Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d0a2b48a-9610-3393-a31f-9518475dd069.roa
File: d0a2b48a-9610-3393-a31f-9518475dd069.roa (raw, json)
Hash identifier: X0nw3VMQn+H09V1W5UGXSAlKHqV4v+JaNh6RJgQqULM=
Subject key identifier: B7:3B:CF:CB:0A:22:6B:CA:5D:A7:F1:5A:13:8E:3F:BF:CD:B2:A1:54
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848090FB32D71E6FB37CFB0FAC4
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d0a2b48a-9610-3393-a31f-9518475dd069.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 130.137.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b3:2d:71:e6:fb:37:cf:b0:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=0d7f1fda-0901-4566-aa0b-81376f3762ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:91:4e:93:d7:96:81:c0:0b:89:4e:17:19:
a2:b9:96:8c:fa:02:db:e2:88:d4:a8:00:68:3e:d8:
a8:17:1a:18:cc:37:f5:89:a9:7b:02:fc:16:94:2d:
c2:7d:0c:80:4f:6c:9c:6f:08:08:99:23:2e:0c:8a:
59:f6:b3:7a:a0:6b:4c:df:ce:9f:f7:27:87:f9:8c:
08:26:8d:71:50:60:ea:fa:10:b9:3c:a9:e4:f5:86:
95:20:58:c2:b8:23:01:39:af:ef:8f:95:86:47:fd:
ed:84:c8:2a:07:1e:38:0b:1a:72:9f:1b:6b:28:e6:
6c:7b:ef:e5:da:f4:e5:f6:5b:b7:5a:37:b8:38:f5:
49:ea:35:90:9a:fa:c3:ae:54:ac:0e:57:c5:88:cd:
ba:72:ba:c7:ff:4d:d0:ca:0f:7b:13:f0:4e:7a:0e:
eb:09:f8:64:95:ec:33:aa:87:cb:cc:f8:bd:8c:2b:
56:ab:86:47:49:39:67:1f:5f:75:81:87:24:e1:1a:
51:19:38:05:5e:d2:cf:58:c8:be:9b:63:5b:d6:2d:
ba:eb:b5:c2:6e:56:b3:b6:c5:44:19:3b:51:34:dd:
9a:46:cb:bb:e9:11:51:96:b8:5a:9c:fd:48:29:f0:
80:8a:bb:bb:31:fa:00:f2:11:6f:95:d8:e7:d3:6c:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:CF:CB:0A:22:6B:CA:5D:A7:F1:5A:13:8E:3F:BF:CD:B2:A1:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d0a2b48a-9610-3393-a31f-9518475dd069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:03:39:31:22:5d:f6:c4:4d:4f:0f:62:69:a7:a5:fe:fb:a9:
21:72:1f:cf:3c:8f:97:0a:20:a6:4f:53:d8:29:5f:93:e7:10:
29:38:d1:d2:2e:6d:a4:1c:ac:bc:11:d0:69:72:3a:0c:23:cb:
50:54:47:0b:17:ef:98:2b:e4:8c:d9:99:41:fd:bd:38:9b:ff:
05:d7:c6:0d:56:94:fa:0e:08:8f:fb:43:9b:bd:e9:79:72:20:
f2:b2:6f:b1:49:77:1f:a0:94:43:28:32:50:01:94:73:7f:6f:
73:7c:d5:99:65:d4:c2:c5:62:63:17:c1:36:4a:76:b9:94:1a:
5c:ca:d7:27:f4:e3:7b:31:d3:15:03:3a:b0:33:c3:57:7f:82:
b1:f3:33:57:7d:3b:2d:be:51:10:0b:fb:f1:01:29:71:5a:c5:
7e:42:f0:3a:29:55:b9:8a:b1:bb:d6:2d:7d:33:cd:a4:6b:6f:
6c:fa:e4:d4:56:7e:7d:88:60:0d:3e:15:6e:6d:48:10:d5:27:
0b:4c:ea:be:94:95:10:ed:fb:69:23:e7:00:27:a3:bd:7a:0e:
0c:3e:04:6c:8a:44:ac:b1:66:4b:6b:70:68:77:71:b4:24:c1:
bb:8b:e2:58:a2:33:da:04:f3:9f:78:f9:9c:5d:fa:85:ac:27:
66:32:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:14 2025 by rpki-client