Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa
File: 9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa (raw, json)
Hash identifier: Cb3t5t6HU6mCIrpKfwyxssZm+bcnwD06suo56DTDiOk=
Subject key identifier: 8D:F2:29:8A:97:37:CE:81:A8:3F:0C:04:B8:DA:7F:D7:B6:33:D3:D3
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483E1AA8149BBB83D3CA22BB80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a8:14:9b:bb:83:d3:ca:22:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=a8c0698d-a144-4d7a-b839-df24f018f607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:d9:5d:3b:27:b8:14:c2:79:04:b2:6b:6f:
55:64:26:5e:7a:1e:bf:36:15:93:8d:af:e5:3a:94:
06:a1:55:64:2d:10:77:a7:bd:31:d5:9f:0d:7c:65:
e9:f0:35:59:ba:df:a8:7c:08:87:21:5d:27:23:2e:
39:e5:55:55:ed:bc:9f:7b:aa:39:e6:4a:e1:96:85:
78:fd:f7:da:06:f7:dc:99:07:a1:45:56:a8:d1:07:
33:5c:3a:38:b2:84:16:83:51:74:15:c9:6f:85:21:
24:8b:9b:f2:39:97:2f:28:86:97:ac:26:46:a9:db:
06:ab:ac:09:d4:63:57:32:fb:e4:09:a9:76:d4:77:
39:b6:de:eb:7e:f8:2d:fd:0a:a9:fd:f6:d2:2e:e4:
14:e9:fb:4c:ca:1b:6d:a0:a8:dc:6c:ee:4d:21:80:
54:af:8a:08:14:79:ec:97:e1:b3:49:4b:aa:f8:8d:
67:03:cc:f4:89:53:4d:6a:dc:3c:43:d8:07:3b:e5:
29:b9:98:50:07:85:2e:cb:66:c5:14:0a:80:b0:a0:
21:0c:2b:c3:95:c7:7b:38:59:be:91:ec:1f:37:69:
7c:69:30:75:cf:27:78:11:16:b8:8c:53:80:6d:9f:
54:a5:be:7c:3a:fc:18:5a:05:4a:9f:35:94:69:33:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:29:8A:97:37:CE:81:A8:3F:0C:04:B8:DA:7F:D7:B6:33:D3:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c3c68f8-d4f6-3999-8179-f2d6f96e82b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c7:27:3f:ac:a6:75:ef:cf:d1:86:7f:93:3d:9d:af:c5:b1:
20:73:92:98:d8:07:74:13:16:7f:b1:75:e2:71:1a:18:ce:1b:
95:3b:cb:83:06:ca:b4:5e:59:6e:61:3e:7c:41:61:3b:f0:43:
fd:2f:4c:b2:e4:8d:64:3c:a7:40:53:7f:7c:39:3c:70:76:96:
14:46:7f:1b:dc:7b:03:f5:2b:c1:21:45:13:61:7f:62:4e:50:
8c:4b:f6:31:cd:c3:26:11:e0:08:c4:8e:e6:89:74:c3:ec:9c:
58:8f:2c:f9:5c:1d:62:67:d6:f4:fc:13:88:84:46:51:4c:3a:
b1:c1:6c:af:ff:b2:1a:84:04:b5:4f:2f:4c:e8:45:9e:e0:71:
1b:0a:4e:5b:91:2c:a2:b7:d9:98:d4:a1:a5:5c:e7:45:88:77:
76:12:ed:2e:b8:a1:b2:e6:c2:89:8d:da:8f:6d:b4:e0:3b:1e:
8c:fd:36:37:64:5e:52:11:42:47:69:01:36:d5:ef:d2:01:26:
81:d6:ee:78:71:0e:3a:93:17:97:8a:f7:fc:67:ff:65:bd:39:
ef:4c:73:66:b5:4b:62:3f:1e:fd:39:ae:40:b3:5e:6d:c4:12:
4e:e5:fa:1e:a5:74:a0:db:fb:f6:e2:a8:52:f6:8d:55:5c:60:
73:f3:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:46 2025 by rpki-client