Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa
File: a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa (raw, json)
Hash identifier: 4DDeUNoQD9GnW4q1C2P6x+p22AgdJKcBkMMkAMQEvPk=
Subject key identifier: 79:65:8D:BD:15:B0:71:CB:83:5F:4F:C7:B9:87:00:05:C8:35:B1:AF
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483885516D19E837E2BA971900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 130.137.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:51:6d:19:e8:37:e2:ba:97:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=2d4e3464-d43a-4781-b4c6-015a95a464fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e5:72:0f:32:56:08:8b:ae:33:86:27:13:9d:
e0:1a:13:79:fc:a6:d6:9c:43:20:64:01:55:1e:53:
22:a9:81:44:c8:eb:2d:b1:7d:a6:60:e4:1b:27:5b:
5f:2d:36:34:bf:0c:6e:0b:49:aa:6a:d7:7d:cf:4a:
69:e4:5c:15:12:f5:3d:d8:7b:4e:b8:58:ac:a7:f4:
91:98:9e:c8:66:ac:4b:0f:71:f2:f9:9e:21:9a:f4:
b9:81:a0:59:21:ac:c3:0f:a8:41:08:e6:30:02:d8:
74:e5:bc:73:96:62:ab:c1:a7:44:35:d8:2e:4c:6a:
68:a6:1e:77:ae:f6:3a:cb:18:09:dd:5b:8e:e4:6b:
14:e0:1f:d3:3a:5f:88:a3:71:91:e2:67:5e:5d:79:
6a:62:27:20:cc:7c:4c:c0:5e:38:db:07:96:01:4a:
57:24:47:91:10:bf:b8:48:29:a2:0a:9b:c1:58:c8:
a5:15:7d:77:0d:60:13:70:ff:cc:da:52:d7:fe:32:
62:6f:92:a5:0b:6c:5f:34:a6:8c:94:05:ed:1b:4c:
bb:fc:8c:87:3b:30:ca:1a:6d:60:f7:3d:20:14:ac:
7a:97:95:e0:fe:5e:ac:2f:b3:13:8c:ec:85:6b:f9:
c3:08:2e:f1:26:84:77:9e:48:ef:69:59:f1:8f:ed:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:8D:BD:15:B0:71:CB:83:5F:4F:C7:B9:87:00:05:C8:35:B1:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:29:fa:c4:db:d1:a9:3d:1e:f6:89:27:e8:2f:3e:bb:74:da:
59:f0:1f:96:2d:23:ba:e3:09:35:c0:99:74:aa:98:e5:16:75:
96:dd:87:17:53:dc:50:8c:e4:45:7a:44:ab:22:0d:5f:b6:55:
83:38:36:48:9a:64:39:1e:58:34:39:71:45:d7:61:32:6e:13:
34:49:b9:fb:e8:b5:2a:1d:cf:fd:ed:ce:75:d4:43:ba:25:f9:
e5:6a:95:b3:f8:f0:02:19:4f:75:76:9e:c4:fb:f8:bd:29:2e:
7e:df:5e:d7:e8:99:cb:99:73:9c:44:78:69:80:95:4f:59:b5:
06:48:82:a3:20:cd:f8:eb:30:7d:41:f3:6c:39:e9:c2:28:20:
3f:1e:d3:25:ba:b0:15:ec:1f:d1:24:26:16:60:2a:57:c4:ab:
c0:6d:1c:49:45:9e:0f:44:2f:bc:0a:ab:24:09:a6:d7:7d:d6:
21:e3:64:c1:01:58:a2:62:58:87:26:06:33:70:90:f5:05:04:
52:89:b5:4a:c7:5e:8c:00:b2:70:bd:6a:1d:b6:75:96:cf:88:
ca:11:c2:be:26:d7:db:31:48:c1:6c:e9:ea:86:a5:03:25:98:
ce:ea:50:e2:12:31:52:f3:ac:d2:9a:69:17:0d:ad:43:27:c6:
87:95:6a:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVFtGeg34rqXGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MmQ0ZTM0NjQtZDQzYS00NzgxLWI0YzYtMDE1YTk1YTQ2NGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uVyDzJWCIuuM4YnE53gGhN5/KbWnEMgZAFV
HlMiqYFEyOstsX2mYOQbJ1tfLTY0vwxuC0mqatd9z0pp5FwVEvU92HtOuFisp/SR
mJ7IZqxLD3Hy+Z4hmvS5gaBZIazDD6hBCOYwAth05bxzlmKrwadENdguTGpoph53
rvY6yxgJ3VuO5GsU4B/TOl+Io3GR4mdeXXlqYicgzHxMwF442weWAUpXJEeREL+4
SCmiCpvBWMilFX13DWATcP/M2lLX/jJib5KlC2xfNKaMlAXtG0y7/IyHOzDKGm1g
9z0gFKx6l5Xg/l6sL7MTjOyFa/nDCC7xJoR3nkjvaVnxj+128wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlljb0VsHHLg19Px7mHAAXINbGvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTkxMmYwYzktYzI0ZS0z
MjY3LWFhZDEtMmZlZmJhZjRiZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoncMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIp+sTb0ak9HvaJJ+gvPrt02lnwH5YtI7rjCTXAmXSqmOUWdZbdhxdT
3FCM5EV6RKsiDV+2VYM4NkiaZDkeWDQ5cUXXYTJuEzRJufvotSodz/3tznXUQ7ol
+eVqlbP48AIZT3V2nsT7+L0pLn7fXtfomcuZc5xEeGmAlU9ZtQZIgqMgzfjrMH1B
82w56cIoID8e0yW6sBXsH9EkJhZgKlfEq8BtHElFng9EL7wKqyQJptd91iHjZMEB
WKJiWIcmBjNwkPUFBFKJtUrHXowAsnC9ah22dZbPiMoRwr4m19sxSMFs6eqGpQMl
mM7qUOISMVLzrNKaaRcNrUMnxoeVarQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:05 2025 by rpki-client