Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/49eae27a-1574-3138-a921-3325cafc2f8b.roa
File: 49eae27a-1574-3138-a921-3325cafc2f8b.roa (raw, json)
Hash identifier: IaCQfPGID0nWgYfEXQPHCGmvl+kSkxoMZDtqYjLvjhc=
Subject key identifier: 1A:C2:17:AA:BB:E1:5A:02:E0:65:A0:AC:C5:0F:C4:BD:3E:56:79:A4
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584913AC133BB174C68500EE2200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/49eae27a-1574-3138-a921-3325cafc2f8b.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 130.137.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:13:3b:b1:74:c6:85:00:ee:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=6156bf63-3ccf-4952-9f88-8e117c9f2ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:8c:c7:47:44:e3:d0:0c:4d:d9:75:6d:e5:
f5:17:12:90:57:65:74:cc:80:c0:a4:7c:68:0a:84:
33:47:f1:ac:3f:3a:46:23:5f:7d:30:25:b6:6d:99:
38:e7:4a:7a:73:10:9e:41:54:8e:ae:10:fb:90:11:
97:95:5a:98:cd:e5:2a:7e:7a:f8:96:92:1b:0d:08:
47:29:d6:a0:73:df:5f:0e:e5:b8:c2:91:3c:85:b3:
a5:85:56:42:ae:3e:5f:dd:05:92:91:c7:87:b9:48:
f3:8d:fb:bc:ba:b3:e4:11:e2:ad:b5:e7:76:b8:27:
5b:41:ad:64:a6:50:ac:0a:03:83:79:dc:af:c3:a9:
fd:4c:6a:29:69:ab:13:a5:90:d5:62:2e:28:0f:75:
4f:1f:b7:31:df:5e:7a:22:32:b2:b8:20:fa:4b:21:
b7:91:64:32:57:50:07:44:58:2f:a8:36:db:9e:57:
ef:53:94:85:af:bd:24:0e:b5:83:42:64:06:20:da:
19:b8:18:7c:2e:8f:d8:09:0c:70:52:ff:98:b3:d5:
4d:16:45:15:f9:08:c7:16:63:25:fe:3a:df:b0:95:
c9:4a:c2:62:ab:f8:6d:0a:e7:df:b2:7d:48:78:13:
fe:72:79:99:b6:dd:3c:03:7a:9f:df:90:69:f6:a0:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:17:AA:BB:E1:5A:02:E0:65:A0:AC:C5:0F:C4:BD:3E:56:79:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/49eae27a-1574-3138-a921-3325cafc2f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:30:a5:89:62:c7:94:8f:64:be:ad:47:42:48:7a:60:57:c7:
7b:82:14:a7:f5:bb:ca:3a:82:12:a8:1c:db:a2:32:0c:93:c4:
0b:39:cf:99:aa:90:50:6a:6e:96:06:fb:50:14:8e:c2:90:b4:
f7:6f:48:49:96:63:64:05:f5:ce:99:6d:bd:28:69:bc:bb:e8:
47:41:16:b8:bb:f0:01:4b:e4:d5:b0:ae:da:1d:c1:0e:80:fb:
13:88:e1:78:9b:cf:38:ec:63:95:84:af:dc:fd:bd:03:3d:04:
db:4e:2b:35:49:90:2d:62:9d:8e:f3:37:47:b1:88:e5:90:d1:
d4:33:52:08:77:b9:4f:46:c7:3f:db:11:0c:8a:5b:af:c8:28:
c2:9f:d7:80:c5:4f:7b:8c:f2:2d:b6:81:61:db:47:8e:41:d8:
34:95:38:ee:60:1a:0e:79:ad:8f:dc:cc:12:44:c2:bf:57:2f:
9a:9d:17:97:1f:6e:2d:58:ac:61:56:97:f0:f7:82:b7:a3:8c:
db:f7:dc:49:de:dd:74:a2:f0:e4:c0:1d:03:cb:2d:50:77:3b:
58:82:df:0f:2e:82:b5:d2:86:de:76:11:04:f1:a7:a7:06:42:
df:16:e5:a6:6a:12:ba:ec:26:61:4a:f7:19:90:a2:b3:87:99:
63:15:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:38 2025 by rpki-client