Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f1bff84-8698-316f-8bb3-3a96c15910bc.roa
File: 1f1bff84-8698-316f-8bb3-3a96c15910bc.roa (raw, json)
Hash identifier: ptShFvcyhhwjeEy3LJ+2Ggq42UqZT78k8dF0u7SeJRQ=
Subject key identifier: B5:1E:8C:79:E4:89:DB:A5:90:39:16:B5:64:21:08:0A:BE:16:44:21
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858486695AE61F4C83B15D1A11938
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f1bff84-8698-316f-8bb3-3a96c15910bc.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 14618
IP address blocks: 130.137.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ae:61:f4:c8:3b:15:d1:a1:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c09b3b25-588b-4743-a77a-8408cdd472f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:4b:4b:e8:b0:52:d3:c8:04:14:a1:80:1e:
54:46:a6:5f:7a:7d:ba:e0:e7:6a:f9:85:3e:1c:cf:
96:9f:35:ea:f1:17:62:ee:fb:f8:d2:e9:3d:e9:96:
c8:d3:e2:7c:2a:f7:ae:97:a7:08:1f:0e:e3:bc:17:
47:a1:79:50:77:6c:f0:09:17:de:b1:75:77:16:ce:
44:60:a6:a0:f9:d4:87:5b:b0:7d:61:f0:c8:f4:4d:
b3:aa:f6:13:56:0c:16:84:67:53:5a:3e:77:36:b9:
fc:06:e6:85:4f:2b:0d:36:d5:f2:de:ca:e7:e4:78:
73:03:2c:26:93:b9:d0:e1:c6:ae:97:5f:b1:2f:b7:
64:bb:f2:bb:aa:70:5b:da:b6:e4:3e:e3:c6:1e:1b:
8b:c6:d7:94:f7:40:8c:a6:13:be:b1:b9:be:dd:e7:
ae:be:9a:4d:7d:dc:9d:cc:8b:fb:cf:39:5e:1f:d9:
f9:75:2c:20:bc:35:f2:1a:f1:d1:bb:fa:00:27:38:
9f:ba:31:54:b8:1a:8a:f1:99:23:79:c7:36:17:45:
a2:91:e4:8d:5b:58:72:2e:19:d9:09:92:63:b2:c9:
17:91:41:46:a6:33:4e:b9:b8:c3:c3:1a:6f:cd:4d:
7f:e3:d7:6a:cb:45:0b:d5:d1:e2:29:ce:5b:61:5d:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:8C:79:E4:89:DB:A5:90:39:16:B5:64:21:08:0A:BE:16:44:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f1bff84-8698-316f-8bb3-3a96c15910bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2e:29:14:dd:ab:21:e7:55:2d:8e:26:16:67:66:71:bd:fc:
35:24:c9:d1:10:65:b3:93:31:4c:9a:dc:ca:26:0b:0e:a9:2c:
4d:95:dc:3b:11:c3:ef:ba:f8:8e:7b:8b:b7:8d:e0:6f:17:6c:
8a:1f:96:1d:9e:0d:6d:69:9b:d8:46:42:06:a7:5c:42:64:b5:
40:ac:39:b0:83:33:de:1a:2b:b3:d1:c9:bb:11:58:e9:93:27:
19:a9:21:68:de:f2:a8:43:89:32:1b:86:03:e5:6b:4d:84:f4:
bb:38:d5:69:cc:78:79:a9:a0:db:1f:a5:08:c3:28:74:3b:60:
08:be:bf:ad:a6:95:7a:ef:95:d7:6a:29:30:e1:17:10:a2:0b:
48:93:4a:9a:02:ac:0b:ef:db:fb:8b:4d:42:50:4e:8b:5f:32:
08:ac:57:85:9a:bc:e9:44:7a:5e:5d:53:a8:9e:8f:ce:4e:b1:
6a:58:3c:94:42:fc:f0:39:44:53:21:3d:d3:78:4d:fa:c4:4f:
4c:42:30:46:20:17:cb:49:7b:e1:ae:11:3b:cf:33:75:91:7e:
cb:1f:02:22:00:f9:70:ec:a0:6f:17:d6:fd:66:e7:8f:b2:de:
20:05:8b:0b:61:8a:ba:45:53:5a:90:e5:10:6b:1e:ec:fe:52:
85:ed:6a:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmla5h9Mg7FdGhGTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzA5YjNiMjUtNTg4Yi00NzQzLWE3N2EtODQwOGNkZDQ3MmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5lLS+iwUtPIBBShgB5URqZfen264Odq+YU+
HM+WnzXq8Rdi7vv40uk96ZbI0+J8Kveul6cIHw7jvBdHoXlQd2zwCRfesXV3Fs5E
YKag+dSHW7B9YfDI9E2zqvYTVgwWhGdTWj53Nrn8BuaFTysNNtXy3srn5HhzAywm
k7nQ4caul1+xL7dku/K7qnBb2rbkPuPGHhuLxteU90CMphO+sbm+3eeuvppNfdyd
zIv7zzleH9n5dSwgvDXyGvHRu/oAJzifujFUuBqK8Zkjecc2F0WikeSNW1hyLhnZ
CZJjsskXkUFGpjNOubjDwxpvzU1/49dqy0UL1dHiKc5bYV0NUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLUejHnkidulkDkWtWQhCAq+FkQhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWYxYmZmODQtODY5OC0z
MTZmLThiYjMtM2E5NmMxNTkxMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkuKRTdqyHnVS2OJhZnZnG9/DUkydEQZbOTMUya3MomCw6pLE2V3DsR
w++6+I57i7eN4G8XbIoflh2eDW1pm9hGQganXEJktUCsObCDM94aK7PRybsRWOmT
JxmpIWje8qhDiTIbhgPla02E9Ls41WnMeHmpoNsfpQjDKHQ7YAi+v62mlXrvlddq
KTDhFxCiC0iTSpoCrAvv2/uLTUJQTotfMgisV4WavOlEel5dU6iej85OsWpYPJRC
/PA5RFMhPdN4TfrET0xCMEYgF8tJe+GuETvPM3WRfssfAiIA+XDsoG8X1v1m54+y
3iAFiwthirpFU1qQ5RBrHuz+UoXtal4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:16 2025 by rpki-client