Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa
File: a250dd3e-19db-319a-9217-e8d1061abdec.roa (raw, json)
Hash identifier: kjkkzL9BS24ZtsoOlWzJFmT2KzseXb2LQZet1If0+zE=
Subject key identifier: 1B:CB:CC:8D:99:A4:66:4F:B9:60:AF:7C:02:5A:34:78:B1:42:C7:7B
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483E1AAE82FAF9C6F07F522880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ae:82:fa:f9:c6:f0:7f:52:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=42f54579-e092-40c9-9027-b030ec514dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:fa:d8:bd:06:71:3c:a2:23:f3:0c:fb:a5:
49:59:18:c9:c4:68:4e:2f:1b:1c:1b:43:35:50:9f:
5e:31:e7:6e:b0:57:2a:7b:61:ab:16:28:f7:69:d6:
76:a1:84:05:98:c7:e1:99:36:90:22:ee:a8:4b:34:
f7:45:a8:1a:3f:de:41:3d:45:c6:6e:78:74:9a:15:
be:49:cd:b9:10:46:29:bc:9d:e3:94:9b:3f:fa:18:
cd:88:d3:15:38:d8:e9:2d:4e:fa:aa:53:0e:43:60:
61:a0:46:19:bb:e7:f5:d6:d4:0d:dd:4d:b1:e9:f1:
2d:72:7e:a3:95:7f:4c:e6:f7:24:29:12:a5:ec:63:
2e:49:87:24:ec:83:5a:19:bc:35:b5:01:85:02:5a:
1e:fb:fa:f3:38:dd:a3:86:42:37:8f:34:91:b1:f4:
50:81:0c:ad:15:7f:ed:7a:f0:ef:4f:bd:c9:23:35:
0c:e9:5d:23:48:40:aa:55:40:47:5e:85:e7:7a:fc:
eb:c7:db:88:3f:b8:ff:88:77:f8:f7:8c:5c:1e:94:
f1:63:c1:82:03:78:62:21:4a:66:b4:92:cb:ff:67:
d9:7b:25:78:3a:1b:44:26:81:e6:91:b8:98:60:f2:
9b:f8:a8:b4:d4:f9:0b:05:29:74:ad:1d:14:45:38:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:CC:8D:99:A4:66:4F:B9:60:AF:7C:02:5A:34:78:B1:42:C7:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:93:c9:18:b8:1f:ff:b8:99:ea:16:30:9b:ea:08:af:f8:21:
30:73:26:2f:9b:6c:94:32:2c:c2:cd:3b:85:30:c1:2d:87:03:
a8:1a:96:83:5b:b1:86:da:b2:7e:0c:2a:0b:54:e1:1d:92:06:
d5:70:ad:f3:d3:b1:fd:03:f8:81:43:28:fc:22:6b:6d:53:77:
de:f2:9f:97:10:22:a7:39:f6:1f:a2:83:c1:b8:4b:45:57:87:
86:aa:87:f5:2e:5f:f7:9b:e3:9d:bd:3a:60:82:8f:3e:27:9a:
cd:7b:af:6e:35:3e:89:ba:c2:31:bd:b0:4f:46:c8:e0:fb:e5:
15:82:31:a3:26:96:c9:ae:26:59:68:25:a0:75:d8:62:fa:26:
ca:52:6b:78:55:2a:49:65:99:d0:92:54:1f:b6:43:ea:d0:0f:
66:00:ae:24:74:28:35:9b:8a:bf:e2:a7:14:4d:01:12:c4:27:
4c:5c:8c:fb:a6:ca:f7:c5:18:57:46:84:91:e1:48:b8:45:3b:
80:70:ad:49:36:49:38:49:d2:be:9a:65:d4:ed:18:e1:73:51:
e7:b8:a0:85:64:d4:58:22:5a:93:cc:95:69:85:39:b9:46:30:
15:2c:68:e5:c8:b9:46:f2:8d:a3:5a:ba:58:28:6d:ab:6b:f1:
af:65:c6:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gq6C+vnG8H9SKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
NDJmNTQ1NzktZTA5Mi00MGM5LTkwMjctYjAzMGVjNTE0ZGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JD62L0GcTyiI/MM+6VJWRjJxGhOLxscG0M1
UJ9eMedusFcqe2GrFij3adZ2oYQFmMfhmTaQIu6oSzT3RagaP95BPUXGbnh0mhW+
Sc25EEYpvJ3jlJs/+hjNiNMVONjpLU76qlMOQ2BhoEYZu+f11tQN3U2x6fEtcn6j
lX9M5vckKRKl7GMuSYck7INaGbw1tQGFAloe+/rzON2jhkI3jzSRsfRQgQytFX/t
evDvT73JIzUM6V0jSECqVUBHXoXnevzrx9uIP7j/iHf494xcHpTxY8GCA3hiIUpm
tJLL/2fZeyV4OhtEJoHmkbiYYPKb+Ki01PkLBSl0rR0URThgSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvLzI2ZpGZPuWCvfAJaNHixQsd7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTI1MGRkM2UtMTlkYi0z
MTlhLTkyMTctZThkMTA2MWFiZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6TyRi4H/+4meoWMJvqCK/4ITBzJi+bbJQyLMLNO4UwwS2HA6galoNb
sYbasn4MKgtU4R2SBtVwrfPTsf0D+IFDKPwia21Td97yn5cQIqc59h+ig8G4S0VX
h4aqh/UuX/eb4529OmCCjz4nms17r241Pom6wjG9sE9GyOD75RWCMaMmlsmuJllo
JaB12GL6JspSa3hVKkllmdCSVB+2Q+rQD2YAriR0KDWbir/ipxRNARLEJ0xcjPum
yvfFGFdGhJHhSLhFO4BwrUk2SThJ0r6aZdTtGOFzUee4oIVk1FgiWpPMlWmFOblG
MBUsaOXIuUbyjaNaulgobatr8a9lxlA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:12 2025 by rpki-client