Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7b3186c2-6414-34b2-8137-40fa2d10f69d.roa
File: 7b3186c2-6414-34b2-8137-40fa2d10f69d.roa (raw, json)
Hash identifier: WXnf6v1jljfrLKxJnabZN3SidBxUmYpyfuf9IimPc3M=
Subject key identifier: 25:B6:3B:40:52:69:88:FF:8B:BA:4C:F9:C0:42:2C:94:86:58:1E:24
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FA8AA796F00E2434910C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7b3186c2-6414-34b2-8137-40fa2d10f69d.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 130.137.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a8:aa:79:6f:00:e2:43:49:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=df458e9a-4cd9-4ec1-b44d-bc195c501c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f2:10:d1:c0:5a:cf:28:71:16:3e:25:9e:92:
fc:64:62:cf:2c:ec:67:f7:d8:1d:54:2e:aa:96:c1:
e8:7b:e9:ae:4e:40:d9:ff:c1:45:8d:20:15:98:17:
e1:71:09:96:08:e9:25:1a:a9:0e:6d:2a:82:3a:80:
8b:44:9e:57:a2:48:9f:d1:6f:95:4c:8a:27:6d:a6:
52:b4:73:d2:00:27:5f:6a:6e:bc:a8:97:8a:36:04:
46:22:30:0e:51:89:af:e3:91:76:d1:89:35:63:0d:
cb:9f:00:74:8c:2a:a7:24:9f:b0:9c:62:c1:55:b9:
fc:9f:68:f8:a2:66:9c:d6:5f:84:d9:30:e6:d9:6f:
94:71:7b:0e:e9:54:44:1c:e6:fa:aa:3d:71:1b:4a:
9f:f6:16:51:fd:89:71:c1:1d:08:d9:81:36:e1:e8:
da:72:ee:a9:9f:e0:3d:35:fe:5c:3c:03:5e:48:b8:
e1:df:b7:6f:27:c6:59:1c:2f:35:8d:10:54:ca:78:
67:d0:23:0a:43:2a:7e:e7:7e:6d:b6:76:3c:37:c6:
35:ef:89:4c:78:d8:61:df:b9:5a:1b:5a:4d:95:ee:
72:09:a4:3e:52:44:e8:3c:c9:82:d4:22:5f:bf:ce:
ff:c0:95:a9:0e:68:6f:9d:df:1b:fc:b9:46:b7:8f:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:3B:40:52:69:88:FF:8B:BA:4C:F9:C0:42:2C:94:86:58:1E:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7b3186c2-6414-34b2-8137-40fa2d10f69d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:9d:8d:74:5e:1b:de:1e:98:4d:06:bf:bb:d3:0d:a2:ab:1b:
49:10:ef:77:fd:7f:c0:94:5f:77:a4:58:b3:b8:cd:d6:8c:2a:
b1:88:1d:f2:39:94:4e:62:2b:60:d5:bb:f4:38:8f:b5:90:33:
9c:d9:1a:8e:0b:17:24:b8:30:4a:a6:18:4a:f1:17:a7:0c:42:
5c:dc:9f:aa:bb:22:08:2f:52:54:36:d4:4f:cd:59:85:95:d4:
7c:2e:96:a0:e7:75:31:bf:c7:03:ab:65:3e:92:a7:1b:6d:c3:
55:29:f9:e8:67:fa:a5:f7:0c:ed:c5:f5:66:0c:17:a4:39:a9:
0e:4e:ea:e7:ef:6a:59:a3:e5:9b:6a:90:96:72:00:16:fc:04:
ea:44:78:61:23:e9:a3:7a:8b:ba:ab:e9:fc:cb:5a:0f:54:62:
f4:1e:4e:a9:e1:ed:5f:4f:5f:a3:26:2e:3d:e6:52:18:ad:a5:
3e:44:ca:df:e8:52:1b:81:e9:7d:67:85:6c:26:ee:62:d4:a3:
e4:19:47:7d:19:4d:32:6b:47:94:da:5b:52:5f:f6:26:7d:67:
ab:48:24:80:57:df:26:7d:29:33:b1:3a:36:77:2a:91:5c:89:
ee:c1:e2:7b:f2:75:e2:a4:97:de:85:df:88:e8:bf:4b:e9:7b:
9e:7d:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:25 2025 by rpki-client