Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa
File: 40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa (raw, json)
Hash identifier: UKWmavnjNBOgYA4FNQkaK0tVAYT5E/E/VBlJgSlJ64o=
Subject key identifier: C8:42:10:2D:CA:37:37:99:59:5B:86:CA:F6:EE:DD:63:4F:B1:4D:16
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483885525634EEF4A3064CD580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 130.137.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:52:56:34:ee:f4:a3:06:4c:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=25a4e0ed-a2a9-42e7-87da-b0503dc458c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:74:c2:76:4a:c6:6b:56:04:a7:67:b5:fe:
48:bc:29:7f:77:e8:fc:83:ee:38:4f:5c:2d:ea:a6:
ea:2e:29:ec:d9:72:bb:56:0b:40:f8:51:61:57:db:
f9:51:85:24:a5:f2:f1:17:11:61:07:d5:5b:91:f9:
9f:c6:ef:64:51:a7:62:5f:37:97:a1:0d:f1:15:37:
1f:5e:62:c0:18:94:0d:8d:bb:1e:56:15:f0:1d:55:
55:c4:5f:c6:61:f0:52:c5:76:55:a2:06:86:9d:21:
65:20:6c:1b:9e:6d:be:df:55:18:37:ee:2f:0a:a7:
75:3d:93:a1:e6:79:08:7c:42:d7:7a:7d:a6:c2:6c:
4c:77:77:ec:4b:f8:69:20:23:c9:29:e6:d3:31:42:
fc:7a:be:11:90:67:8e:04:4f:5d:6c:26:9b:3c:4b:
03:90:a8:09:ca:df:25:0a:e5:97:b6:c6:b2:f7:ee:
f7:64:72:d2:f4:99:f8:18:7b:5d:9e:2f:62:f7:29:
7b:da:4c:cc:89:cb:1b:62:21:44:59:c5:e2:5b:5b:
6b:6d:3b:9c:6c:aa:b0:56:e7:01:e8:10:56:d6:66:
15:64:a3:4e:ec:c8:0e:f2:27:49:7d:d0:9a:8d:20:
03:88:92:93:c6:bc:5f:85:c4:a5:25:b6:ab:22:66:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:10:2D:CA:37:37:99:59:5B:86:CA:F6:EE:DD:63:4F:B1:4D:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:7b:61:a0:d5:06:03:c6:0d:cd:bb:6f:16:e9:8e:6c:bc:f0:
b2:23:93:f0:86:ed:8c:b9:fd:50:d4:5e:9f:2a:4d:a4:01:60:
3a:c8:8c:7b:7b:0c:c1:00:cb:45:c2:cf:14:ab:15:66:f0:b7:
64:a9:10:d6:51:cb:bd:0e:34:9e:2d:be:f0:37:f8:be:13:df:
f2:eb:61:d3:65:53:51:79:34:15:60:17:8c:2a:a8:92:c3:7e:
ca:22:5d:3f:df:e3:67:eb:47:89:7c:07:93:ed:ce:77:77:b2:
ab:98:68:64:cd:65:e5:6b:e2:5e:71:46:b6:87:4b:51:d3:70:
72:d9:79:5f:7c:fb:21:13:af:1d:1f:98:b0:ea:c5:f2:76:e0:
21:bb:8b:27:ee:7d:f7:0c:b5:00:88:af:d3:95:25:50:7d:67:
d8:93:81:ba:b3:02:03:41:de:d0:8d:e8:3b:f1:b2:ca:8e:30:
3e:91:7f:6b:78:9b:4f:e4:81:49:3b:8c:90:ab:4a:5c:73:55:
e0:f8:09:83:95:2c:ff:96:a7:c2:47:31:cf:d7:47:77:5c:84:
37:55:62:35:43:72:e6:2e:5c:c9:2d:52:3b:6c:fc:c4:40:3f:
c4:b4:f6:ee:32:54:c9:dc:94:9a:31:bc:bf:84:e0:85:f3:2f:
d8:77:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:23 2025 by rpki-client