Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa
File: 8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa (raw, json)
Hash identifier: KuC77bBdmYZY3iPm8p9J+p8CBPHGEBBMj1dOfAG7M3Q=
Subject key identifier: D2:93:F0:1A:FB:4C:BB:58:62:01:FF:BC:0C:27:26:51:B4:BE:B0:CF
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584827C5335504D15B556DAFAC00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 130.137.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:33:55:04:d1:5b:55:6d:af:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=7c09ce4e-571b-456e-ba31-130602976239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:ee:42:14:8f:f2:0e:b2:54:1c:da:0b:37:
e7:99:26:e3:66:88:30:f6:2b:8a:dc:7d:54:bd:06:
f9:b7:f3:9c:1d:01:0b:5a:64:b4:fe:da:4a:37:02:
de:f5:2b:b6:36:8e:f0:4a:71:35:3f:0c:90:bd:5b:
0b:9b:5e:23:9f:56:e6:8d:4a:13:2b:b2:c9:b8:ef:
89:6b:eb:51:76:e2:66:c5:1d:a7:81:de:ca:44:1d:
23:b6:33:11:64:14:e3:24:15:26:be:69:59:13:52:
31:b4:40:71:da:c7:88:e5:cf:c6:52:1d:dd:e9:98:
fd:7d:90:4a:be:bc:60:c0:f1:51:cd:31:e5:bf:d3:
d1:ab:a2:38:af:cf:11:10:fc:54:d8:dc:60:9b:52:
b8:bc:4b:04:ed:d3:80:eb:79:15:25:6a:7b:58:0f:
2f:44:20:73:09:25:f3:c0:be:00:3f:2c:f0:95:65:
e9:2c:18:fa:91:92:2a:6a:4f:e8:e2:a0:d4:92:8c:
4b:2f:fd:31:37:04:35:7a:9e:53:40:df:15:b4:5f:
37:95:33:76:5b:8b:31:1f:fb:7a:43:44:ec:38:2e:
bd:95:66:71:05:bc:0f:6e:ec:24:a1:1b:33:d7:10:
68:fb:28:7b:d9:7a:6b:13:01:1d:b5:d4:bc:3f:71:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:93:F0:1A:FB:4C:BB:58:62:01:FF:BC:0C:27:26:51:B4:BE:B0:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f0f324e-d4ea-31a0-b3d8-152233d2c901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:b8:eb:35:a2:1f:9a:45:33:c1:0d:8c:a1:33:b3:02:fe:6a:
dd:22:c2:db:0a:e4:56:75:a9:75:85:0a:35:8a:b0:5a:fe:9b:
22:cf:e6:bd:26:1a:df:1b:43:e1:86:e0:82:76:db:f6:4e:d0:
e1:51:d8:28:e9:47:26:bb:49:f4:1b:71:f9:c8:91:c9:73:da:
6d:5c:c3:0f:34:5b:65:f0:8f:27:a7:aa:87:bf:23:f6:be:95:
ff:a6:1f:6e:74:9f:81:e9:50:89:44:df:49:bf:fb:00:9c:e2:
76:03:12:ed:c5:e0:3d:58:8e:cf:0b:e9:fc:f8:4d:2f:44:11:
e6:8d:ad:66:6c:29:f0:f1:12:0a:a7:33:af:f3:9c:50:27:b1:
e9:ed:13:9c:27:9b:ba:22:ef:e1:b9:01:bd:21:57:9d:aa:a0:
a9:d4:44:41:83:fd:8f:20:0d:fc:62:05:5f:c7:42:e8:98:d1:
c2:0f:04:55:02:56:fa:ff:a5:e3:c3:9b:6e:0a:1f:c2:cf:ee:
07:97:5d:6b:45:a0:18:02:16:5c:96:92:16:a9:26:32:61:50:
b5:49:fc:e7:f4:04:45:43:b8:c6:5e:5e:35:71:83:fc:ba:e5:
0f:ef:1e:11:2b:f9:c4:cc:46:83:46:ff:66:c1:2a:ba:20:db:
bb:c7:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:37 2025 by rpki-client