Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa
File: f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa (raw, json)
Hash identifier: q81cs8F9iw6vNTCwUIrU0ooRYka5sHwDGEhLymAD+ts=
Subject key identifier: 6F:90:49:E5:0D:5C:39:0B:8D:2E:92:DC:60:B0:0C:3A:57:8A:0B:C7
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584827C5455E994EF2ADC5C5BCC0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 130.137.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:45:5e:99:4e:f2:ad:c5:c5:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=0b49a9da-b588-4dde-b8f7-ed4cf0aa6d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:d3:d7:d3:78:2e:36:f6:f6:31:ef:27:11:
84:85:32:62:e7:9e:73:ba:c7:f9:ff:0a:33:a2:2c:
cf:13:42:c8:d1:1f:e4:63:cd:06:27:7a:b2:cf:5a:
b2:43:25:26:86:55:a7:67:a7:ab:e5:30:98:4d:96:
9f:1a:12:53:c1:c5:63:9e:22:8e:f4:eb:42:78:89:
45:4f:77:fe:1f:16:2c:3a:08:a7:c4:a5:c3:b9:9c:
62:54:4f:17:bc:37:60:92:ae:d6:d4:cd:97:78:20:
0a:7a:c0:af:58:e3:56:84:84:39:78:a8:f1:b2:e4:
c9:38:35:35:f3:cf:2e:5e:13:06:23:a8:5f:89:ae:
27:bf:50:a6:94:61:0c:01:b1:0d:a6:5f:31:0f:14:
69:ea:37:58:06:89:b2:00:d8:f4:6a:b7:92:33:28:
b0:52:23:70:3a:c2:c6:37:67:2c:d1:39:c3:29:01:
73:9a:9d:89:01:51:71:27:6e:d8:90:79:54:94:aa:
87:9a:ef:18:63:09:96:f2:c3:a3:d8:67:5b:2c:8b:
40:26:18:c2:84:d5:77:09:96:73:bc:d4:fe:11:95:
f2:30:0c:a0:12:a7:75:89:a7:37:34:6d:e5:47:62:
f6:0a:48:0a:5e:54:ad:5b:0f:2f:44:33:33:c4:6b:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:49:E5:0D:5C:39:0B:8D:2E:92:DC:60:B0:0C:3A:57:8A:0B:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:03:d6:e1:79:d4:76:d6:48:65:e1:aa:d1:1f:d8:0e:35:16:
3d:b4:8f:97:80:95:d0:9c:41:af:64:6b:e8:d8:46:01:a3:eb:
48:cf:b8:1b:bf:ed:af:fc:b9:9c:f1:cb:2d:ee:7f:39:2a:7a:
bc:58:d2:d6:00:41:97:d7:ee:68:d4:d5:1c:4d:e7:84:d4:6e:
4d:ab:38:5a:f4:55:7f:81:1e:77:b9:bb:a3:63:61:0b:1d:50:
d7:20:82:e7:ec:37:1b:c5:f1:83:21:4c:8b:ad:26:df:f5:9b:
2d:cf:74:da:64:d9:44:bc:59:70:88:04:23:09:21:20:a4:72:
85:02:fa:10:49:53:56:1a:2a:3b:80:41:11:63:73:03:a5:38:
d7:2c:94:67:90:df:66:a2:4c:ed:46:31:21:22:6e:50:a1:77:
25:ca:48:fc:49:c6:49:c5:50:e3:02:9d:eb:13:fe:2a:51:9b:
7e:81:b2:cd:cf:9d:5f:13:93:b6:8c:59:fb:c4:a9:d8:34:4e:
e8:f2:b4:1a:ab:2d:cb:9f:92:b1:2e:6f:9f:ce:a0:9c:69:94:
e9:8c:26:b6:56:46:cd:e7:b5:85:45:04:eb:d7:a7:34:bd:fe:
26:66:fe:ff:a3:63:5a:aa:f6:db:12:c1:0f:88:ad:79:0b:02:
9e:6d:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:07 2025 by rpki-client