Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
File: 3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa (raw, json)
Hash identifier: P4Qb6yoI1y9QWOJZvG6Saa3FzbzwqzA0n8grUt8mVEg=
Subject key identifier: BD:14:26:0B:30:1C:53:81:9F:CE:80:23:06:2A:6A:9E:78:F5:E5:8B
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FB2E2AAE6BDBD3DBD1C00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 130.137.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b2:e2:aa:e6:bd:bd:3d:bd:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=a5033c29-eef2-48f9-aa8d-ae9a8c9e7266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:c4:ee:ad:52:3a:ba:f4:4f:fe:80:6e:2d:
1e:89:f6:01:d5:70:46:ec:52:26:97:83:a7:d5:7b:
76:dd:71:23:d6:af:9b:a7:c6:9e:9b:f9:ee:89:43:
6c:23:92:1e:6e:b4:f0:a2:f1:9c:c3:86:d0:dd:72:
4d:da:15:36:0e:ea:5e:6f:12:0d:14:1c:33:1c:c0:
75:5f:c3:00:02:ca:09:cb:87:e0:a7:02:fa:2d:be:
1a:0a:72:75:ed:66:e0:70:c8:b9:92:1a:d3:a7:6b:
83:09:af:e5:2b:58:95:b0:ef:da:1a:f5:7d:ae:61:
34:6a:6b:dd:b3:68:66:89:ff:99:78:b2:48:18:27:
e4:10:e6:b5:0d:a7:1d:f6:1c:d4:52:1e:51:ea:b0:
2e:be:36:51:88:bc:1e:c0:62:89:d0:28:dd:14:27:
27:8c:df:c5:d0:40:01:5e:75:46:45:1b:ec:ab:0b:
a4:c7:65:01:fa:c4:16:30:d9:cd:65:f4:c6:5a:32:
4a:40:0f:fd:0d:9b:6e:e9:06:e3:32:a5:d9:56:2a:
47:7f:6f:06:27:e8:40:7e:34:98:99:d2:e2:0c:a9:
87:dd:a6:4d:b6:6f:69:ec:1a:c2:6e:78:53:4e:67:
dc:ae:bb:08:00:c2:08:41:12:4c:5b:b6:2c:84:04:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:26:0B:30:1C:53:81:9F:CE:80:23:06:2A:6A:9E:78:F5:E5:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3574d48e-677a-3bb3-819c-74d2ad1e6b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.183.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:06:2c:71:8d:ec:fd:35:89:2c:12:eb:6e:5b:86:3b:83:54:
10:b7:50:48:e3:af:cf:ab:00:e7:79:95:af:58:33:b3:15:79:
7f:aa:7a:40:8d:31:c8:0b:be:36:be:5e:4d:c7:ce:3f:cd:59:
ef:40:e9:71:fc:8a:53:49:6e:66:09:25:f3:50:34:6b:84:45:
63:c5:a5:68:6a:3f:90:c7:2b:86:09:c5:77:42:13:4a:82:c7:
7b:32:ee:06:57:af:7b:4a:b9:b5:1b:8c:25:93:70:16:8f:83:
26:d4:33:1a:fa:2e:b3:f6:d1:6a:ec:b1:81:9d:aa:24:33:56:
e9:2a:13:e6:6d:59:97:9b:7b:6e:e9:e2:1c:5b:06:69:9a:44:
47:c4:02:e5:4d:b3:b3:97:2a:6c:02:25:75:44:ac:f3:0d:e2:
32:52:06:d4:9d:bb:02:9f:21:c4:e7:52:26:5c:e5:cd:d6:79:
76:c4:ba:fb:eb:6e:5c:15:f7:65:66:24:46:71:27:56:a2:39:
96:2f:5f:10:38:ff:c2:0f:34:b2:3a:8f:b0:33:d8:d4:45:fa:
28:bc:ee:6a:e9:f0:5a:76:17:23:c4:86:af:55:f7:6f:b1:68:
7e:a8:1a:7a:94:6a:f4:c8:a6:76:3e:d2:11:1e:d0:f8:c9:47:
f3:95:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:51 2025 by rpki-client