Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cb535352-8a5c-3f67-8a09-ca495d44415a.roa
File: cb535352-8a5c-3f67-8a09-ca495d44415a.roa (raw, json)
Hash identifier: twhERCcPaNs5T/yFxWLgknU5h3rhl4F2s8zq+BGJx5I=
Subject key identifier: 0E:85:1C:E5:73:C0:45:93:04:45:54:6B:86:C0:6F:BF:A0:82:39:B9
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858484C101A9F366A41F1F320C480
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cb535352-8a5c-3f67-8a09-ca495d44415a.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 130.137.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1a:9f:36:6a:41:f1:f3:20:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=91ca0129-195d-434a-ad68-92f17f8dd4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:0a:a1:00:57:f1:8a:db:68:7b:cc:b3:16:
81:f0:c5:52:e2:2e:e2:f2:55:78:52:72:c2:62:c1:
1b:cd:a7:2c:e5:08:55:3e:3c:61:eb:c0:19:1f:5b:
8f:62:d3:74:74:22:90:94:0f:45:9a:13:c4:c8:e6:
d8:4b:5e:f1:cf:ff:69:2c:9a:bb:5a:04:46:07:46:
e9:01:79:bc:4e:a0:cb:25:4d:d2:8a:80:11:84:c4:
fe:0c:24:87:1d:8b:f5:2a:82:6b:f1:57:d6:52:6d:
13:c8:df:87:eb:aa:50:3e:9c:77:d1:be:8b:65:c0:
16:30:0f:7b:b5:a0:04:b8:ba:4b:a5:2c:08:66:32:
10:ae:cf:4a:51:1b:de:3c:b1:81:81:52:2e:db:47:
0a:71:ca:a1:ac:ba:d8:74:37:78:18:82:cb:ed:74:
d1:ab:99:80:34:72:df:6b:1f:52:e8:c3:48:6a:f3:
ca:40:41:db:ac:09:8a:2e:1c:db:19:88:45:b1:90:
78:ae:42:18:9e:9b:55:a0:6d:4d:06:54:db:ee:41:
70:3c:fd:ba:2a:59:72:2c:d6:a7:ec:18:e6:56:f0:
d1:24:0f:98:09:3e:e2:19:ad:3a:21:6a:32:01:dd:
2e:62:4a:db:9b:1d:47:12:49:b2:6d:82:df:4c:48:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:1C:E5:73:C0:45:93:04:45:54:6B:86:C0:6F:BF:A0:82:39:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cb535352-8a5c-3f67-8a09-ca495d44415a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ff:77:27:69:aa:62:a4:6a:66:7f:d7:d6:99:3f:a8:f9:64:
5d:13:87:0e:93:81:20:52:b6:ad:27:91:64:2a:5c:49:28:e0:
2a:47:3b:d1:62:cb:7f:32:3a:d7:32:9c:d2:c3:5d:37:99:70:
f7:78:aa:8c:71:4d:ec:b6:00:06:cd:2d:62:69:2f:43:f1:d0:
6f:1f:e0:b9:07:f4:ef:6e:6b:b1:c3:db:b2:b2:8b:c3:89:7c:
05:b0:f1:46:bf:af:70:02:3d:dc:80:08:04:3c:03:a4:77:4a:
b7:aa:dc:44:fb:6d:fa:28:6f:89:0e:1e:9e:de:13:79:d2:d9:
f9:05:30:b5:9e:eb:4b:88:7b:13:dc:9a:29:07:f2:ee:a6:0d:
63:7b:32:e1:69:0b:3c:a2:8b:02:e7:3d:6f:cf:81:2f:fb:04:
61:da:92:f2:ef:7e:c0:9c:65:d6:a6:94:77:94:a3:cc:77:98:
7c:bb:cc:68:b2:37:4e:3a:48:8f:d1:24:5f:88:07:48:18:43:
4a:23:5b:7b:90:0a:91:1e:10:33:a8:78:29:1a:21:c5:a2:cb:
00:8d:6d:2d:ed:c5:0e:9a:69:21:97:a7:59:04:89:cc:23:5e:
2d:e3:79:7f:0e:90:e9:d5:5c:2a:26:d9:56:2c:21:73:92:76:
f1:55:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:26 2025 by rpki-client