Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8dac63ae-dbd3-3f65-963f-1105258ac9c3.roa
File: 8dac63ae-dbd3-3f65-963f-1105258ac9c3.roa (raw, json)
Hash identifier: prvwGjGYcli/nv5o6zF0vjUzBRy9G8WBapA8xh7g9g0=
Subject key identifier: BD:30:DF:19:F5:46:5E:D0:48:E5:5F:47:54:1C:DD:3A:9B:69:EC:C8
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848E9CBDC7AEDEFA4CCE32967C0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8dac63ae-dbd3-3f65-963f-1105258ac9c3.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 130.137.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:dc:7a:ed:ef:a4:cc:e3:29:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=583f2e53-709a-41b0-aa37-d676a4cdb684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:7e:40:d9:aa:a8:f2:33:90:9d:e4:d0:a6:
f4:22:01:f2:a1:ba:10:5d:c7:b3:a6:f4:61:68:9e:
6b:37:59:d1:d4:1c:bc:6d:63:56:2b:82:ab:25:ac:
15:3a:63:7b:61:54:bf:5d:4a:1e:60:a4:e6:f4:b3:
05:4f:ce:a2:f0:0f:01:ec:42:54:35:5f:f8:98:78:
5b:a6:7b:7b:6d:bb:fb:9d:ff:d0:6a:6e:e2:82:1b:
21:3d:37:38:a3:55:78:8a:e4:f5:7a:49:d0:e5:2f:
a2:d2:4d:16:a0:22:68:6f:08:35:5d:d2:ab:39:71:
e0:e5:a7:77:ef:11:c2:ee:59:3a:c2:48:49:2c:81:
fc:3a:f4:5d:bb:52:2e:02:a5:33:0b:e0:f2:50:ec:
d6:af:89:f8:d2:f6:c5:c9:af:1e:fe:19:48:ba:0e:
79:01:8e:4c:f1:b6:a8:16:7a:5f:e4:9d:e1:13:d8:
65:dc:a5:99:92:43:0a:44:41:90:fc:68:17:80:f6:
b9:6e:c3:c7:dc:bf:b5:30:14:45:e2:ff:06:57:91:
b3:cb:77:1a:01:7b:68:c2:c6:81:5b:0a:27:ca:b2:
68:80:62:4a:38:9f:23:fd:8c:20:f7:54:2f:96:8a:
2f:c3:ab:a8:07:10:fd:49:17:e7:67:7f:12:f2:f4:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:DF:19:F5:46:5E:D0:48:E5:5F:47:54:1C:DD:3A:9B:69:EC:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8dac63ae-dbd3-3f65-963f-1105258ac9c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:66:e0:d2:5b:67:17:71:9e:80:82:b5:02:cd:1d:4b:70:66:
15:20:26:e4:3e:29:8a:a3:03:4b:12:81:a6:00:e7:c7:a9:a2:
07:3e:81:28:52:7d:2b:cc:c1:4b:c2:fd:b9:ca:5e:70:9b:7f:
05:4d:f7:c0:4c:cc:16:10:fc:6a:64:45:35:f0:fb:df:be:85:
04:99:37:3e:05:d3:c8:c9:e1:4f:b7:66:56:9d:6d:3a:1c:b1:
5c:50:26:80:44:41:2c:f1:26:15:f1:0b:b0:03:5f:e2:c6:32:
f2:6a:b2:93:4b:40:96:4a:82:f0:90:ae:48:cc:98:2c:21:3e:
86:c6:1a:1c:67:00:1b:91:68:9a:f8:ec:6a:11:bc:ad:e7:1d:
1e:03:b9:95:40:a2:fc:d3:05:96:b3:b6:1d:34:0a:91:05:27:
a5:6c:d6:8e:55:54:ce:09:39:da:33:84:40:71:bf:a0:81:2c:
9c:00:6f:83:29:c9:ec:dd:40:66:52:97:73:4c:9c:2d:e6:ac:
a1:52:13:18:27:52:29:5f:43:8a:90:85:d8:92:33:88:83:49:
42:15:9a:ae:f1:f4:16:58:97:aa:9b:00:f4:ea:06:b0:2a:31:
b6:80:c5:4c:f2:8a:ae:a6:ac:09:af:d3:86:ce:a2:ac:53:16:
d7:79:a2:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9x67e+kzOMpZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
NTgzZjJlNTMtNzA5YS00MWIwLWFhMzctZDY3NmE0Y2RiNjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqJ+QNmqqPIzkJ3k0Kb0IgHyoboQXcezpvRh
aJ5rN1nR1By8bWNWK4KrJawVOmN7YVS/XUoeYKTm9LMFT86i8A8B7EJUNV/4mHhb
pnt7bbv7nf/Qam7ighshPTc4o1V4iuT1eknQ5S+i0k0WoCJobwg1XdKrOXHg5ad3
7xHC7lk6wkhJLIH8OvRdu1IuAqUzC+DyUOzWr4n40vbFya8e/hlIug55AY5M8bao
Fnpf5J3hE9hl3KWZkkMKREGQ/GgXgPa5bsPH3L+1MBRF4v8GV5Gzy3caAXtowsaB
WwonyrJogGJKOJ8j/Ywg91Qvloovw6uoBxD9SRfnZ38S8vRY0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0w3xn1Rl7QSOVfR1Qc3TqbaezIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGRhYzYzYWUtZGJkMy0z
ZjY1LTk2M2YtMTEwNTI1OGFjOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERm4NJbZxdxnoCCtQLNHUtwZhUgJuQ+KYqjA0sSgaYA58epogc+gShS
fSvMwUvC/bnKXnCbfwVN98BMzBYQ/GpkRTXw+9++hQSZNz4F08jJ4U+3ZladbToc
sVxQJoBEQSzxJhXxC7ADX+LGMvJqspNLQJZKgvCQrkjMmCwhPobGGhxnABuRaJr4
7GoRvK3nHR4DuZVAovzTBZazth00CpEFJ6Vs1o5VVM4JOdozhEBxv6CBLJwAb4Mp
yezdQGZSl3NMnC3mrKFSExgnUilfQ4qQhdiSM4iDSUIVmq7x9BZYl6qbAPTqBrAq
MbaAxUzyiq6mrAmv04bOoqxTFtd5okQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:45 2025 by rpki-client