Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/65e36720-8b15-3faf-8d42-8de4199f4800.roa
File: 65e36720-8b15-3faf-8d42-8de4199f4800.roa (raw, json)
Hash identifier: sJjzawFDb8zPRkZzxJwrrfPCO7d94fgxoLLF9IA+Ou4=
Subject key identifier: 7F:17:3F:FE:E2:35:B0:4C:74:A9:EC:84:81:A6:ED:7A:58:FE:84:23
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848388552892474AD0EBE85E140
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/65e36720-8b15-3faf-8d42-8de4199f4800.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:52:89:24:74:ad:0e:be:85:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=22bd7020-a195-4eae-8e57-81ee7c5fce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:81:9f:75:2f:4e:21:b1:2a:bf:07:11:e5:
0c:23:f6:11:95:81:21:12:b7:fc:e3:5c:7c:db:4c:
ba:6c:d6:5f:7c:d1:19:32:67:7c:0f:02:77:4e:1d:
25:f1:d4:43:c8:7c:d8:7c:79:31:b0:ea:c0:46:20:
0f:8c:d1:da:ee:e9:96:63:41:c1:f2:e2:bc:7b:26:
ed:f2:29:18:19:98:ee:b0:6d:04:a0:bc:03:a0:a3:
99:52:84:ad:69:81:c1:dc:41:11:b5:d2:b1:0c:09:
1e:57:b9:1c:f0:5d:8b:a5:1b:8e:06:de:d9:a8:5e:
96:a6:5b:8e:c7:f4:7c:3d:42:cb:dc:9a:2e:90:f6:
5f:9e:ba:7f:7d:f8:6d:d5:2a:24:33:ac:c6:71:23:
2c:2d:bd:c2:b3:39:d7:88:89:94:38:07:fc:85:16:
b8:4d:f1:ab:7f:43:07:9a:b9:52:e9:79:3d:64:56:
a4:4f:e8:91:f3:6f:8e:56:b4:c9:f5:2a:b8:77:14:
29:81:df:f3:fd:32:da:24:07:b1:0f:87:09:83:53:
c1:a6:71:9c:30:bd:e7:24:0b:c2:95:79:72:2e:4b:
be:69:2a:a2:ab:58:d5:66:4e:24:3d:bc:eb:de:96:
b8:3a:e5:9d:71:e9:17:a1:91:0a:ad:9d:5c:7b:2c:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:3F:FE:E2:35:B0:4C:74:A9:EC:84:81:A6:ED:7A:58:FE:84:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/65e36720-8b15-3faf-8d42-8de4199f4800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:86:20:5e:9c:ff:f0:e6:93:c7:b3:54:6f:56:30:f8:61:02:
bd:70:99:05:79:42:4f:d9:c1:54:42:e6:96:9f:5d:93:73:14:
f9:aa:e6:90:47:e9:c1:84:91:47:53:0e:31:27:4d:e6:e6:bc:
c7:a5:a0:ac:2b:ca:86:e7:76:c5:78:7c:5b:14:a1:28:a9:7b:
9c:11:4a:5c:0f:db:b1:01:20:a7:90:60:ca:71:b9:d5:be:02:
3d:c2:76:c2:e0:a1:58:d7:bc:29:6f:45:dd:8a:37:42:03:22:
e6:0f:78:f4:cd:a5:26:4c:83:3b:ce:a2:cd:fb:1f:11:0d:4b:
5f:10:3f:78:af:74:7b:00:30:3f:4e:45:f5:67:17:b6:0e:aa:
e1:c9:d5:75:ab:03:d9:d2:c7:9b:2c:1a:f7:f8:a1:78:8f:26:
57:56:49:28:24:bf:d9:3c:29:31:b8:f2:dc:3d:29:1c:e1:e4:
ae:01:40:6d:ad:e0:59:54:d5:11:44:75:32:f9:f7:5d:85:8b:
24:28:fe:9d:3e:b7:b6:69:04:00:48:43:1e:f7:8f:c4:9b:20:
e7:b1:ca:52:26:8d:ff:86:a0:eb:8a:34:e3:32:4c:fe:21:75:
ef:30:29:d6:3e:23:c1:b6:3e:71:b3:7c:eb:87:21:79:3b:7a:
d3:32:14:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:28 2025 by rpki-client