Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a163eac-bf01-3e34-87be-8eaea402a1aa.roa
File: 9a163eac-bf01-3e34-87be-8eaea402a1aa.roa (raw, json)
Hash identifier: /VKMQReNPF2Ub8hyZotBw8zq5BBc+9ybuxT9DxkogaA=
Subject key identifier: E3:E4:2D:E6:65:26:61:6C:96:7B:90:35:D1:5C:8D:22:B0:04:68:6A
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483E1AADA0E8C2AC7536DA2540
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a163eac-bf01-3e34-87be-8eaea402a1aa.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ad:a0:e8:c2:ac:75:36:da:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=0f651200-7e28-4ede-abad-f85eaf52c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:5b:f7:fa:fe:5c:63:53:81:1e:15:77:c6:
e8:8d:73:5a:bd:1c:54:d4:b9:1a:6f:77:ac:31:86:
cd:96:13:48:d9:4d:e8:3f:10:6e:a2:b4:fd:d6:36:
73:3a:cb:87:31:2b:46:71:40:e4:0e:c8:6e:57:aa:
b6:ad:35:18:a8:62:7e:be:c6:28:36:d3:42:75:3a:
41:10:eb:c5:b1:2f:5b:6f:46:2b:12:41:f6:1a:6a:
32:e5:ae:83:aa:f6:7c:58:4a:a1:7c:1d:1d:cb:d9:
46:19:32:1f:d7:48:90:9a:5d:57:8f:90:70:04:18:
43:80:be:2d:07:d8:10:40:6f:6c:c9:64:2a:02:c2:
00:9a:10:a0:3e:1c:52:89:48:7f:ed:f2:e6:85:90:
7f:2b:72:fa:87:f8:35:6f:d9:a3:b4:40:6d:55:9b:
a8:04:ac:bc:69:30:f9:83:9e:42:f4:0b:ab:98:bd:
06:e0:95:47:a9:dc:e9:6f:1d:1b:cc:2b:c2:4c:1c:
b6:95:83:c6:17:9d:e7:c9:a0:31:74:2c:d1:6c:d8:
a4:f9:2d:cd:27:ab:7d:e9:b1:db:e4:8f:e2:a0:fc:
f1:6e:4a:7d:e5:b1:29:ea:5c:4b:85:79:3b:29:bd:
02:51:d1:b6:db:ff:b1:68:fd:e8:a4:e5:3f:74:2b:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:2D:E6:65:26:61:6C:96:7B:90:35:D1:5C:8D:22:B0:04:68:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a163eac-bf01-3e34-87be-8eaea402a1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e6:98:bc:90:cd:b2:34:5c:7b:fc:cc:63:54:7c:f1:60:68:
33:74:2c:c5:30:ef:e3:78:57:e3:bf:b1:79:b4:1e:e6:98:7a:
c0:fe:a5:02:11:7a:ad:be:d9:10:58:17:18:ba:5e:1e:3a:ef:
fb:13:95:57:6e:74:61:5e:1e:ef:8a:c0:78:29:70:80:33:06:
9a:15:b6:df:fd:be:da:02:f5:93:14:50:f3:9e:38:cf:79:30:
92:a8:0d:92:19:bd:7f:09:2f:cc:b4:31:13:ca:2e:03:b7:d0:
a2:0d:ab:fe:49:20:32:73:dc:c0:ef:9d:d0:f7:33:4c:ab:bd:
a1:fb:0d:0c:d0:8f:8d:19:2a:40:99:7f:6f:2c:52:68:c4:8f:
df:66:3d:7e:2f:5a:ee:64:f4:a1:d3:b2:03:d5:92:e7:0e:02:
c4:e4:d5:48:8e:d9:b8:d0:00:ef:b5:27:7a:2f:13:ee:5b:b7:
b8:f0:89:d9:24:08:43:c1:09:53:63:b9:87:e7:4c:36:ef:f5:
20:1a:73:67:e6:ed:82:da:bf:63:41:2c:aa:5c:7b:27:be:2e:
09:b9:08:85:09:d9:00:39:d0:42:7c:ff:30:67:db:d2:ca:da:
be:41:c3:3e:e0:3f:da:04:e5:d8:17:73:0b:3e:93:23:f7:36:
6f:5d:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:18 2025 by rpki-client