Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/44a40d57-0366-3f3f-bf95-56473d85c9be.roa
File: 44a40d57-0366-3f3f-bf95-56473d85c9be.roa (raw, json)
Hash identifier: eCiF9Icpyqd6raOXaJKzrpOJeDMIli3Qd6c2xwz5soM=
Subject key identifier: 50:0D:1A:48:B7:AA:23:A6:1A:42:CC:C6:0F:78:9D:8A:E8:85:03:50
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848530AE05928330FDD129B0040
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/44a40d57-0366-3f3f-bf95-56473d85c9be.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 130.137.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e0:59:28:33:0f:dd:12:9b:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=5f76cd77-af32-4a97-877e-bece1bae2981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:95:ae:f1:ce:bc:c6:fe:f2:10:9d:0c:9d:
31:ee:bf:7c:ed:85:1d:ad:7a:af:fe:91:a4:ab:16:
66:56:91:bd:e0:b5:1f:ca:bc:c7:19:a3:28:b5:c9:
b4:ff:a1:53:2e:58:52:88:fd:9f:f1:43:8e:0b:6e:
d9:70:b0:3d:ce:e7:e4:14:c5:f5:a8:fa:f5:61:03:
31:82:0b:51:d3:91:5e:31:2b:31:29:30:59:87:b5:
90:20:d0:7d:4c:ba:fc:43:5e:8e:56:9a:5e:62:91:
6c:1b:0f:be:73:42:2c:42:e6:fb:61:4f:64:58:9e:
76:d1:1c:ca:36:a6:2b:16:53:9e:05:85:7c:07:a3:
c7:62:40:f8:26:8a:3e:3b:36:2a:4d:95:0c:b6:3d:
0b:d4:c6:f2:d1:09:89:83:bc:4e:f3:25:a2:17:99:
1a:0c:d1:b8:49:8d:ce:85:e5:58:2d:c8:6f:2f:04:
59:92:08:76:9c:6d:7d:e5:b9:b9:1e:a2:52:74:c3:
ea:d9:d5:5b:d5:0b:3d:ea:a0:3a:b1:25:a5:4a:6a:
ce:1b:ca:32:f5:d4:19:2e:6a:d4:66:b7:6d:3b:fc:
68:c7:78:34:84:71:59:a7:ae:4c:0e:b7:e6:bc:4c:
3f:23:da:1f:26:89:bc:73:40:05:1d:74:4d:89:5a:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:1A:48:B7:AA:23:A6:1A:42:CC:C6:0F:78:9D:8A:E8:85:03:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/44a40d57-0366-3f3f-bf95-56473d85c9be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:50:d0:06:d6:2f:12:67:57:9e:6a:5a:3d:e4:85:32:5c:26:
ef:59:91:82:c6:f9:1d:1b:b4:ac:a6:e2:c9:be:02:16:07:e7:
a5:39:48:eb:a9:b1:1c:5e:ea:2d:9a:e4:65:4f:c7:ad:7b:05:
1e:3d:15:de:a0:5c:07:28:98:c7:f8:0a:a0:62:ad:d4:0e:2d:
b1:07:4c:54:11:da:e1:24:7b:1d:0c:08:25:37:41:a4:b0:64:
a8:1e:ba:7c:06:c7:9d:99:ac:e5:1c:48:82:19:4d:d6:15:f5:
da:8f:1e:a7:4f:21:fe:6a:18:43:e4:37:a3:0e:55:ba:0d:5e:
b6:47:94:27:f1:5f:d8:32:5d:51:21:8c:b9:57:31:eb:fd:71:
85:c3:b3:31:fc:5c:ae:a1:e5:40:a2:e8:08:59:25:bd:99:29:
1b:1b:e0:4c:5d:82:5c:aa:c3:55:d6:e3:b3:5f:70:33:cf:d9:
f1:8d:80:10:cc:69:25:32:a4:42:a2:02:2d:62:e0:f8:79:7c:
6e:2e:79:c2:02:de:b2:e9:b8:4f:54:1a:ac:23:6e:ae:01:0c:
1e:1c:a0:42:9c:34:8d:bd:78:79:94:48:bb:9f:a8:3e:2b:df:
76:fc:29:3d:eb:0c:8b:dd:a7:45:c6:1e:5f:f3:93:30:3a:3c:
ba:c2:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:16 2025 by rpki-client