Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa
File: 564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa (raw, json)
Hash identifier: TUY04sPxrZB+27m7qHSITQC75OYJw8xwfVnnkmotwLc=
Subject key identifier: 76:2D:02:30:35:88:4A:A4:96:46:5C:B1:4D:0D:40:A7:AA:FC:DF:F2
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848388552A897D7E7225A894480
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:52:a8:97:d7:e7:22:5a:89:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=bc367a38-f944-4479-b60b-e7f24f0c5482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:ac:8e:5f:52:77:f2:d1:f1:97:d4:be:06:
3b:1c:07:e7:e3:be:7d:97:b9:18:f6:42:53:13:18:
dd:10:19:4e:84:83:17:ce:e9:50:8b:90:04:77:8b:
3f:2d:97:b4:b5:69:70:10:be:23:9d:23:09:4c:0a:
d8:26:bd:ac:ab:b5:fd:69:a0:ec:a2:df:f2:92:49:
91:e1:cf:93:35:5c:c3:36:13:cd:63:d0:8f:be:08:
a4:b6:7a:ff:b1:30:ef:d6:cd:f0:2b:64:9a:bb:81:
b8:85:fd:d8:60:7d:49:a9:17:ea:54:c9:d7:84:02:
76:6a:84:e9:bd:6c:bb:4a:0f:6b:47:8d:3b:ab:24:
d7:f0:bd:bb:d8:8f:0c:04:da:1d:2a:d2:cc:cd:6c:
b1:ee:7a:7d:03:36:25:cb:d1:5a:d1:11:54:c2:aa:
e7:4b:96:4b:17:96:83:35:3a:77:25:0e:a1:fe:ba:
e7:f6:be:f7:33:9a:e9:59:4f:8b:08:e8:8c:a6:f3:
d7:9f:e5:c9:da:cc:a9:12:01:b1:32:10:cb:6c:66:
f9:42:07:b0:24:d5:6e:46:1d:c9:c6:13:d0:88:7c:
1e:5a:9d:a7:f9:fd:67:50:b6:6e:a6:d6:5d:2b:9f:
6f:67:5c:a6:fc:a9:00:3a:8d:03:6c:b7:65:1b:b7:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:02:30:35:88:4A:A4:96:46:5C:B1:4D:0D:40:A7:AA:FC:DF:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/564f8912-55f1-38aa-9aa6-5e3d7e99ff21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ba:79:fa:43:20:52:e7:5b:38:d0:ad:7a:74:6e:73:3c:b9:
06:49:c2:79:55:1e:78:6e:d3:c5:71:a5:24:2e:75:3b:a8:a7:
f9:b6:7a:78:09:75:d7:0c:10:60:e8:fe:37:a1:da:23:12:69:
6a:a8:a2:84:9e:c6:54:c0:03:b8:4d:03:78:1a:9b:c4:57:6f:
ce:9f:d0:f4:6b:8f:13:b2:a7:bf:0e:db:2d:41:0b:f8:51:c4:
84:25:1f:d2:e8:54:35:08:77:98:37:ec:41:9b:01:65:78:dc:
26:73:d3:68:6e:f2:03:8b:dd:37:7a:29:6e:06:d1:37:cd:bc:
c4:05:85:d3:1d:50:67:e0:20:76:82:42:fb:7b:2c:ea:47:9f:
e5:86:5b:a2:7d:f1:75:f4:86:f6:c1:97:0f:cc:25:4e:22:c6:
4f:74:62:ff:8e:a7:f4:4a:10:d2:58:ac:c8:2f:c7:d5:79:a9:
9a:73:a8:86:45:c8:19:5e:b7:ee:5d:8a:79:e8:67:9e:22:10:
43:21:eb:d9:b1:66:c6:ae:d1:ae:48:fd:5f:81:58:50:39:ec:
a4:b9:b3:dd:c7:4e:09:f0:88:d3:5a:d8:f2:33:4c:7a:a7:0b:
f4:c6:2f:2b:a9:88:49:71:98:27:13:71:fd:35:20:8f:21:8a:
c1:f7:96:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVKol9fnIlqJRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YmMzNjdhMzgtZjk0NC00NDc5LWI2MGItZTdmMjRmMGM1NDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32usjl9Sd/LR8ZfUvgY7HAfn4759l7kY9kJT
ExjdEBlOhIMXzulQi5AEd4s/LZe0tWlwEL4jnSMJTArYJr2sq7X9aaDsot/ykkmR
4c+TNVzDNhPNY9CPvgiktnr/sTDv1s3wK2Sau4G4hf3YYH1JqRfqVMnXhAJ2aoTp
vWy7Sg9rR407qyTX8L272I8MBNodKtLMzWyx7np9AzYly9Fa0RFUwqrnS5ZLF5aD
NTp3JQ6h/rrn9r73M5rpWU+LCOiMpvPXn+XJ2sypEgGxMhDLbGb5QgewJNVuRh3J
xhPQiHweWp2n+f1nULZuptZdK59vZ1ym/KkAOo0DbLdlG7fFBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYtAjA1iEqklkZcsU0NQKeq/N/yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTY0Zjg5MTItNTVmMS0z
OGFhLTlhYTYtNWUzZDdlOTlmZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFi6efpDIFLnWzjQrXp0bnM8uQZJwnlVHnhu08VxpSQudTuop/m2engJ
ddcMEGDo/jeh2iMSaWqoooSexlTAA7hNA3gam8RXb86f0PRrjxOyp78O2y1BC/hR
xIQlH9LoVDUId5g37EGbAWV43CZz02hu8gOL3Td6KW4G0TfNvMQFhdMdUGfgIHaC
Qvt7LOpHn+WGW6J98XX0hvbBlw/MJU4ixk90Yv+Op/RKENJYrMgvx9V5qZpzqIZF
yBlet+5dinnoZ54iEEMh69mxZsau0a5I/V+BWFA57KS5s93HTgnwiNNa2PIzTHqn
C/TGLyupiElxmCcTcf01II8hisH3lhg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:41:59 2025 by rpki-client