Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa
File: ac191acc-157f-3778-b6ca-042f58ea699a.roa (raw, json)
Hash identifier: VieS39FgTZPIYJsOG+uqjzwpTTIhlQGyWudF/VPepis=
Subject key identifier: B6:0E:43:D7:58:37:5E:69:2C:41:D1:8B:80:10:53:A3:CD:E0:EE:CD
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858483E1AAEF2A1905FE54C9042E0
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 8987
IP address blocks: 130.137.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ae:f2:a1:90:5f:e5:4c:90:42:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=9e724dc2-28f3-4bb4-92f1-b019283b0390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:b9:30:4f:99:d1:97:15:7a:15:9a:c4:dd:
35:25:f7:09:9d:a0:c8:d6:88:97:bf:5c:e2:52:5b:
88:2a:40:b4:a1:3f:f9:8a:8b:f3:33:d1:c9:7f:f9:
e7:60:99:10:a1:c9:3f:0f:f0:6b:4c:77:46:05:ad:
b3:9c:75:61:86:02:bf:ef:bd:cf:07:94:6d:08:a8:
9d:c6:bc:36:4d:1e:39:b3:f2:49:87:1a:39:04:09:
e7:d0:2e:01:ee:58:53:b0:f1:bb:5a:7c:1e:7e:36:
3d:f2:b6:7b:4e:6e:0e:3f:29:49:9c:de:f2:11:3c:
60:d9:71:3c:cb:46:9a:d0:9a:d4:5f:63:b2:58:8b:
4c:4e:03:e1:08:e0:ea:92:30:bd:b9:e9:b3:24:36:
c8:91:b7:55:14:3f:d5:39:62:b6:e0:27:49:12:fc:
ab:5c:6c:e6:b4:1d:cb:10:e4:01:8e:1a:ca:b4:96:
86:c0:dc:02:28:05:02:49:98:af:73:d1:6c:2a:47:
a5:9d:67:a8:a2:71:42:55:90:f8:dc:73:f9:4b:50:
7d:cf:4a:fe:cd:8d:cc:1e:98:31:aa:0b:e6:b2:2b:
3b:8d:81:bc:be:f0:04:f2:ee:f1:8e:4a:dd:cd:e4:
32:65:df:61:5b:7e:44:2a:89:96:e1:26:a9:e4:ff:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:43:D7:58:37:5E:69:2C:41:D1:8B:80:10:53:A3:CD:E0:EE:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:40:66:83:fc:7e:24:a9:4f:4b:90:82:42:a6:d3:a9:27:9d:
a6:08:a6:3f:de:8e:f4:ce:93:10:58:4d:bd:e3:d6:c2:8d:e8:
02:3e:b2:0d:91:f9:76:b2:2f:37:ab:aa:ba:56:f6:72:0d:87:
db:c0:4a:4f:a3:ab:b4:78:93:d4:2d:eb:15:71:1f:05:4c:80:
2c:f9:19:01:42:a0:38:9b:5d:f4:52:23:04:ca:15:2c:8e:15:
6b:c6:84:e9:23:cb:04:e6:b3:e9:41:e0:8f:50:25:f7:78:ae:
98:61:f5:f0:f8:41:40:ae:f3:56:57:3d:fd:dd:00:1e:1d:17:
15:ef:7e:02:8b:a3:2d:bb:08:a8:a0:3e:8e:20:0d:fd:e1:ba:
dd:d2:83:f9:38:ee:14:e6:ea:59:2c:9f:42:56:b7:a0:39:df:
30:5e:d3:2a:0b:0d:51:82:5d:5b:fc:1f:14:b2:8e:47:20:80:
e7:85:16:00:be:db:8e:15:d2:be:f1:0e:01:26:87:df:14:3c:
80:bf:61:cf:bf:18:17:98:d0:24:7d:4b:35:e9:a1:04:8a:ea:
3f:a6:af:b6:fe:f0:35:c8:6a:13:d7:db:f1:1b:00:16:f3:5b:
c9:c9:be:ca:0f:f8:97:69:7c:e7:78:a0:5b:d3:70:6c:db:61:
ad:f4:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 16:06:19 2025 by rpki-client