Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
File: 2e892f0a-0935-3e59-bd12-3f0547f44c55.roa (raw, json)
Hash identifier: ONiqYe9YXkeVvcNGK9o0mFsHyAAafuqNUlaO82DFbw8=
Subject key identifier: 8E:C9:23:5C:D9:95:57:06:00:91:4D:BC:86:01:E5:60:16:01:B7:DD
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858491D7175E7335E917E04CBF280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 130.137.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:75:e7:33:5e:91:7e:04:cb:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=002aa50c-27f9-404e-8482-c865f5d3f1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:7f:c3:2c:f6:78:c9:17:54:09:aa:42:fa:
08:2f:41:61:5d:fd:c8:f0:15:29:7a:49:ab:ff:60:
62:66:49:52:2d:36:38:77:36:cf:83:0e:82:5f:4d:
20:58:92:a6:4d:a2:27:7b:28:ce:39:3d:a5:d5:68:
f4:0a:a8:57:91:39:15:a3:a0:15:11:80:83:30:2e:
9e:8c:0d:56:2a:15:4f:2c:09:68:3a:ee:02:ee:6f:
a0:7d:78:bd:c9:cb:c6:fb:48:dd:f4:39:4a:6f:77:
bc:9f:6f:c7:d0:61:49:38:9d:9d:19:bc:e8:05:9e:
2b:23:d7:66:21:2a:40:b0:42:c3:79:cd:16:72:56:
0e:8b:7f:8d:09:47:af:58:20:e9:93:7e:58:2c:91:
a6:76:9c:7a:c1:51:e4:fa:31:ea:c2:e8:ea:70:6c:
af:39:93:fa:f7:da:dd:fc:f5:b3:8c:e0:b6:93:81:
02:d2:db:67:52:b2:1d:f6:e2:32:93:15:30:c8:99:
e8:6a:ae:4a:71:52:54:c1:c2:f5:4a:18:e4:7e:da:
bb:26:61:a3:74:56:62:0f:28:f0:79:39:e8:ec:bb:
91:9b:82:f1:3f:e9:f3:64:de:ab:a4:90:a1:dc:34:
8d:3c:e2:b1:58:1e:9f:f2:a3:94:66:1c:6b:c1:e9:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:23:5C:D9:95:57:06:00:91:4D:BC:86:01:E5:60:16:01:B7:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e892f0a-0935-3e59-bd12-3f0547f44c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:bd:0b:ba:9d:b6:1f:bb:f3:7a:09:3b:12:e4:72:81:c2:44:
45:49:16:4d:76:c9:3d:9b:e4:19:83:ac:e7:4a:78:a6:9c:3f:
79:12:39:21:94:25:ba:53:b1:5d:41:74:50:53:21:2c:c9:45:
4b:68:f2:64:c2:1a:63:93:6d:05:77:c0:41:87:1e:2b:e5:25:
13:12:6c:24:b5:a4:44:7c:53:a1:f4:7c:e5:2a:04:96:22:bb:
3e:ea:d1:d9:99:15:e6:a0:b4:9a:d8:9e:33:09:8e:d1:b1:49:
8f:fe:eb:74:29:a6:c9:ba:f1:8b:00:91:f7:bd:f6:96:4a:1a:
0c:89:53:65:f8:07:eb:30:8c:ed:30:89:b3:f3:8d:f5:73:e7:
d9:b3:7b:50:22:e3:db:f6:23:8b:45:b3:44:24:b8:53:c1:da:
02:33:c3:07:30:97:19:cc:a9:18:24:14:34:de:97:17:57:b4:
6a:9d:15:d2:32:1a:89:4c:be:bf:ba:70:17:16:a4:d5:08:e0:
7d:f8:cc:ef:ae:4a:c7:d2:b1:3e:77:b4:fb:3c:78:e4:73:ba:
b7:8d:fc:b7:79:b6:75:cb:7f:ac:23:61:9f:c6:c2:59:fb:48:
68:8c:63:ad:ad:a6:2c:cc:1b:94:6f:6c:fa:ba:94:6c:df:40:
2e:cc:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:15 2025 by rpki-client