Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40d076bd-39f5-34c5-88af-695d1fb972d3.roa
File: 40d076bd-39f5-34c5-88af-695d1fb972d3.roa (raw, json)
Hash identifier: sVtQ1C07IeZLWxUTlRENPDfZb3xnAL/DJNTwGBxRbgU=
Subject key identifier: 00:85:9D:3C:E6:38:E7:92:F0:2A:30:BC:5D:D9:FC:DE:01:B3:F2:B8
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848E9CBD2D37EA6FC1F16B60A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40d076bd-39f5-34c5-88af-695d1fb972d3.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 130.137.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:d2:d3:7e:a6:fc:1f:16:b6:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=61c108fb-ec1a-4929-aeca-7dc74ea232d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:c6:0c:a0:5f:79:fa:f2:7b:2f:65:5d:cc:
d4:58:22:42:93:c7:a4:77:a8:b1:5e:57:05:69:ba:
46:93:50:be:89:a3:cf:d8:50:9f:54:a3:f5:e2:09:
42:84:b9:82:fe:ac:d3:4e:50:c2:2f:6c:f8:73:29:
e6:9c:4f:15:d3:93:f5:8d:34:b7:80:0e:84:fa:4d:
08:b3:19:b6:32:eb:0c:a9:ee:82:8d:b4:b8:32:f4:
ba:8d:bb:28:1a:1c:c6:fe:57:77:19:9e:d7:6d:16:
5a:9b:ec:b4:a7:da:81:f7:68:3e:9e:31:c1:32:ad:
dc:c0:9c:ff:fd:04:9e:40:48:9b:61:ec:49:e5:c1:
7b:19:e2:ed:fa:42:0a:e9:8c:7b:2c:12:06:b5:69:
27:2a:b5:f3:ea:f9:0f:9c:66:29:c7:e5:c7:2a:78:
df:17:9b:64:8e:29:a2:a1:da:77:1c:9d:fe:0b:fa:
27:d2:13:d8:4e:7a:2a:e8:a0:97:5c:a4:85:ab:96:
06:a5:97:03:f8:a5:29:aa:20:68:21:7f:75:25:34:
35:36:6f:e6:fb:65:1e:78:28:cf:39:1d:05:b7:ae:
22:a1:3c:01:3c:d9:16:20:4b:a7:ea:6c:38:ea:74:
fa:cd:03:ff:16:35:c6:32:8e:48:17:d2:29:df:a5:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:9D:3C:E6:38:E7:92:F0:2A:30:BC:5D:D9:FC:DE:01:B3:F2:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40d076bd-39f5-34c5-88af-695d1fb972d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:d1:9a:78:fc:13:b0:c8:4b:1e:58:b9:3c:71:65:30:dc:c9:
21:35:3f:89:3c:8b:eb:6e:07:2b:77:b0:9d:8c:b9:cc:72:f6:
af:8d:c5:1d:08:a5:6f:cf:c2:95:fa:80:6e:8f:f2:09:2a:20:
fb:34:f9:fc:10:63:8f:59:15:a2:a1:60:d5:bb:03:aa:bd:af:
51:8e:ae:c6:17:6e:c5:2b:68:c6:b1:8f:40:e0:f8:84:18:a8:
16:8f:b7:a8:8a:f2:b8:54:93:fe:17:6c:f9:b5:4d:ee:9d:85:
d3:eb:ad:b6:6d:be:b9:5c:17:71:1f:50:1b:97:7a:0f:85:42:
94:fd:f4:42:31:71:b6:ab:31:41:6d:2b:9c:db:04:7d:8d:f5:
e7:9b:79:1a:86:0f:e2:d3:5d:bc:7e:50:66:cd:c9:09:57:7c:
c8:c8:3b:28:fa:75:c8:cd:b7:c2:2d:0f:cb:43:37:d3:b0:64:
9f:1b:01:25:d0:ff:89:c4:70:99:6b:6e:85:3a:ab:42:55:4c:
4a:cc:3e:8d:d0:8f:aa:09:7d:4e:91:81:7f:f1:e7:67:c2:28:
72:36:60:e7:f0:16:00:bf:11:5f:48:b9:10:48:7b:63:0c:e3:
af:95:ec:fa:30:04:d1:e1:65:b3:05:da:89:af:3e:a6:c8:6e:
bf:61:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:51 2025 by rpki-client