Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
File: 155ef00e-8903-3078-b1a9-610088db3245.roa (raw, json)
Hash identifier: II9aJ4Hccc1g+yaywBbR8/1f3QNYkHn0moEitCfRm0o=
Subject key identifier: 6F:AA:47:B0:F3:65:C2:D2:D9:81:A6:13:52:D3:8F:29:29:4E:20:BA
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848EC96A497C223A55D965DAE80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 130.137.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a4:97:c2:23:a5:5d:96:5d:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=4be2b824-3dc5-4fa4-b1cb-a69d8098b7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:47:d7:ba:f4:1b:6d:f2:65:b1:dd:fd:e7:
d7:44:61:79:78:ad:3a:c6:f0:42:e8:bd:a0:9e:b9:
c2:d6:b8:d5:18:f4:f7:9b:ca:f4:c6:a5:0b:c8:5b:
fe:c8:9a:af:94:69:c8:de:3d:50:0e:70:30:e2:b7:
3c:ec:99:72:72:ad:31:9f:2c:d6:9b:d7:03:86:1f:
8d:51:64:5a:7c:41:7d:21:64:b6:a4:37:e9:55:0c:
69:3d:1d:b4:73:ab:a7:d8:ef:98:f4:a9:ab:4e:72:
1c:6e:86:65:73:60:e9:89:a7:8f:c3:93:31:9b:9a:
eb:08:ff:a6:0d:c2:da:de:4e:7d:81:1e:5b:7e:f1:
d9:46:82:73:63:3a:61:60:c2:c7:a2:52:ca:ca:20:
71:5a:29:ee:9d:c8:04:12:1b:86:7d:e8:b2:7b:1f:
6b:82:2d:c3:64:39:98:ef:a9:6e:34:b8:05:04:7f:
7f:89:7c:25:57:9e:f0:d2:00:d7:f7:62:2f:7c:e7:
a3:48:1f:1f:cf:a4:91:a6:a7:ed:28:af:28:08:cf:
03:ab:26:0f:ef:e9:3d:cc:33:a6:0c:d2:6c:20:69:
82:b0:70:ea:68:77:7a:d1:b5:81:42:f8:f8:9e:28:
df:53:0f:36:5f:3c:58:15:4f:d8:c9:27:e5:1a:9b:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:47:B0:F3:65:C2:D2:D9:81:A6:13:52:D3:8F:29:29:4E:20:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:7e:16:04:75:4f:0c:02:72:a0:58:d8:eb:80:8f:bc:c7:fc:
31:02:31:3d:28:39:a9:b0:ba:4e:85:60:1f:6a:b6:61:46:9b:
fc:ad:a1:c0:70:2a:b4:5f:e9:e4:32:df:06:52:ea:ce:52:70:
84:d1:36:af:2c:5e:d4:e5:aa:99:83:89:62:c9:aa:11:4a:c3:
cd:84:ab:39:e7:45:03:b4:b3:d1:87:60:9a:da:5e:18:d5:06:
e9:5e:8f:5b:84:76:c0:2b:37:f0:76:19:37:c3:73:a6:24:64:
f0:32:9e:e6:a1:98:af:78:4d:be:a2:0c:49:1c:5b:1e:a0:f5:
e7:be:04:f9:e7:e5:ab:86:68:fa:25:9b:e4:bd:0c:d4:6d:0a:
30:00:4c:ec:f1:90:19:64:e6:67:71:6c:79:14:f8:33:b5:4b:
c5:fc:5f:4c:86:9c:de:77:08:d2:59:f9:e2:98:ae:07:e7:e6:
14:9c:a2:2c:36:29:10:0a:72:be:6c:4a:a8:45:b8:1b:5a:ca:
4f:39:83:47:cc:33:29:5c:c0:99:69:74:1a:ef:97:dc:1a:cd:
7a:a8:b7:a2:05:7c:c1:a0:f6:7b:0b:a4:79:41:09:79:86:4d:
73:ef:1a:49:47:d4:5b:f2:d7:b8:55:de:a0:53:a8:53:79:81:
06:93:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:05 2025 by rpki-client