Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e1ccac6-5e9e-334e-9165-df47921de972.roa
File: 9e1ccac6-5e9e-334e-9165-df47921de972.roa (raw, json)
Hash identifier: scWb7UQy7365LwGFsXduM6buKAFG9WI5859MF9IIoMY=
Subject key identifier: 28:7D:DB:5F:64:B6:91:D6:09:57:85:64:3D:BC:9F:68:57:F5:2F:11
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858491D7173E5D5BCD49533C22700
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e1ccac6-5e9e-334e-9165-df47921de972.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 130.137.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:73:e5:d5:bc:d4:95:33:c2:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=85468000-df6d-472b-8b32-14c0cf5d97e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:df:3c:35:05:b8:6e:77:c0:87:b1:1b:27:
1c:13:99:2d:96:d0:2e:97:78:bc:79:95:ab:34:08:
fa:fe:91:ff:12:81:45:52:3f:4d:ff:f4:ec:c4:67:
e5:3c:b4:e0:d6:f6:e5:d8:e2:da:4c:ec:e6:94:d3:
bc:bb:80:87:50:5b:a3:f5:2b:29:81:23:5d:28:43:
c6:03:65:5b:de:56:b3:1d:76:9b:95:51:4e:bb:ca:
f8:28:71:dc:d9:fe:a5:34:1c:f2:81:7f:0f:28:16:
18:f3:c6:bf:44:a3:c9:69:db:e2:45:80:b5:f6:21:
e3:b7:8c:37:59:55:8a:e6:28:6f:57:f1:a0:29:43:
a4:e6:b3:ad:02:f3:c5:51:19:08:9b:87:b9:78:3d:
f0:04:2c:fc:32:1a:dc:6d:c3:1f:89:ea:22:5f:07:
f4:ae:d2:32:74:35:68:ff:75:11:da:47:b7:42:23:
8c:69:c8:fd:53:f9:da:8f:de:98:f2:c0:be:0a:17:
3f:30:c6:73:0d:c2:7b:30:94:a5:ca:85:35:e9:db:
c7:0b:2c:c2:e8:b5:07:23:6f:1d:14:79:97:f7:0e:
9a:82:49:a8:61:9c:40:32:f5:8c:56:ec:5f:f7:ba:
7c:3a:0d:e2:08:6b:1c:d6:82:57:2a:26:3d:54:b8:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:DB:5F:64:B6:91:D6:09:57:85:64:3D:BC:9F:68:57:F5:2F:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e1ccac6-5e9e-334e-9165-df47921de972.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:f8:0c:aa:9a:ad:36:31:29:8b:8a:01:a8:87:5f:1f:fb:21:
33:03:32:4f:04:77:8a:77:df:f7:89:ed:f9:f8:a2:c7:af:4e:
82:51:c8:61:81:d3:18:64:41:aa:b8:6a:86:7c:ce:70:2c:40:
da:62:b0:87:db:d9:2a:3e:28:8f:55:7e:59:ed:81:75:1c:9f:
ed:39:48:50:cd:7f:04:9d:ad:d8:23:7c:95:bd:7e:3c:b4:a9:
b2:bd:35:fb:8a:4b:87:9c:d8:30:2f:6c:1c:6c:af:30:3a:38:
19:b6:8c:44:3e:21:30:64:d7:2c:02:90:fa:19:70:e0:29:ae:
3a:d1:08:ea:fc:ed:ab:06:a0:2e:c0:24:ce:94:bd:6d:64:fd:
f2:1d:0a:30:88:68:8d:a0:7c:31:23:00:82:e3:fd:33:9c:82:
45:6d:b1:f4:c3:fd:2e:42:58:ff:66:af:d7:5e:67:6a:69:61:
e2:ad:ea:0e:c6:a7:42:e4:7f:56:f1:b1:a8:fc:a4:b6:f1:16:
6e:3b:2c:e8:91:88:21:fc:6d:63:5d:6c:fb:f5:00:04:19:47:
f8:45:2f:3e:38:c4:bf:e9:f9:a3:4b:8e:63:f5:40:7a:a0:f3:
93:ce:88:f9:3b:49:c5:c6:b1:e8:5d:d8:c2:be:e8:e4:84:fb:
ca:2f:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:23 2025 by rpki-client