Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa
File: a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa (raw, json)
Hash identifier: x4EuvFiO8Ynbc4eAaO/d/v7ThER6K2YoDcQb5PFQ7Y0=
Subject key identifier: 42:C6:A9:F9:B9:17:1C:C8:7A:85:6F:10:73:08:C7:06:A8:18:74:90
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285848EC96A45CA6E8BAB5B6155500
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 130.137.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a4:5c:a6:e8:ba:b5:b6:15:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=c52d2fd8-45d0-4482-a881-40568404adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:2f:9e:25:40:06:f6:bc:2f:a7:28:0c:7e:
96:3a:13:08:bb:e0:87:49:8a:ea:ac:fa:e0:8d:e4:
1c:da:c7:2e:ae:5a:87:f0:be:a6:6e:3f:eb:dd:08:
f5:b5:97:34:a5:74:cc:47:e7:fe:62:73:ed:51:b4:
ff:ae:45:88:4b:e3:e6:bb:35:d1:35:a8:b1:72:cc:
ad:ba:7e:bf:23:cc:d3:81:f8:bb:6f:92:a2:a6:43:
f0:b8:79:81:fa:1b:c8:0f:29:9b:e0:a1:19:28:e3:
61:5c:81:7e:35:08:d0:51:f5:12:05:64:fb:99:14:
bd:1d:fd:4e:68:d7:80:09:ea:26:22:55:b9:51:1f:
bb:84:74:10:df:d3:3f:ca:54:c5:7e:b3:5f:d1:ea:
2c:ac:b5:21:fc:a7:83:d3:7b:aa:fa:7d:24:84:e4:
98:7b:de:3c:43:11:2e:2d:99:e9:11:da:bc:00:76:
05:cf:95:8b:ab:ff:dc:4d:f4:6d:b0:ca:57:58:a5:
5c:29:c8:16:34:e1:78:15:77:28:6f:bf:aa:dd:3e:
ba:67:d3:de:4c:4e:1d:1f:eb:01:3c:09:4f:70:01:
c7:e8:3a:69:7b:0d:3e:9a:02:16:7d:2b:ee:f3:77:
fb:9d:6b:d1:36:e0:0e:b8:0c:85:1f:33:f6:a2:c9:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:A9:F9:B9:17:1C:C8:7A:85:6F:10:73:08:C7:06:A8:18:74:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:79:76:85:04:1c:d4:1b:50:0b:ae:50:67:50:10:35:a1:29:
bc:f8:72:e6:2f:d5:a9:09:7e:2b:cf:e4:dc:70:df:84:d8:b6:
67:78:6b:90:02:a8:93:29:6f:90:51:2c:22:75:91:fd:72:b2:
02:3e:e2:2f:1f:d5:61:6e:91:67:bd:3a:20:10:8f:24:4b:51:
4d:ce:0d:75:fb:ad:c8:68:eb:c6:59:bf:26:9e:5b:34:d7:d0:
ad:fe:67:47:8e:4e:94:ed:9b:a9:e3:d3:fc:63:fb:af:36:c6:
33:91:04:06:9f:0e:06:12:88:1b:f9:68:e1:dd:03:be:49:e5:
d1:01:6b:7d:59:53:8e:ac:1a:8b:87:1f:21:af:e7:34:b8:a7:
f8:dc:d7:60:13:ca:0e:f4:20:e9:0f:72:89:df:a6:b2:cb:ac:
d5:0d:31:b4:96:25:17:e8:53:eb:98:f4:1e:54:43:b1:20:dd:
e7:70:57:da:77:b4:0e:57:00:ca:f3:25:3e:d4:20:d9:a4:f5:
e4:c9:d7:50:29:24:76:45:84:0b:d1:a3:77:58:34:5c:cd:b1:
4a:e2:af:3b:b8:85:7b:b9:f7:28:cd:21:a4:84:8b:af:24:c1:
ec:17:3a:de:f1:a6:54:53:dd:07:4e:12:a1:04:21:17:a6:f7:
15:e7:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:08 2025 by rpki-client