Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
File: 2df51bd2-8f35-3784-a672-9288ad204a5e.roa (raw, json)
Hash identifier: 9CLpprkvC/Uu2bbWFzZqLm4U/MytM43w30a7YwN04Rc=
Subject key identifier: 3D:7C:19:07:DA:9E:84:C9:E6:AC:0A:06:C6:90:1A:39:E7:56:F0:19
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483B4FF94102B8C30544E061E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 14618
IP address blocks: 130.137.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:f9:41:02:b8:c3:05:44:e0:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=2e1a5ae8-d08e-44d9-9d84-831168702e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:07:17:2a:26:7f:09:3e:e1:25:51:e6:74:
16:14:6b:3f:b8:0e:22:0f:61:95:e8:9a:21:9d:c6:
1b:2d:8d:a3:b2:1b:ce:1c:3d:f8:50:42:c0:b5:7c:
d0:4d:7a:b8:65:09:3b:7c:83:62:40:f1:cd:73:ab:
c6:d0:3a:3e:50:13:2d:4c:1e:6f:f0:0c:02:d2:c4:
e0:9d:7f:e8:26:9f:83:79:87:72:a5:6d:dc:25:b8:
c5:e2:14:e7:72:2f:a0:c7:20:47:b8:67:7e:7e:ca:
8b:e4:d4:6f:f8:bf:cc:fb:5b:e6:35:2a:10:99:09:
ac:28:4b:d2:16:78:12:12:dc:1c:43:a8:e5:0e:4b:
e0:b3:df:7e:13:cf:84:da:7a:72:e6:6f:d3:4b:95:
fe:a6:fb:04:21:7f:76:91:f6:64:be:aa:81:8c:5c:
38:40:59:27:a6:a1:1b:11:07:f0:94:24:a3:41:9d:
9f:29:5b:74:69:ed:59:3c:e2:5c:18:84:f8:04:73:
7f:c1:93:ed:23:e7:0c:1a:45:49:56:a9:9b:fa:bf:
95:ea:5c:eb:da:ed:e2:70:12:50:92:04:69:10:53:
0f:29:b1:61:2d:b1:75:ba:8b:2f:20:b2:1e:77:be:
42:e9:e2:6e:ec:8b:c8:7e:21:8e:2e:d1:5a:73:b7:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:19:07:DA:9E:84:C9:E6:AC:0A:06:C6:90:1A:39:E7:56:F0:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2df51bd2-8f35-3784-a672-9288ad204a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:98:b0:f3:9c:65:f3:0f:a9:8c:4c:67:a4:fc:77:89:b7:99:
86:47:9e:f4:a8:59:a2:d4:45:4a:99:98:16:8e:d6:b3:54:2a:
6b:c1:51:ee:52:44:27:87:e9:89:e5:e6:94:e4:90:75:d8:51:
50:fe:7a:76:00:b5:9e:03:f3:11:dc:bd:ac:9c:d2:51:46:43:
89:dc:35:4a:df:a1:e7:95:0f:8f:d1:26:e2:62:54:c9:11:e8:
ea:a6:a3:74:1e:b3:47:c4:10:d0:20:1e:17:75:c2:2b:03:eb:
ce:0a:41:a5:28:e9:12:d8:ed:e0:78:44:05:17:e8:aa:a0:69:
56:04:c8:dc:40:fe:02:7a:b4:88:47:52:5a:4b:05:d2:50:ae:
3d:ea:7c:64:92:b5:3e:e7:cf:4c:f7:e7:d2:28:78:03:13:ca:
db:05:ba:45:b9:39:95:0c:5b:c7:6e:f2:6a:b8:c6:e1:34:40:
7b:12:c9:6a:b2:70:e1:aa:b9:88:fa:25:6b:d1:7b:d8:d4:7f:
f8:a6:a5:1d:01:23:3e:24:04:5e:24:2c:8d:b5:dc:f1:66:e4:
74:c8:8d:30:b4:74:b2:1d:05:ad:c0:d2:91:52:f0:ff:df:b1:
4c:92:7b:61:08:5c:d8:5a:6b:65:b3:87:4a:61:a8:ab:31:72:
ba:f0:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:08 2025 by rpki-client