Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa
File: e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa (raw, json)
Hash identifier: vbkJTSIZGK0NQQn6eVjeMLHW04gy2MAzlLn/UZ8RXog=
Subject key identifier: 02:8B:3B:58:DB:8A:CF:FB:E9:D0:0E:48:58:6D:87:56:E1:71:AD:34
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848159FF2C356626D627C7541C4
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 14618
IP address blocks: 130.137.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f2:c3:56:62:6d:62:7c:75:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=571c6a4a-a75f-4860-871e-63c05212a3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:b5:d9:51:00:21:4b:64:9e:28:d5:c9:1c:
55:e2:59:57:cc:2e:0e:83:72:35:2b:8f:84:39:65:
04:46:6f:92:80:1a:6f:23:9d:92:90:71:d1:38:5e:
96:cb:0d:de:aa:db:42:e3:59:32:f9:5b:f5:40:54:
03:08:e7:31:fb:1e:0d:a4:71:1e:b7:07:6d:22:f4:
ec:52:cf:c4:5c:f0:d1:8e:16:89:2f:a1:f2:3f:47:
bb:bc:3d:45:13:7a:5c:be:e1:e2:32:fc:4d:e3:ed:
8f:df:56:2d:13:85:7f:60:b6:c4:24:ba:21:7e:89:
7a:4f:20:c8:bd:8a:0a:08:9e:49:f7:c4:59:f3:7c:
04:e5:f7:fe:8d:1f:0b:ab:bc:fc:87:f1:5e:8f:8b:
3f:5b:c0:66:b1:f0:5e:b6:3f:03:37:b7:80:63:1f:
a6:c5:39:86:c4:7e:1f:1a:87:62:39:89:c3:24:43:
bf:b8:6e:86:2d:e0:27:5a:13:f6:13:42:06:ce:e8:
e0:c5:00:2c:67:3e:ea:e2:da:22:e8:70:64:3c:b4:
fe:12:0d:0a:60:d1:2e:5c:b5:43:ff:d5:8f:12:df:
25:52:08:72:87:d5:bd:4c:a2:7d:b4:59:29:e7:81:
1d:25:92:ad:31:a7:cf:ae:33:63:fb:b7:8d:e4:05:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:3B:58:DB:8A:CF:FB:E9:D0:0E:48:58:6D:87:56:E1:71:AD:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e1dc334a-6bb0-3843-be73-f3ce5eb6493d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:66:e7:cb:8d:9f:65:dc:30:99:f7:7f:45:67:d4:96:04:68:
32:2e:4a:0a:2e:6e:5b:51:ca:bd:b2:6a:d1:b2:b6:c5:94:3c:
09:d9:aa:19:0b:ee:2c:2b:74:e2:1d:33:7d:4f:a0:7e:dd:e7:
c7:a3:b2:fc:80:ee:7f:1f:2f:17:b3:e8:ff:04:d7:76:6b:eb:
b6:97:2f:f5:be:a6:4c:25:fe:44:4c:b5:e9:9d:e1:3f:31:89:
cd:73:31:71:3c:9d:43:20:cc:a2:10:63:55:48:9b:93:78:b6:
08:74:c1:02:c5:1b:cd:9d:28:a5:6e:a0:8e:a0:40:1a:04:e6:
9b:f8:a7:c7:4a:c9:3a:a6:fa:ed:c8:93:72:32:b0:e0:de:4f:
71:4b:bf:af:d4:0c:00:63:9b:41:99:8a:fd:e2:b9:93:0c:a5:
b9:ea:df:5a:f7:5f:39:3d:3e:79:6c:a4:51:ea:73:ae:90:c7:
93:ec:84:06:8d:fe:9e:73:33:75:29:8c:59:53:d7:a4:04:49:
90:e3:09:3e:40:b2:f4:4b:bc:e5:98:93:ec:08:9b:06:58:a7:
3d:97:4b:f8:0e:25:b8:55:6e:65:e6:0d:4d:7f:59:b2:8e:c9:
c5:00:3c:16:e3:4b:06:d5:34:6f:ab:ed:2d:aa:f1:9a:3e:93:
1a:d5:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:19 2025 by rpki-client