Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a16f382f-1f3d-3929-b88f-5e6775a74a96.roa
File: a16f382f-1f3d-3929-b88f-5e6775a74a96.roa (raw, json)
Hash identifier: CHOZxkpiBYkFM0QBnXE/W/eIwT4D6Cvj3RHNq4i0USI=
Subject key identifier: C7:3E:45:91:A4:46:E6:5F:AA:B7:E0:EF:6A:8E:65:40:03:B9:42:04
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848547021E23E9608C33D9C1400
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a16f382f-1f3d-3929-b88f-5e6775a74a96.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 8987
IP address blocks: 130.137.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:21:e2:3e:96:08:c3:3d:9c:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=494c9294-76fd-4f14-803f-f7132c484ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0e:62:db:cb:fb:96:6f:2c:34:3f:9b:91:6c:
9c:03:63:d5:bd:8f:ef:55:79:72:c3:99:ec:65:fe:
5f:62:f2:aa:df:5d:a3:15:c2:fe:95:05:cf:b7:52:
8c:66:f4:98:dc:bf:55:5d:17:44:81:0e:41:5b:70:
e7:19:40:d6:21:0d:ff:35:63:e3:0e:b7:bb:c6:a2:
b9:8d:a7:7e:47:e6:18:b8:b4:27:ee:f2:df:a2:aa:
53:8e:00:35:82:9e:ab:e3:17:bd:fa:33:2f:a5:bc:
5d:df:b0:5a:68:b9:0a:18:ce:33:bf:41:7c:da:3e:
23:28:94:9a:f6:a4:3a:1f:88:48:58:0a:60:41:01:
47:fe:0a:7e:32:b6:7b:e8:01:8b:6d:eb:eb:b9:4b:
7a:85:49:3a:33:a3:c4:c7:e5:16:0b:f1:9a:79:df:
67:0c:d4:a2:7c:9d:8b:28:97:92:44:d7:b9:0d:0c:
e5:95:1f:1a:d6:33:81:16:3f:29:d6:d3:8a:f2:5c:
c4:20:82:16:94:87:7c:7e:b7:9c:7f:da:91:98:06:
47:e7:23:51:84:2a:b9:bb:d7:99:66:cd:4d:a4:f1:
ec:22:9d:b3:83:3d:27:d1:94:71:c0:22:81:b0:52:
ae:c2:76:ae:c3:9f:57:8b:e0:4d:24:f8:f7:e2:d1:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:45:91:A4:46:E6:5F:AA:B7:E0:EF:6A:8E:65:40:03:B9:42:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a16f382f-1f3d-3929-b88f-5e6775a74a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:c5:ea:36:b9:3e:45:4a:12:2d:4c:a0:13:d6:40:b7:ae:c5:
e9:09:e6:ec:8b:db:5a:74:6b:4f:c8:13:4b:be:4b:c7:37:35:
73:38:e2:6c:00:c1:ed:d6:e1:f1:0b:fd:89:35:3c:0e:5f:77:
3b:28:9d:38:63:99:1a:37:aa:b4:63:4c:ba:23:e9:03:59:10:
2d:eb:42:05:b9:df:cf:5f:7d:47:cd:a1:fa:15:d6:56:2d:92:
25:d4:32:0b:f3:61:99:72:37:90:06:33:6c:38:e1:1d:78:a7:
e5:53:7d:b4:b5:86:07:cd:93:bb:2e:4d:56:46:dd:77:a5:c8:
81:0d:7d:fd:d8:2d:90:ed:4a:73:65:2a:62:33:33:39:1a:7e:
b1:88:71:9e:ad:39:50:61:37:35:9e:45:df:9b:d6:b7:c0:35:
6f:25:b9:5a:06:97:fb:d7:3b:1b:43:94:19:4e:43:73:ce:e0:
5b:60:1e:a0:a4:cc:5e:b8:0b:aa:3c:ae:de:6e:d0:99:c1:80:
6b:19:84:48:20:20:a4:cd:29:6d:05:4f:95:27:fc:bd:b2:dc:
65:f0:7b:40:43:66:04:86:14:80:3e:07:50:cf:e1:fb:03:fc:
0d:66:45:03:86:f3:e1:89:a9:c4:63:5c:92:35:75:87:65:09:
c9:e8:bf:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcCHiPpYIwz2cFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
NDk0YzkyOTQtNzZmZC00ZjE0LTgwM2YtZjcxMzJjNDg0Y2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg5i28v7lm8sND+bkWycA2PVvY/vVXlyw5ns
Zf5fYvKq312jFcL+lQXPt1KMZvSY3L9VXRdEgQ5BW3DnGUDWIQ3/NWPjDre7xqK5
jad+R+YYuLQn7vLfoqpTjgA1gp6r4xe9+jMvpbxd37BaaLkKGM4zv0F82j4jKJSa
9qQ6H4hIWApgQQFH/gp+MrZ76AGLbevruUt6hUk6M6PEx+UWC/Gaed9nDNSifJ2L
KJeSRNe5DQzllR8a1jOBFj8p1tOK8lzEIIIWlId8frecf9qRmAZH5yNRhCq5u9eZ
Zs1NpPHsIp2zgz0n0ZRxwCKBsFKuwnauw59Xi+BNJPj34tHA4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMc+RZGkRuZfqrfg72qOZUADuUIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTE2ZjM4MmYtMWYzZC0z
OTI5LWI4OGYtNWU2Nzc1YTc0YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/F6ja5PkVKEi1MoBPWQLeuxekJ5uyL21p0a0/IE0u+S8c3NXM44mwA
we3W4fEL/Yk1PA5fdzsonThjmRo3qrRjTLoj6QNZEC3rQgW5389ffUfNofoV1lYt
kiXUMgvzYZlyN5AGM2w44R14p+VTfbS1hgfNk7suTVZG3XelyIENff3YLZDtSnNl
KmIzMzkafrGIcZ6tOVBhNzWeRd+b1rfANW8luVoGl/vXOxtDlBlOQ3PO4FtgHqCk
zF64C6o8rt5u0JnBgGsZhEggIKTNKW0FT5Un/L2y3GXwe0BDZgSGFIA+B1DP4fsD
/A1mRQOG8+GJqcRjXJI1dYdlCcnov+U=
-----END CERTIFICATE-----
Generated at Mon Feb 10 15:56:14 2025 by rpki-client