51:c0:25:a6:f4:3b:2d:c6:6f:4c:fe:c1:34:39:
5a:b1:c8:d1:fc:ba:dd:98:c9:69:ac:13:58:f5:09:
f2:2e:a0:65:64:ae:cf:52:cf:84:20:03:55:4f:67:
3b:a0:52:4e:10:2a:aa:21:87:09:06:d3:c5:2a:b3:
c8:7b:2c:60:f8:b7:65:93:30:b5:cf:0d:5e:4c:c0:
52:7f:05:07:e5:8c:2b:59:b5:8d:21:6f:d2:79:14:
20:ce:70:06:cc:d9:19:ce:9d:bf:c9:0b:8f:d4:91:
be:9b:66:e0:ad:21:3e:a7:36:73:48:31:2a:c1:c8:
d8:3d:60:7b:c0:95:bc:73:75:49:19:e0:34:c0:28:
99:9a:a4:fe:7b:cc:fc:5e:9e:31:d5:96:76:6d:d0:
ba:38:72:0e:82:dc:4b:bc:55:59:94:37:8d:3e:d2:
c5:85:19:1d:48:90:fb:4f:85:a4:d3:f4:9e:01:34:
45:a7:d0:5e:d0:fc:8e:bf:2e:e3:39:fe:cc:c1:13:
d0:5a:43:2a:69:9c:49:bb:66:50:33:a0:6c:7c:59:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:48:29:45:E1:1D:C9:58:72:F4:E2:09:0D:E3:27:1C:FC:46:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d6:72:8d:07:b2:34:ee:d3:11:1b:28:a2:2f:5d:f1:75:06:
ab:7f:e3:55:6e:30:87:31:5f:05:c7:be:2c:40:67:8e:9f:a4:
e2:55:f0:31:c1:a4:6f:af:a7:4b:7d:07:b3:9f:8f:e4:42:23:
f9:7d:47:d0:36:72:4c:e2:f6:71:cf:f4:4e:0e:c0:7a:ae:67:
c8:6d:96:2e:ad:81:5c:7f:92:ec:20:a2:4f:b2:a2:f8:47:99:
59:e3:79:6e:98:63:c7:c7:b2:ae:65:36:87:ef:91:e2:b8:e0:
c8:05:51:a4:1d:09:e9:55:af:4b:20:8a:59:22:20:5f:a9:4d:
c8:90:d7:be:6a:97:ed:a4:0d:ec:5f:d6:b6:bd:ea:82:3a:7a:
fc:42:a7:cc:1c:72:bd:71:80:88:e2:ac:6c:3b:d8:a1:f0:72:
fe:b3:82:25:d5:85:db:ab:ae:3a:78:fd:9e:c8:04:27:76:c1:
e8:d3:29:b8:df:ab:fa:18:17:b8:e0:bf:93:72:97:6b:8f:9b:
86:7d:1f:91:90:e4:81:0e:d5:3b:b2:be:c2:80:0b:9b:d6:72:
e4:16:83:4d:98:b0:d9:1f:38:76:7d:99:53:fa:d0:da:24:2f:
72:b5:56:f5:e7:ea:0e:6c:b5:38:0c:92:1f:a2:d3:94:f7:1e:
c4:bc:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:32 2025 by rpki-client