Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa
File: cc783676-ac32-3508-b08e-796366c4c85b.roa (raw, json)
Hash identifier: d/4hT+wBaJUApxUE9DTo+SvZK6rvbRIq/7Il78ZgqkE=
Subject key identifier: 66:DA:EC:EF:95:1A:8D:37:C2:90:9E:AD:AE:1E:D6:FF:D2:51:F3:29
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483B4FF9EAB66AA65BBBB9EC00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 130.137.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:f9:ea:b6:6a:a6:5b:bb:b9:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=808b2c8c-fc41-4fc9-a354-fec59f3f0be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:4b:bc:22:c5:87:0d:22:2a:8e:96:eb:ce:
a8:86:05:40:9d:cd:c5:c0:93:c1:55:45:60:20:71:
1a:01:d6:32:dc:7b:c8:3c:f3:a8:6f:f8:6f:44:3c:
0b:6b:6f:da:38:ba:99:e7:ee:01:ed:3e:78:06:7d:
d1:fb:b2:71:e7:ae:c4:f4:b2:b9:e7:9b:a5:6e:00:
18:17:b2:79:eb:d4:e4:33:28:9d:56:55:4d:b0:6a:
82:f8:cf:c6:92:f5:dd:43:7b:b1:0a:0f:1e:fe:15:
38:40:a4:de:3c:9c:fd:f0:6f:53:d0:aa:d7:25:61:
af:77:83:e1:80:01:51:dc:19:b7:b3:2f:62:a1:ed:
08:94:4b:5e:52:1e:7c:fb:2f:a7:75:f7:24:08:55:
22:7e:fc:e8:8c:16:80:06:1a:5b:f5:ed:66:7b:86:
0e:56:9a:a1:02:a5:f0:8c:ee:89:1e:19:97:31:98:
00:65:3d:b1:96:45:20:b7:ba:f5:71:ff:c2:1d:2f:
7d:bf:52:d9:45:51:ef:68:2e:4d:89:cd:21:54:c4:
71:3d:a7:47:f4:d0:77:b5:f7:8b:51:4a:80:6b:f4:
4e:0c:05:48:ec:bf:72:46:d1:dd:79:9d:d7:33:4d:
ad:ca:08:0d:5d:1c:83:4e:1e:da:1e:ab:a7:22:53:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:EC:EF:95:1A:8D:37:C2:90:9E:AD:AE:1E:D6:FF:D2:51:F3:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:40:00:96:d0:6c:62:fa:f0:2c:43:95:21:2a:b0:c9:80:fe:
86:6c:21:0f:6f:c7:f0:9e:da:53:92:28:a2:23:97:9c:dc:ba:
f1:c6:72:e8:94:d0:aa:58:c5:6a:a6:b9:cc:a8:91:23:eb:b5:
00:5d:64:f4:08:8e:91:61:ba:45:82:a7:8c:27:81:c1:48:0c:
7a:4c:98:61:1b:65:0e:c3:6f:db:68:46:f9:10:17:02:ad:f6:
be:da:bc:f0:d1:75:c2:bc:e6:6e:5c:25:bf:55:d1:79:bb:d9:
13:a8:c2:87:25:4f:85:02:1d:49:d8:3f:82:54:65:39:6b:d7:
62:8f:db:6a:b2:80:fc:5e:88:7c:19:54:a9:46:d5:70:4d:6b:
9a:f8:45:35:08:ab:0a:92:79:67:f7:93:49:58:26:14:cf:92:
f2:85:b9:27:8c:d2:d8:89:32:aa:b8:02:24:b6:51:19:94:8d:
c0:7c:f9:72:fb:76:b3:71:9c:d2:6f:19:6c:16:0d:11:85:66:
55:92:96:12:b3:bb:e4:3d:78:e6:7b:94:90:87:cf:32:d4:0b:
89:25:84:31:f2:5c:85:c9:89:c3:a2:e5:f8:c7:d0:24:26:20:
0b:bb:bf:f5:61:81:22:ce:9a:97:f7:1a:63:0f:55:f2:5a:67:
db:75:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:22 2025 by rpki-client