Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa
File: 91807d1c-489c-3c3e-9229-5ecc326d6394.roa (raw, json)
Hash identifier: I2P4eljhsAs5C/jvGQ9CGiluyLSC1mbk5aLbhDMdF2Y=
Subject key identifier: DB:57:83:5D:4E:08:36:50:2A:60:9F:F2:55:04:AA:7C:0F:25:A8:0B
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858492E13B8886A51982CDDB8F580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 8987
IP address blocks: 130.137.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:b8:88:6a:51:98:2c:dd:b8:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=45a290cb-7195-4361-8720-1fcbd50f5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:24:7d:8b:c6:95:3d:18:64:a3:59:27:96:
2e:cd:d6:cc:f8:a0:1e:8e:78:b8:ca:5b:f0:d3:a0:
c4:50:33:3a:b4:3d:6b:08:4e:e5:70:91:3a:58:dd:
be:20:72:c7:c0:7f:93:68:f5:23:32:f5:48:7a:09:
ce:b4:e1:d5:bd:e7:c9:b1:10:e1:06:20:79:44:35:
7b:55:5b:9e:09:a2:91:85:42:ed:e8:2c:bf:ea:71:
11:c4:75:02:dc:be:2d:74:85:67:90:22:78:69:1c:
66:23:c0:31:f5:4e:52:0d:ad:fe:58:fa:db:fa:99:
fa:4f:4f:40:29:1e:06:77:b2:d9:14:97:4a:42:87:
be:14:e2:bc:6d:2a:b9:1f:91:08:e2:f0:ea:43:5b:
8e:36:90:fc:83:a6:48:f3:f9:31:7b:b1:42:26:b3:
85:92:f9:a7:93:4c:e0:29:15:5e:db:69:ba:90:b6:
ac:c5:1c:c8:e0:31:aa:7d:0e:0d:8f:37:96:16:a3:
6f:7c:10:6c:04:03:a9:8c:ab:ed:31:69:43:38:91:
22:ae:39:ef:3b:ab:8f:f6:6c:b3:33:ae:67:b8:09:
d8:52:2e:d0:70:cd:38:91:c3:1b:fd:14:fa:12:01:
4e:70:92:d9:67:5a:0c:c3:cd:7e:be:be:ea:01:c3:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:83:5D:4E:08:36:50:2A:60:9F:F2:55:04:AA:7C:0F:25:A8:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e9:34:77:04:a0:70:9b:12:56:6d:81:ef:0d:ae:65:13:8c:
69:e9:e8:fd:b2:dc:96:4e:71:d7:ed:ca:a2:41:51:ca:20:7b:
c6:d8:7d:07:dc:c7:e6:2e:f0:ff:36:87:56:c0:91:b6:7e:27:
f0:be:85:d0:ed:56:80:68:f0:e2:7e:71:5e:5b:db:01:e3:ea:
dc:a6:44:d0:22:83:df:40:56:79:1c:53:e6:36:8e:ae:43:03:
38:c1:2e:81:04:67:89:2d:c5:35:d4:29:87:d1:9b:be:07:2b:
25:f4:42:7d:90:71:72:d9:a8:c3:16:4b:f0:9c:55:dc:48:e9:
c5:18:2e:1e:a4:93:bd:14:06:29:c7:64:9d:26:43:f9:8e:3c:
09:3a:bc:dd:97:16:98:b5:58:a2:3d:c7:e0:bd:91:49:d4:58:
c7:87:f9:0e:40:fc:60:70:d7:14:82:74:07:a1:b3:ae:b9:3f:
95:29:a1:0a:61:89:ce:00:39:0d:d5:8c:61:2e:9b:ea:7c:f1:
83:6d:d7:bd:a4:1e:c7:4c:1e:6a:af:e9:83:85:e7:ee:2f:1a:
7c:b8:cb:9e:d5:d9:94:e7:65:20:21:5d:7a:a4:4a:1b:95:76:
c3:f5:9f:45:0f:cb:77:cf:73:11:f1:fc:7f:a7:b6:67:7f:59:
20:8a:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:04 2025 by rpki-client