Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d85d1d1-9c6f-30e4-a65b-b898c05c5601.roa
File: 4d85d1d1-9c6f-30e4-a65b-b898c05c5601.roa (raw, json)
Hash identifier: iTwxGa8N/aizOzROgbicH0S6koYLdbE47NGQoAwt8rg=
Subject key identifier: 37:56:61:D1:12:4E:05:79:B3:E2:E0:70:06:03:D5:D8:95:E4:54:0D
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858491AA6B5A47D58C163735C2100
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d85d1d1-9c6f-30e4-a65b-b898c05c5601.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 8987
IP address blocks: 130.137.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b5:a4:7d:58:c1:63:73:5c:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=07344f68-2930-4ec8-9b04-3b04dc30385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:49:9d:a1:b2:15:8e:5b:37:09:d4:f3:2d:
31:5e:fe:9f:f7:f5:1e:17:2d:5a:e2:85:5b:ac:ab:
ed:d3:07:34:34:b1:05:00:da:e1:5b:da:40:fe:df:
41:77:44:ce:08:7b:bc:30:69:a9:4d:91:56:c0:0b:
b9:3c:13:8e:13:a9:28:57:08:5e:4f:64:03:dc:57:
a8:11:ea:ff:d9:71:6c:0a:3f:50:b3:35:cc:91:5c:
88:b3:c9:c9:a2:f9:f0:79:94:0e:a1:73:6c:b2:10:
c6:6d:6b:78:aa:27:af:55:a4:95:58:b2:25:3e:3c:
ee:18:8f:bf:ab:40:69:fe:e2:01:fe:45:94:3d:d4:
cb:c5:c4:a0:4b:c1:d9:13:93:78:a1:e9:24:e6:3f:
0a:5c:80:0e:25:b1:dd:7d:17:ce:58:3a:69:09:51:
ac:64:02:1e:6c:7d:4c:b5:9f:05:8a:66:7f:0b:cd:
14:d5:03:2b:3e:e6:41:6c:ee:69:a2:c4:9d:0d:5b:
05:d9:f7:0f:71:f6:68:6b:0e:af:65:b5:ae:3e:ef:
2f:bb:a8:c0:07:b9:e0:e6:fb:b0:4c:03:d5:42:9b:
7d:18:be:e8:68:02:63:90:a7:9e:ab:11:70:c5:70:
d7:1a:9f:88:8a:df:c0:6b:ba:3c:6b:43:3d:60:f3:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:61:D1:12:4E:05:79:B3:E2:E0:70:06:03:D5:D8:95:E4:54:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4d85d1d1-9c6f-30e4-a65b-b898c05c5601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ce:7f:a7:c8:37:64:82:e7:91:34:80:19:6d:9a:f3:3a:01:
e6:b8:a8:78:35:4e:9c:8c:a7:1b:99:24:fc:60:32:46:61:e8:
84:9d:43:55:c8:e4:69:7c:1f:22:44:c2:54:91:a2:32:ef:be:
f1:9c:01:25:18:23:f1:03:b7:8e:bf:e0:25:50:79:27:a4:c1:
8f:ae:32:33:b1:c7:35:13:44:8c:be:0f:2a:e1:99:94:2e:14:
f9:ce:2a:15:ec:8a:e2:67:ca:fd:67:47:e7:37:1a:fe:60:78:
28:8b:ba:07:f7:e0:16:35:0b:dd:62:8e:26:35:75:a1:76:31:
c3:9b:4d:e6:a7:9e:cc:bc:cd:d4:68:9c:35:7e:8d:91:0f:9a:
75:53:af:d1:de:ac:ae:4d:67:41:d5:e1:a8:e0:63:64:d1:35:
5c:e0:da:ed:f6:cf:da:e9:7c:9b:27:6e:62:1a:9f:f9:e5:ae:
d1:9f:0e:19:c1:77:b4:ac:8f:eb:20:a2:e4:fd:68:ec:19:80:
bb:98:42:10:1c:be:d7:4c:27:11:da:95:ed:7a:73:62:4d:2a:
79:cb:b3:59:a5:db:6b:d4:43:93:80:2f:86:86:59:2a:dc:6f:
ca:df:2c:ee:ed:1a:da:fe:84:ce:36:14:36:20:e0:e2:24:a9:
75:36:06:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprWkfVjBY3NcIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
MDczNDRmNjgtMjkzMC00ZWM4LTliMDQtM2IwNGRjMzAzODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKhJnaGyFY5bNwnU8y0xXv6f9/UeFy1a4oVb
rKvt0wc0NLEFANrhW9pA/t9Bd0TOCHu8MGmpTZFWwAu5PBOOE6koVwheT2QD3Feo
Eer/2XFsCj9QszXMkVyIs8nJovnweZQOoXNsshDGbWt4qievVaSVWLIlPjzuGI+/
q0Bp/uIB/kWUPdTLxcSgS8HZE5N4oekk5j8KXIAOJbHdfRfOWDppCVGsZAIebH1M
tZ8FimZ/C80U1QMrPuZBbO5posSdDVsF2fcPcfZoaw6vZbWuPu8vu6jAB7ng5vuw
TAPVQpt9GL7oaAJjkKeeqxFwxXDXGp+Iit/Aa7o8a0M9YPMQnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdWYdESTgV5s+LgcAYD1diV5FQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGQ4NWQxZDEtOWM2Zi0z
MGU0LWE2NWItYjg5OGMwNWM1NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjOf6fIN2SC55E0gBltmvM6Aea4qHg1TpyMpxuZJPxgMkZh6ISdQ1XI
5Gl8HyJEwlSRojLvvvGcASUYI/EDt46/4CVQeSekwY+uMjOxxzUTRIy+DyrhmZQu
FPnOKhXsiuJnyv1nR+c3Gv5geCiLugf34BY1C91ijiY1daF2McObTeannsy8zdRo
nDV+jZEPmnVTr9HerK5NZ0HV4ajgY2TRNVzg2u32z9rpfJsnbmIan/nlrtGfDhnB
d7Ssj+sgouT9aOwZgLuYQhAcvtdMJxHale16c2JNKnnLs1ml22vUQ5OAL4aGWSrc
b8rfLO7tGtr+hM42FDYg4OIkqXU2BlQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:15 2025 by rpki-client