Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa
File: 3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa (raw, json)
Hash identifier: UDMh/gBqq8uQwfJ0zEjpSg3VHubRbE2F2rbRtjzj620=
Subject key identifier: 26:C4:8A:35:54:2C:8E:A4:41:07:C0:12:C0:DA:FC:9B:7F:C6:65:BC
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848B6261AB7A5D8F9B21EC7AB80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 58588
IP address blocks: 130.137.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:1a:b7:a5:d8:f9:b2:1e:c7:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=b68ff830-2535-4896-bd4f-5c946c19d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:f1:8c:13:4f:c5:b0:d8:b2:0d:d6:cd:4d:
36:0b:c7:19:7d:43:1d:9c:95:12:f7:6b:1a:5a:57:
45:71:e3:49:ea:69:f4:35:a3:66:e6:94:ba:3c:6d:
a7:04:55:3f:7b:34:8f:35:bf:4e:1d:84:c0:d8:b3:
a9:3a:43:57:60:ea:08:26:9b:90:c6:0f:b8:a8:74:
40:9f:15:53:4b:d6:c6:4e:9b:fc:67:18:8b:22:b1:
e5:8b:52:e7:cd:dc:9b:8f:39:6c:4e:b6:c5:4f:bd:
10:d3:91:4e:6a:a0:94:15:bf:2c:6e:f1:a6:19:d4:
c0:af:5f:14:1e:13:f9:9e:1d:8b:d1:4d:9a:c5:fe:
f9:d9:10:74:a7:fc:b9:31:08:da:c6:d9:6e:26:51:
db:b0:66:a3:b5:a0:3d:2c:62:c8:12:63:06:b4:0a:
1f:3f:3c:6f:3a:ec:b5:b4:63:79:3c:f9:90:d8:8a:
c4:cb:37:75:ca:72:bf:36:24:ac:5f:cc:59:f8:fe:
74:40:ac:f2:66:57:47:63:a1:7b:a2:b9:f2:7d:68:
3e:fa:52:67:fd:97:56:54:66:e5:f5:cc:ab:8a:10:
ef:8b:48:9c:56:cd:04:ff:eb:da:b0:0a:71:6a:77:
0c:c4:34:85:98:5a:14:f3:ab:af:a2:83:00:43:3e:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:8A:35:54:2C:8E:A4:41:07:C0:12:C0:DA:FC:9B:7F:C6:65:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3d7e3dee-cdac-3239-98eb-0dbe8aa33194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d5:72:ed:30:a6:3f:4f:06:18:e7:3a:20:7a:a4:ca:f3:ef:
b6:b2:cc:c2:4e:87:88:00:f3:ad:d2:9d:6b:e9:44:fd:b8:ee:
51:6d:b3:d9:dd:86:d8:fb:10:61:b3:dc:b3:f9:58:e7:b2:94:
f4:13:e5:4b:ff:a3:bb:23:e1:aa:f2:01:ee:e9:f6:28:cd:7f:
dd:8c:44:92:0e:1b:f1:bb:83:b1:a0:4e:d2:ed:41:c9:d4:58:
80:2d:5e:03:ea:ee:8e:e4:99:88:7a:5c:e6:a3:18:21:2c:e0:
6e:4d:19:01:b1:3b:d2:94:cb:b6:7c:99:d4:d2:0f:9a:cb:e3:
b1:5b:c4:bc:3a:ca:25:59:1c:02:ef:6b:2c:c6:d8:63:71:20:
2c:f6:b7:b8:f4:f9:83:c1:4b:6e:88:1e:75:44:35:d6:55:f9:
60:4c:d4:54:75:c4:e2:86:4a:44:97:d7:93:09:82:04:b3:df:
cb:ac:4d:01:df:0e:68:7c:ab:b9:73:d6:7e:0f:94:5c:9b:9d:
f2:b9:f0:62:23:ae:4d:41:9b:8c:b8:b4:88:79:6d:89:62:ef:
49:f2:12:9c:87:12:b6:4e:ad:f4:67:a8:61:7d:7f:e0:b1:ef:
7e:81:e9:c7:55:d5:42:cc:0b:45:27:23:52:6d:c6:99:7a:fa:
88:da:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:22 2025 by rpki-client