Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e59b866b-0793-30a3-9cb8-677835d1c56a.roa
File: e59b866b-0793-30a3-9cb8-677835d1c56a.roa (raw, json)
Hash identifier: 3taAE5SL2EH/87Cs2bpwkUUbhzHjZ3Jc8BhI6zgOXyU=
Subject key identifier: 44:34:4D:74:04:06:9F:46:52:C2:4D:5B:90:64:32:AB:59:28:A0:0E
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483B4FFBFA322A748C49484180
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e59b866b-0793-30a3-9cb8-677835d1c56a.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 130.137.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:fb:fa:32:2a:74:8c:49:48:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=2885c308-7a06-4c2a-8b8a-0bd376bffb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:dd:5c:3f:d6:3e:5f:9a:fc:98:65:a2:23:
28:7d:53:d0:32:69:80:c8:60:4f:4c:1f:2f:29:98:
e6:25:e0:48:d5:34:58:17:36:72:46:fe:a4:13:2e:
6d:0d:f8:ad:9f:df:e4:d9:27:94:a4:e0:4d:38:34:
77:66:db:ad:d8:7e:b8:e1:0d:bd:a6:70:3f:12:ec:
da:c6:d2:46:7d:db:3b:3f:a1:f3:c7:a7:be:29:80:
a9:87:8b:56:56:ed:63:25:90:f0:b3:1d:db:da:09:
bd:06:79:04:1f:40:31:65:a0:32:8b:8e:1d:5c:0f:
e2:a0:10:9d:9d:73:0a:7c:8f:c6:7b:2e:c6:66:01:
d6:58:f8:4f:98:51:da:d9:9c:31:0d:10:5b:40:7a:
25:cb:7c:2b:a3:00:26:5b:f6:97:73:f0:1b:0b:c1:
16:b6:8f:12:0b:a6:99:1c:7f:32:36:a4:da:ec:8d:
b1:b4:97:14:25:e7:05:30:04:9b:82:7b:0e:6e:d8:
54:07:3b:e6:77:f5:3a:cd:ff:13:8d:47:aa:82:10:
54:31:6d:94:24:d5:00:1b:01:f5:55:41:c1:f9:d2:
b5:7f:a1:a7:83:e4:44:8c:a4:f3:9b:fd:7d:19:77:
d3:e0:1d:5e:b9:40:15:25:5b:9e:49:24:fd:ac:02:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:34:4D:74:04:06:9F:46:52:C2:4D:5B:90:64:32:AB:59:28:A0:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e59b866b-0793-30a3-9cb8-677835d1c56a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:3f:50:ba:7c:13:6b:6b:4c:d5:0c:08:3c:64:2a:9c:4c:c6:
bd:72:5a:80:27:eb:2a:1d:7f:41:56:8f:f7:69:72:9b:c8:b6:
88:de:a3:da:b6:f1:d1:04:f0:8f:63:58:07:7e:d8:12:ab:8d:
3c:22:90:0d:97:a2:19:93:10:38:bc:4f:ff:f6:16:8e:d9:16:
36:b3:f9:22:23:9a:b4:fb:6f:4f:0b:a5:39:18:ba:1f:dd:95:
91:5a:29:fe:d8:ed:c2:24:49:99:44:ef:8c:6b:35:ab:a1:78:
6d:4a:db:a6:88:99:fb:e9:92:5f:cc:e6:ee:58:84:0e:3b:0d:
79:8f:f5:62:cb:08:24:5a:73:f8:2e:e4:9c:e8:20:f5:79:60:
ad:f7:69:9f:11:bc:b3:88:06:86:ad:be:b8:07:ee:0a:74:6e:
f8:a7:f8:d9:72:69:91:a9:32:52:da:ef:69:41:ee:6b:a0:4e:
4e:e0:5f:b9:02:0d:2c:d2:c0:f9:e8:7a:bb:b0:56:eb:55:71:
14:5e:f0:bf:81:5e:b2:71:22:d0:df:a9:05:1f:8e:d6:3a:89:
76:47:28:3d:21:e7:8f:49:fe:e2:a8:47:e4:ae:8d:3b:96:03:
84:9f:c0:81:c5:fa:37:80:9f:3f:ee:b8:39:c6:4c:62:e5:9d:
e2:df:f0:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/v6Mip0jElIQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
Mjg4NWMzMDgtN2EwNi00YzJhLThiOGEtMGJkMzc2YmZmYjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtPdXD/WPl+a/JhloiMofVPQMmmAyGBPTB8v
KZjmJeBI1TRYFzZyRv6kEy5tDfitn9/k2SeUpOBNODR3Ztut2H644Q29pnA/Euza
xtJGfds7P6Hzx6e+KYCph4tWVu1jJZDwsx3b2gm9BnkEH0AxZaAyi44dXA/ioBCd
nXMKfI/Gey7GZgHWWPhPmFHa2ZwxDRBbQHoly3wrowAmW/aXc/AbC8EWto8SC6aZ
HH8yNqTa7I2xtJcUJecFMASbgnsObthUBzvmd/U6zf8TjUeqghBUMW2UJNUAGwH1
VUHB+dK1f6Gng+REjKTzm/19GXfT4B1euUAVJVueSST9rAJYiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQ0TXQEBp9GUsJNW5BkMqtZKKAOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZTU5Yjg2NmItMDc5My0z
MGEzLTljYjgtNjc3ODM1ZDFjNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg/ULp8E2trTNUMCDxkKpxMxr1yWoAn6yodf0FWj/dpcpvItojeo9q2
8dEE8I9jWAd+2BKrjTwikA2XohmTEDi8T//2Fo7ZFjaz+SIjmrT7b08LpTkYuh/d
lZFaKf7Y7cIkSZlE74xrNauheG1K26aImfvpkl/M5u5YhA47DXmP9WLLCCRac/gu
5JzoIPV5YK33aZ8RvLOIBoatvrgH7gp0bvin+NlyaZGpMlLa72lB7mugTk7gX7kC
DSzSwPnoeruwVutVcRRe8L+BXrJxItDfqQUfjtY6iXZHKD0h549J/uKoR+SujTuW
A4SfwIHF+jeAnz/uuDnGTGLlneLf8BU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:36 2025 by rpki-client