Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa
File: b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa (raw, json)
Hash identifier: Fvfpf9zIcnUyc/N5HgYaZP1+pm0i8TvIIsjuU/Di2Oc=
Subject key identifier: 3D:AF:85:6C:B2:79:46:C3:36:0B:6E:09:EF:0A:A5:E8:60:00:74:1E
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FA9061AC21C5F6E733E00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 130.137.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a9:06:1a:c2:1c:5f:6e:73:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=b42e8469-fe61-4fe9-a79b-65acd6579711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b8:e9:2f:44:e8:c5:87:a9:57:96:09:87:b3:
3d:2b:7e:43:c1:25:0a:9a:e6:89:c5:cf:df:dc:bb:
7f:8f:d2:f3:d9:ce:36:db:a7:31:5e:8b:09:0d:a6:
10:a9:0a:42:03:cd:b2:f7:a3:7c:14:06:28:ca:64:
d2:ba:98:86:f2:d8:06:5f:89:8c:81:f9:c3:7e:5b:
47:e4:f7:c6:bc:26:18:19:47:57:a3:7f:48:d9:f0:
06:9b:fc:ab:25:3d:24:a4:91:c9:ec:c8:16:3b:fa:
f3:51:64:6b:e0:8d:f1:07:fc:55:9f:83:cf:2d:a7:
b5:c5:73:09:20:e5:80:2c:2e:00:43:ad:fd:a5:37:
69:f2:b5:1d:21:79:d7:d3:0e:09:92:85:5c:cd:da:
3f:44:35:3c:90:d2:c4:ee:ed:78:89:47:2c:05:d4:
c6:2d:8b:2c:f0:62:23:ab:81:ad:a7:73:2b:07:cc:
61:6b:a3:4a:73:9c:ce:0c:a4:26:32:8e:f1:2c:c1:
37:d3:26:88:14:21:e0:05:ba:bb:47:fc:fc:63:eb:
0c:ee:91:dd:8b:3a:c0:c6:3f:88:69:a0:1f:55:ed:
b0:2c:26:c2:ba:72:16:10:c1:10:c7:cc:da:bd:f8:
95:d7:ac:2c:83:ae:7b:b9:0c:e2:65:c8:ed:53:73:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AF:85:6C:B2:79:46:C3:36:0B:6E:09:EF:0A:A5:E8:60:00:74:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b078c3d5-b609-372c-80ae-caf4e8a0cafa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:e4:74:29:4b:2e:8b:38:a6:6c:f7:08:02:41:46:c1:67:f5:
33:44:ec:13:b8:97:d7:2f:2d:8c:fe:d1:2f:38:77:e3:38:a0:
0a:a9:d1:c6:4a:d6:27:22:1c:77:1b:1b:33:79:6f:ef:5e:01:
1c:45:0b:d8:39:59:7e:6c:e0:b4:2b:15:4e:eb:fa:97:2a:c4:
b4:68:61:2b:16:85:cd:89:a3:d2:46:95:f9:2a:d2:5f:17:4c:
e8:e1:d8:3b:f4:bd:69:50:c7:51:39:37:dc:18:13:ac:0a:0a:
06:da:8f:b0:eb:8e:ed:9d:8e:63:d6:8b:c1:00:8e:72:6f:5c:
f6:30:36:a4:f6:23:83:8f:a0:f1:a9:fc:45:98:da:f0:8e:95:
9d:36:83:2d:61:34:a1:9f:92:25:5e:7e:dd:50:a4:63:c9:6a:
eb:65:46:45:d3:3a:86:aa:fb:79:51:6f:25:67:81:48:5e:1a:
32:5f:2b:3b:4d:10:f5:0d:b7:07:57:82:5f:4d:01:15:c3:46:
76:39:f9:5b:51:32:e2:97:57:9a:c6:ba:7d:c8:77:ff:ee:ef:
32:2b:7c:13:e7:f7:92:ed:a4:73:25:be:82:2f:fb:37:22:5b:
8a:de:a9:05:e8:e0:b8:61:46:ed:94:3a:25:24:3a:9d:df:40:
9e:e2:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:51 2025 by rpki-client