Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa
File: 0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa (raw, json)
Hash identifier: R+uOuP6m7JW8SuZ3yIhwrmyWCQgQ+AmcMbrNiwSg7rM=
Subject key identifier: A2:96:DB:AA:51:29:C1:B5:CC:E0:60:46:06:21:E5:02:82:83:B6:90
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848F65BDB81C8BE3E96E701E580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16509
IP address blocks: 130.137.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:db:81:c8:be:3e:96:e7:01:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=4b34c0c3-2f82-4f00-9e3f-9e8c0e2da0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:f4:ad:ad:60:2f:c2:3f:57:f5:c9:d7:b6:
98:41:21:37:75:7a:db:0e:76:29:b2:20:68:aa:97:
3c:68:df:f6:26:b1:53:9e:16:f6:fd:9d:3d:5e:d9:
c9:79:3b:ce:a7:6d:b3:8e:b3:dc:95:e0:c8:a4:ac:
9f:59:f0:28:58:22:b0:de:bb:a6:7c:bc:d6:53:60:
83:73:f8:c0:aa:24:e9:fd:75:57:01:82:86:86:d8:
bb:15:df:4f:2c:d7:dd:55:c7:d9:75:b4:1f:da:04:
85:22:e6:a6:8a:6c:2f:74:2d:49:2b:c8:d3:cf:7c:
9e:2a:0b:74:3a:36:36:c3:91:76:44:0c:ed:44:6b:
20:51:4b:32:17:3e:1b:df:f7:11:75:7b:49:3b:94:
0f:9b:6d:7b:47:53:b0:2a:75:30:eb:77:2a:e6:33:
e5:15:7f:dc:ce:1b:62:09:83:de:af:f8:77:e5:4f:
1c:87:6d:67:93:ff:74:3c:58:60:3b:d9:59:3e:8b:
3a:a0:ee:65:2d:c6:7f:a8:9c:c0:3c:6e:ed:12:01:
5c:ec:f0:d9:16:a0:9a:b2:d0:49:58:81:c8:33:18:
27:a4:47:4b:ef:5f:2b:4e:84:3a:43:ad:e9:9a:c0:
24:70:0a:5b:0e:07:74:a5:fb:07:e9:f7:13:da:15:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:DB:AA:51:29:C1:B5:CC:E0:60:46:06:21:E5:02:82:83:B6:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:69:c3:27:88:b1:8e:e4:e8:d3:6d:ca:76:ee:5b:b6:86:6e:
9c:62:0e:29:fc:d3:01:d2:5b:c4:f3:ad:c5:3c:7b:d8:b5:10:
ca:9c:47:9f:54:dc:eb:e7:79:a7:0b:f1:dd:32:0e:c1:86:0d:
51:a2:90:cf:2a:a0:f8:2f:05:48:f3:14:5e:9e:36:c4:7b:d5:
ab:12:b8:07:6a:ea:35:30:f7:be:39:4a:55:0a:98:a3:ce:fa:
c1:10:27:da:92:37:1b:66:27:f9:8b:9d:ca:c6:f1:22:bc:08:
0f:37:b4:2b:94:ef:1a:0b:28:92:cd:99:fa:78:9b:81:08:53:
4e:6b:c9:98:69:25:56:c6:9a:10:b8:64:ea:74:45:e0:62:2f:
af:74:38:e9:5f:01:36:3d:8a:d5:fc:1e:47:f4:d4:31:85:cc:
1b:d9:8e:88:f1:36:67:57:72:c9:a0:47:90:22:59:30:da:02:
73:59:d0:67:94:f0:ab:99:68:b8:17:64:68:8d:5d:b3:8c:20:
db:8e:77:69:bf:8a:36:38:a2:34:ca:e2:62:c7:a1:7d:6d:64:
62:6c:ea:2b:cd:24:df:09:13:a0:e9:30:c8:16:7d:72:ad:5f:
62:f8:ee:18:c2:f7:ea:df:18:4b:49:f3:33:f4:9a:a0:60:ce:
d7:62:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:37 2025 by rpki-client