Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/12f30ab1-7407-335b-be4f-2acd749e3f62.roa
File: 12f30ab1-7407-335b-be4f-2acd749e3f62.roa (raw, json)
Hash identifier: OzgW3qDViJ4aeg4ZEgYCmsUsOYrTAJb20W3zXRozzmY=
Subject key identifier: 01:3A:66:06:C3:60:AF:CC:9C:BE:BF:C1:5C:14:FC:C7:E4:97:A8:7C
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483B4FFD5CB80D23E5EBA5B780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/12f30ab1-7407-335b-be4f-2acd749e3f62.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 14618
IP address blocks: 130.137.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:fd:5c:b8:0d:23:e5:eb:a5:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=e4f90a99-c7aa-4f75-8918-16376ca90e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:9d:b1:88:50:4f:4e:d2:d1:04:a0:4b:ce:
90:3c:78:bd:1e:3e:b1:e6:90:2a:ce:1d:79:e5:0c:
99:c5:6b:f5:a2:0c:ef:bc:6f:9f:60:03:00:26:3a:
7a:8f:b1:2a:c7:7d:16:2e:ad:e6:1f:81:34:fe:41:
5f:6c:d0:66:b5:39:2f:65:30:8b:2e:d0:b1:c1:89:
1c:ba:e2:aa:08:0b:56:a4:e0:3d:3d:2b:24:12:f1:
14:c5:ae:17:aa:5b:fa:24:56:3f:4d:e6:35:ad:2b:
f9:a7:11:ec:fd:56:9e:34:fd:7c:59:c7:ea:7d:73:
42:b8:d6:db:a8:53:cc:75:55:f2:86:33:eb:cf:b4:
1e:78:e8:a9:dd:2c:e3:f3:80:08:18:75:41:75:34:
81:fc:d7:0a:53:c4:72:35:94:c7:05:49:02:23:b4:
1e:6a:dd:f9:cc:d2:d2:4e:06:37:47:e5:1b:33:99:
25:6e:c8:d5:c1:ce:ba:9c:13:a5:ce:fe:9c:a7:fc:
ff:53:a5:52:4a:dd:60:17:a1:61:3e:9c:f4:3d:22:
92:43:01:20:cc:6d:ec:07:f2:85:05:00:dc:fc:b8:
37:4e:1b:17:35:93:d8:f8:59:e3:de:2a:1e:27:fa:
2d:86:3a:17:04:de:6c:34:bc:41:1f:31:a2:e1:78:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:66:06:C3:60:AF:CC:9C:BE:BF:C1:5C:14:FC:C7:E4:97:A8:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/12f30ab1-7407-335b-be4f-2acd749e3f62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b6:8a:bc:3b:cc:16:9f:65:06:f0:7d:cf:f0:d0:53:aa:cf:
3c:fd:db:c7:cb:ae:01:00:17:ac:cf:50:c6:63:26:c4:a8:82:
1a:45:98:70:68:8b:7f:51:19:28:cf:02:00:57:70:56:57:76:
99:6a:79:0d:99:f8:19:96:f0:fb:69:46:aa:2d:5e:32:a7:5b:
82:d2:d9:a7:a5:87:62:82:fe:3c:90:ec:ea:e6:9a:d7:80:60:
4e:a9:88:00:53:9e:79:1b:d7:06:8b:02:9d:66:c0:4a:cb:f2:
db:72:65:f4:da:cd:dd:83:bd:a1:6b:17:31:97:e2:b1:f1:07:
85:a4:32:54:8b:ab:71:56:99:11:7f:72:4d:95:b3:f9:af:f8:
66:77:66:30:b5:38:8d:80:ff:1c:32:d3:87:4f:b2:07:6d:35:
f9:a1:6b:a9:05:8b:0e:c5:24:cb:bc:e0:ae:4c:d5:5f:8c:73:
b4:bd:5a:e1:e0:18:87:3a:3e:44:69:f0:81:29:0f:e1:39:34:
b6:64:2e:64:47:14:69:b0:7b:b6:dc:7b:4f:22:46:6c:e2:af:
3d:7a:82:08:80:69:93:59:1b:9e:0c:d3:44:ed:77:bb:d6:43:
d8:a1:95:b9:47:f3:06:a1:a0:6d:75:5c:49:8f:59:69:e3:2d:
3f:34:7b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/1cuA0j5eult4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
ZTRmOTBhOTktYzdhYS00Zjc1LTg5MTgtMTYzNzZjYTkwZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60mdsYhQT07S0QSgS86QPHi9Hj6x5pAqzh15
5QyZxWv1ogzvvG+fYAMAJjp6j7Eqx30WLq3mH4E0/kFfbNBmtTkvZTCLLtCxwYkc
uuKqCAtWpOA9PSskEvEUxa4Xqlv6JFY/TeY1rSv5pxHs/VaeNP18WcfqfXNCuNbb
qFPMdVXyhjPrz7QeeOip3Szj84AIGHVBdTSB/NcKU8RyNZTHBUkCI7Qeat35zNLS
TgY3R+UbM5klbsjVwc66nBOlzv6cp/z/U6VSSt1gF6FhPpz0PSKSQwEgzG3sB/KF
BQDc/Lg3ThsXNZPY+Fnj3ioeJ/othjoXBN5sNLxBHzGi4XjePwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAE6ZgbDYK/MnL6/wVwU/Mfkl6h8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTJmMzBhYjEtNzQwNy0z
MzViLWJlNGYtMmFjZDc0OWUzZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGi2irw7zBafZQbwfc/w0FOqzzz928fLrgEAF6zPUMZjJsSoghpFmHBo
i39RGSjPAgBXcFZXdplqeQ2Z+BmW8PtpRqotXjKnW4LS2aelh2KC/jyQ7OrmmteA
YE6piABTnnkb1waLAp1mwErL8ttyZfTazd2DvaFrFzGX4rHxB4WkMlSLq3FWmRF/
ck2Vs/mv+GZ3ZjC1OI2A/xwy04dPsgdtNfmha6kFiw7FJMu84K5M1V+Mc7S9WuHg
GIc6PkRp8IEpD+E5NLZkLmRHFGmwe7bce08iRmzirz16ggiAaZNZG54M00Ttd7vW
Q9ihlblH8wahoG11XEmPWWnjLT80e4Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:17 2025 by rpki-client