Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa
File: bbeca169-4170-30f0-b354-aa143422f326.roa (raw, json)
Hash identifier: L1EImAhhDytd4FlUAwIWbRRYBCVWbELwlB9AGtiikN4=
Subject key identifier: CB:8E:91:43:F7:2A:66:DB:A0:C5:E2:4B:E3:F6:33:D3:CF:37:A7:CA
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483E1AA70028B1065719937580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a7:00:28:b1:06:57:19:93:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=5d20daf4-8e70-418d-95c1-5c56c620824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:2c:86:f6:6e:88:5f:23:e3:b8:02:69:71:
b2:df:75:84:3a:dc:35:49:83:ac:ef:5d:31:a5:15:
a7:ae:a3:71:c7:45:e0:ea:44:56:c2:fd:4f:a8:6b:
eb:99:93:3d:a3:d0:e3:00:98:27:4c:09:00:62:40:
f1:2e:38:22:42:8e:35:a3:96:a5:61:61:18:d1:40:
3f:3a:71:67:94:2a:d8:82:48:27:91:46:1f:10:3d:
41:77:b7:f6:b4:8e:a3:8d:f9:dc:0c:67:1e:71:26:
55:59:af:29:21:2a:51:fc:f9:65:24:82:1e:72:8e:
7b:3c:da:d0:f6:1d:b7:69:72:ae:80:d6:09:36:3e:
fa:f8:9f:8f:61:fc:91:d5:64:91:51:ac:88:c5:66:
66:90:d0:4f:c3:4e:2d:be:74:51:c3:fa:0e:76:c7:
5b:70:f5:a6:7e:1d:78:ba:52:df:a1:cc:3a:46:5a:
1b:fa:67:a9:53:57:81:db:54:ae:a4:52:c9:04:b6:
ce:bb:a9:36:f2:de:56:b4:7f:2f:4a:9d:f1:3a:bd:
c4:94:e7:32:f8:6f:a5:c4:24:eb:ba:e5:30:e6:ed:
8f:37:49:11:e1:eb:a4:3b:ed:05:08:a4:c4:c5:ba:
3e:71:e4:f9:20:e5:da:ca:87:09:d2:a7:a6:5e:cb:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:91:43:F7:2A:66:DB:A0:C5:E2:4B:E3:F6:33:D3:CF:37:A7:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/bbeca169-4170-30f0-b354-aa143422f326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f4:86:81:5b:ad:26:36:b1:ab:61:af:ef:01:d5:41:24:5b:
f4:71:33:4e:64:8d:54:fe:88:d4:72:18:41:0c:e4:ff:75:81:
e2:71:60:d9:f3:62:a2:94:97:3d:14:e3:53:d3:56:cd:d0:b1:
56:59:e4:c1:08:b8:98:5c:f1:11:79:44:76:ec:f7:05:fb:0c:
02:6c:4e:f0:b7:f3:dd:75:a0:7b:cd:f5:31:83:3d:e2:d6:7c:
fa:70:6d:46:1c:84:1a:e9:24:f9:98:11:39:e6:46:09:08:5f:
8d:10:e9:28:ea:a7:17:58:3e:58:b3:b5:1b:45:68:91:d9:ad:
03:77:70:23:be:0c:bf:c1:19:df:cc:c1:26:29:d8:31:53:de:
aa:90:80:dd:8c:26:a8:7c:aa:f9:39:0b:30:20:5f:3c:cb:f8:
f7:ef:ba:86:ef:9e:b3:96:f1:38:76:dc:da:c0:6c:bf:20:83:
fd:07:22:61:45:e9:91:a1:0f:28:8c:73:06:33:29:39:38:c2:
f2:b9:63:8d:ec:ed:5b:70:ac:7f:ea:c6:3b:75:4d:7a:b3:2f:
3f:2c:65:5e:fa:be:c9:89:d8:11:af:da:e9:21:e6:ec:00:50:
db:9e:d1:f7:17:ae:5b:87:6a:fa:6e:1a:a9:25:ad:ef:da:2f:
2f:c9:31:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqcAKLEGVxmTdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
NWQyMGRhZjQtOGU3MC00MThkLTk1YzEtNWM1NmM2MjA4MjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNYshvZuiF8j47gCaXGy33WEOtw1SYOs710x
pRWnrqNxx0Xg6kRWwv1PqGvrmZM9o9DjAJgnTAkAYkDxLjgiQo41o5alYWEY0UA/
OnFnlCrYgkgnkUYfED1Bd7f2tI6jjfncDGcecSZVWa8pISpR/PllJIIeco57PNrQ
9h23aXKugNYJNj76+J+PYfyR1WSRUayIxWZmkNBPw04tvnRRw/oOdsdbcPWmfh14
ulLfocw6Rlob+mepU1eB21SupFLJBLbOu6k28t5WtH8vSp3xOr3ElOcy+G+lxCTr
uuUw5u2PN0kR4eukO+0FCKTExbo+ceT5IOXayocJ0qemXssFAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuOkUP3KmbboMXiS+P2M9PPN6fKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmJlY2ExNjktNDE3MC0z
MGYwLWIzNTQtYWExNDM0MjJmMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIj0hoFbrSY2sathr+8B1UEkW/RxM05kjVT+iNRyGEEM5P91geJxYNnz
YqKUlz0U41PTVs3QsVZZ5MEIuJhc8RF5RHbs9wX7DAJsTvC38911oHvN9TGDPeLW
fPpwbUYchBrpJPmYETnmRgkIX40Q6SjqpxdYPliztRtFaJHZrQN3cCO+DL/BGd/M
wSYp2DFT3qqQgN2MJqh8qvk5CzAgXzzL+PfvuobvnrOW8Th23NrAbL8gg/0HImFF
6ZGhDyiMcwYzKTk4wvK5Y43s7VtwrH/qxjt1TXqzLz8sZV76vsmJ2BGv2ukh5uwA
UNue0fcXrluHavpuGqklre/aLy/JMUI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:11 2025 by rpki-client