Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ce9b442a-9aae-3b7d-b398-f9aa898191e1.roa
File: ce9b442a-9aae-3b7d-b398-f9aa898191e1.roa (raw, json)
Hash identifier: u2imYAKonYzTrOFapt+7zlWjhdxIWy9zmnU5AY1TidQ=
Subject key identifier: 36:FE:BF:3C:1A:24:79:81:ED:83:29:7E:FF:23:3D:80:DC:06:30:C7
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584832F029942AECAF2E4523DF40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ce9b442a-9aae-3b7d-b398-f9aa898191e1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 130.137.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:29:94:2a:ec:af:2e:45:23:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=de044d2e-54c6-4965-97f1-ee391b62a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:2d:ab:b5:61:c1:91:77:ff:11:c3:80:a2:
51:d8:5d:5d:40:34:f9:83:7a:95:af:68:29:9d:f6:
28:56:97:36:36:5d:77:61:60:6e:1c:87:3f:50:6a:
91:cd:a6:10:6d:ba:7f:7e:cd:8b:d8:87:be:1c:8c:
06:6a:7a:f5:72:87:8b:a1:03:c1:7f:a7:aa:0c:36:
e0:18:5a:d1:9d:64:14:64:96:f4:d9:70:9b:16:c4:
8e:20:3c:45:10:9a:8b:e0:64:b6:a9:dc:bf:f5:97:
73:65:19:33:54:e8:09:ad:73:7e:ee:65:06:9e:b6:
b8:bc:f3:cb:2e:1b:d4:49:9a:0f:7d:42:09:4c:ea:
7b:5b:83:5f:2b:a1:8e:01:48:bc:d6:da:c8:9e:74:
23:35:f6:8d:84:02:1f:06:3a:11:2b:d3:c2:b5:5e:
2e:07:c0:4e:80:ed:70:81:9c:b1:8c:0c:dd:04:44:
6e:d1:88:04:32:1b:a6:40:89:82:ec:84:27:c1:86:
84:72:18:3d:65:d8:07:1c:38:07:dc:42:60:bc:ba:
26:1a:31:6d:ec:d6:b6:aa:55:54:c0:dc:92:16:ff:
9a:43:75:95:be:ed:74:84:74:6d:d0:0c:ba:76:69:
21:d4:70:af:b4:bd:bd:5e:81:43:11:cd:30:b9:bf:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:BF:3C:1A:24:79:81:ED:83:29:7E:FF:23:3D:80:DC:06:30:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ce9b442a-9aae-3b7d-b398-f9aa898191e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:98:83:de:ae:a8:5d:0d:53:70:8f:75:8d:2d:a2:54:33:19:
42:da:09:45:99:41:53:d4:99:ce:8d:89:f7:47:fc:85:fe:ef:
e3:cd:ff:46:1f:fa:c6:76:e0:22:99:b0:74:84:77:dd:f5:19:
2f:44:6d:71:f1:eb:33:02:e8:2f:bf:9d:76:7d:b2:4e:f8:f4:
47:74:b5:84:b5:fd:4b:40:27:a8:64:78:05:ee:d3:ba:0a:96:
8a:fb:1f:02:9d:75:9b:ae:c3:5f:fc:e8:ce:9a:cf:00:9d:ce:
6f:9b:75:bb:9f:45:0e:f9:14:99:36:fb:53:df:59:ec:ba:e2:
55:fc:f5:3c:56:4c:22:dd:e4:f4:4f:d0:23:ec:24:e7:3d:87:
9b:5f:3d:99:f9:38:b5:21:da:2b:a0:13:37:55:db:5b:89:5f:
07:7d:d1:d0:e3:1c:5e:08:0e:7c:d2:20:85:3f:3b:90:9b:12:
5e:0a:d9:9f:29:c7:59:7d:e8:e3:ec:4c:ea:91:b2:57:1a:09:
3b:66:da:35:87:08:82:97:79:76:6a:4d:00:03:0a:ed:2a:ed:
df:7c:cf:f1:33:ab:b2:fd:87:37:dd:de:31:47:a6:b9:2f:91:
71:01:3a:c4:9f:fe:ed:b6:b3:04:5a:a2:8e:36:1b:ac:8a:27:
4b:e5:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:30 2025 by rpki-client