Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa
File: adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa (raw, json)
Hash identifier: 3mw8iUuV98bVFNrrvRGQc/lYINYqOEvbcQFAg3QGKug=
Subject key identifier: DA:DB:D7:14:CB:02:39:17:F4:F9:2A:2F:DF:32:FD:6F:A7:76:C2:05
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FB34AC1D3E91CCD189880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 130.137.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b3:4a:c1:d3:e9:1c:cd:18:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=2b8fa45e-d7e5-4e33-a539-bb7c9cd577f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:71:fb:b6:6d:b1:5b:37:07:8e:30:02:5e:
38:79:89:1d:f1:f4:81:1a:43:78:24:60:f9:f7:fc:
a9:bd:27:2c:30:2b:4a:f9:28:03:5c:3d:4b:67:be:
ba:db:3e:dd:e6:8b:b7:c9:69:95:f5:3b:6a:44:23:
57:e8:9a:1e:49:36:e4:11:c8:ae:1c:92:cc:be:c5:
e8:33:d5:db:91:98:8e:b7:5b:23:f4:0a:15:5c:42:
9b:ab:fe:9f:2c:0f:75:87:a9:2a:97:53:a2:f5:44:
01:2d:d1:ea:ea:fe:68:24:83:ed:a3:c0:34:57:d8:
a0:fc:d2:73:cf:10:c6:b4:91:fe:3f:99:fc:0f:39:
2a:97:1e:89:f7:60:a0:d5:22:bf:0b:0b:c7:36:3d:
08:39:83:bf:8e:b5:f8:ec:ac:36:91:90:5f:30:8f:
7f:72:da:2f:46:ff:b4:2f:7e:b0:1b:8f:7a:65:dd:
17:6b:30:4f:5e:3c:64:7d:16:58:59:5a:9f:4f:c3:
0d:b8:35:fd:3d:f1:38:e9:87:75:8e:87:20:e0:e6:
9e:83:88:b6:df:86:ce:10:79:4e:3a:57:ed:cb:63:
65:bf:2c:b7:f5:57:75:c7:3f:ac:cd:a2:5d:48:f9:
11:75:e4:14:a4:94:6e:f3:15:55:7b:a3:6e:a8:7b:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:D7:14:CB:02:39:17:F4:F9:2A:2F:DF:32:FD:6F:A7:76:C2:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/adfaa667-9ef0-34b3-9ac6-dc27706cebc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:15:3e:aa:25:94:c8:d3:01:f6:1f:44:05:0b:a1:f5:b3:16:
c3:b0:67:0d:39:f4:de:c3:b2:b5:52:1c:24:f9:93:c1:a1:01:
8f:6c:0d:4a:4f:40:da:c7:dd:20:7c:7b:11:1a:66:b3:f9:a6:
9b:f0:17:db:22:3a:3c:c2:cc:05:54:75:1a:f4:d1:b8:4d:1d:
65:bd:2d:26:da:90:1c:7e:b9:74:ba:d1:e9:e6:e2:ee:3d:9d:
7d:bb:d5:2f:76:ac:15:6b:d4:b4:81:59:59:8a:52:b4:76:7c:
23:87:04:ce:a3:81:ee:bc:e6:7a:b9:84:c3:22:a9:f3:80:77:
e1:f1:af:7a:77:30:ff:fe:12:32:c0:40:31:41:15:f4:93:92:
a9:51:d8:59:09:6f:eb:21:d3:2b:b3:4a:2e:a0:fb:2a:67:8a:
4e:9e:58:e8:bd:87:d9:22:12:1f:46:a4:77:99:74:84:0e:c4:
49:0f:a7:b7:8b:3b:5b:ff:47:18:0d:3c:fd:c8:f0:17:c4:f6:
b9:3c:4d:8f:af:b3:4e:ad:21:94:77:5e:ae:5a:c8:f7:fe:e8:
97:51:45:de:ad:02:07:db:96:8a:ab:84:c2:4d:62:78:41:98:
45:be:dd:99:30:01:dd:6d:84:5f:64:fe:61:3b:df:b7:f7:ae:
54:71:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:42 2025 by rpki-client