Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/114957d9-1cfc-37e6-ac58-6ebdd56bbca5.roa
File: 114957d9-1cfc-37e6-ac58-6ebdd56bbca5.roa (raw, json)
Hash identifier: fA3tktvjfnh5lc87JLrJkm3mXrHKYLSpmch1CwezpjE=
Subject key identifier: D6:EB:73:70:DE:2B:D9:5C:85:B9:5C:34:D8:53:63:21:00:85:E3:39
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FB27B20E1D524C413F680
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/114957d9-1cfc-37e6-ac58-6ebdd56bbca5.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 130.137.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b2:7b:20:e1:d5:24:c4:13:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=c83fa02e-571f-4a79-85dd-aea72aa85fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:21:c2:0c:f2:b3:a7:98:3c:55:a7:68:6d:
f5:90:d8:79:30:5b:5b:b6:2e:11:46:73:3f:98:0d:
1f:2e:cd:d8:5c:3e:e2:b6:9e:cc:b5:cc:45:43:8d:
76:a0:99:f0:07:07:c2:64:11:44:91:be:0a:64:67:
5c:77:59:27:15:07:0d:ef:af:18:4c:24:e7:8f:cc:
00:54:a6:7d:ff:fa:26:93:23:f7:cc:96:46:b1:6d:
3e:5a:61:d2:68:df:d5:c5:9d:f3:7f:50:67:a7:79:
68:c5:8d:c2:1d:64:5a:54:c8:2a:92:9c:3d:b8:1f:
06:6b:7f:d4:61:15:6d:0b:0c:71:cb:8d:b4:ec:53:
a1:be:47:c1:5c:b9:95:e7:dd:a8:7d:e7:06:c5:5c:
51:a0:df:cf:55:3b:fd:12:91:aa:14:b5:2b:8b:1b:
4e:6e:fe:7a:7e:2c:1d:bd:d9:16:9c:20:b2:59:ba:
84:c5:b9:b9:bb:58:57:73:d6:32:57:31:e8:6e:7f:
6a:e9:f3:7d:cd:53:89:9d:60:71:14:f2:a9:30:75:
4d:a7:48:6c:61:99:00:de:77:55:df:56:33:0f:cf:
1a:3e:a3:1e:0e:ce:b7:d3:f5:d5:f4:9d:b3:be:56:
2e:07:4b:bf:8c:9b:a5:bd:0c:73:0e:31:15:24:f5:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:73:70:DE:2B:D9:5C:85:B9:5C:34:D8:53:63:21:00:85:E3:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/114957d9-1cfc-37e6-ac58-6ebdd56bbca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:a2:c2:46:49:b8:93:a8:24:a2:2d:e2:c4:b7:20:ab:6c:09:
d4:00:ba:a7:c4:ee:68:d7:7e:75:81:44:3d:e9:7b:0f:b8:13:
ce:9a:52:7c:9e:e6:3e:eb:00:25:1b:ac:d0:59:b0:17:08:88:
a2:5b:e4:cc:7f:c5:8b:19:3d:36:09:52:9a:88:d6:57:ac:9d:
23:53:bb:94:22:da:80:78:56:17:9b:53:59:94:e6:2a:fe:ee:
31:4c:5e:61:fa:4d:a4:1e:96:86:28:10:50:dd:ca:be:b9:9d:
57:a8:bb:00:d4:d1:62:86:18:cc:01:f4:c3:62:83:f6:04:3c:
98:2c:60:af:d7:54:22:70:87:ba:28:e8:68:ef:61:65:24:31:
88:e6:2b:5e:0e:af:c9:bd:48:ed:e1:91:8a:ec:20:49:b6:2a:
2f:9d:77:cb:f3:e1:e8:25:af:97:7f:fc:08:26:ee:8f:a8:c8:
be:6f:42:e1:99:6b:7a:17:17:f5:60:c7:d3:c7:1d:27:5a:79:
bf:58:10:07:8e:69:35:6c:7d:f8:0a:5f:f8:4b:13:3b:df:9e:
ee:03:58:b9:c9:c7:e4:8b:fe:cc:b7:7b:3f:aa:2d:ef:82:f3:
6e:f7:e7:0d:75:38:fd:c0:e1:2c:b9:36:c0:88:bc:ea:f9:42:
09:b5:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:20:56 2025 by rpki-client