Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa
File: e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa (raw, json)
Hash identifier: K3yvGQXuO6amy8ubf3vj8svOJJGEUPQVIPMIgMQ9dmw=
Subject key identifier: 29:F0:DD:FA:D4:15:CA:CD:B9:43:33:5B:0E:16:54:A5:8B:1E:73:F4
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584834555E878441B67CF643C5F0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 130.137.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:5e:87:84:41:b6:7c:f6:43:c5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=a8c731e1-5449-4ad2-91a7-d75fd8f9fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:eb:48:cf:10:6a:17:ca:b1:7f:73:21:15:
75:12:ec:19:4e:cb:e8:0d:3b:19:2c:af:41:5b:6e:
d7:a0:7a:ba:79:7d:36:f3:76:0a:3a:24:74:d8:9d:
56:c1:b9:18:e8:89:28:e3:2d:cd:63:56:7b:2f:c4:
9a:fb:bc:6e:54:43:45:e4:01:f8:8e:ec:aa:e3:15:
53:65:61:af:6d:45:8e:db:2b:7d:75:31:55:aa:63:
22:5f:d9:fd:5e:df:72:ea:fc:e4:00:1f:b4:73:a2:
43:d6:48:fd:d4:07:99:4e:2c:90:24:a8:be:06:8f:
f4:a2:b4:56:9e:1f:95:7a:be:fe:03:e9:fd:76:79:
4c:30:ce:58:5c:36:5e:19:fa:c3:9b:69:d9:c6:0f:
1a:1e:f7:af:81:34:e8:64:8e:f7:e3:89:24:02:d6:
80:77:b7:91:c7:56:24:a0:29:13:44:bc:15:e3:5e:
e7:67:a4:a2:c7:5b:5b:3e:6e:9b:3e:1b:3e:94:2b:
76:a7:e1:f0:c3:0a:b2:74:73:a1:ab:67:aa:67:53:
af:e8:b3:30:81:7b:5d:11:13:ea:96:c0:04:29:bc:
09:60:42:f3:a0:2b:f3:16:ea:82:d0:78:7d:48:b0:
ed:5a:33:5b:aa:61:14:fb:a5:79:1f:34:1e:89:71:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:DD:FA:D4:15:CA:CD:B9:43:33:5B:0E:16:54:A5:8B:1E:73:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7da5abf-7e6d-3986-bbb0-ae64a55da797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:eb:a6:55:a8:9f:cb:4d:8a:54:30:5c:fe:fc:de:b7:3a:a4:
26:46:00:31:23:11:a7:1f:2a:94:5c:ec:56:8e:53:7b:f5:c3:
95:46:1b:c8:ae:59:55:8f:4f:4a:ae:15:4a:21:4e:53:1e:d1:
0f:e1:04:ef:5a:f6:f8:dd:ee:da:5b:ba:c4:47:03:22:4a:8c:
a1:e4:a5:13:57:cd:64:8c:65:ec:e5:5f:e6:22:fa:f3:0c:12:
1f:84:d4:27:b8:7a:66:6f:71:c3:16:36:49:c7:b5:03:19:08:
1a:26:16:f8:3e:d1:bc:9f:bd:52:13:bf:f5:54:b6:98:f5:6a:
20:70:6a:f9:68:98:76:c1:b2:21:38:28:32:74:0d:95:f5:f2:
da:55:c6:ac:10:49:fd:88:c4:e5:7f:d8:42:6a:4d:71:a4:9c:
6a:e5:a9:b9:24:07:ed:11:cc:b4:08:d0:e3:33:06:7c:06:02:
84:3c:96:15:92:a9:00:ea:47:21:bd:39:f3:d2:85:8e:97:f9:
fd:ba:d8:68:73:9a:1b:71:22:12:73:b8:23:2f:0b:36:8e:04:
71:7a:58:e5:63:9a:64:4e:d0:04:ab:58:ce:d4:02:c4:f6:28:
02:cb:e2:16:b5:ff:c5:d1:69:4f:b3:60:c6:e5:4b:5e:66:e4:
11:07:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:15 2025 by rpki-client