Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d8c8ae3d-9dbe-38ae-a66a-1ea1d030bf79.roa
File: d8c8ae3d-9dbe-38ae-a66a-1ea1d030bf79.roa (raw, json)
Hash identifier: bo/+0DGepnS5S1HlZADWrb7BIdSPFt61lYRr4F3eDWg=
Subject key identifier: 95:9A:40:76:A2:23:FC:A3:7F:40:9A:3A:39:8F:CA:98:33:44:05:EC
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584930DE6DEC7A60C8C58164D260
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d8c8ae3d-9dbe-38ae-a66a-1ea1d030bf79.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 130.137.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6d:ec:7a:60:c8:c5:81:64:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=34fd6ac6-9e3f-4962-a464-a8b9950ea799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:d3:da:1a:9c:75:c8:a0:eb:af:05:28:08:
7a:63:1b:88:68:1f:48:b0:63:ac:cf:2a:46:19:77:
a5:39:27:89:14:ef:97:3b:03:a8:9e:8a:9c:72:11:
fe:ba:69:52:52:8a:df:27:18:84:c0:cb:ac:34:35:
60:2b:5c:46:d6:c7:48:0e:9e:11:a1:d0:6f:99:f4:
8d:76:19:fb:bf:0d:54:83:9a:ce:00:51:9d:c9:f2:
aa:42:d6:24:18:10:20:01:a3:98:c4:29:d6:32:4a:
f5:f0:68:21:ea:5f:e8:49:fc:ce:ed:c9:cc:c1:82:
cf:52:39:9a:c3:0b:b1:2d:ad:97:67:bf:4d:81:42:
b3:8f:5a:4a:60:ef:db:85:bb:a1:41:e7:9c:f9:53:
98:4c:f9:97:7e:6f:07:fd:e4:7d:37:a8:21:5e:0a:
86:30:3c:e0:34:8c:7b:10:64:76:3e:86:e0:99:9e:
a3:5c:62:54:74:af:81:9f:7e:55:04:d3:f6:1d:a2:
96:52:00:0b:07:93:25:e0:2f:aa:7a:75:6c:d1:32:
92:11:d7:60:dd:b8:1b:68:ab:4b:05:5a:cb:df:11:
88:a6:38:73:7b:aa:a3:0f:75:ed:0f:51:4a:25:53:
84:24:15:85:10:af:60:fc:94:3c:ec:86:86:54:0e:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:40:76:A2:23:FC:A3:7F:40:9A:3A:39:8F:CA:98:33:44:05:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d8c8ae3d-9dbe-38ae-a66a-1ea1d030bf79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:25:19:0d:08:dd:10:16:88:de:60:96:92:96:08:ac:6f:36:
13:ea:be:de:a0:66:6d:4f:a2:1e:b6:bd:db:85:0e:50:64:40:
8c:12:d6:01:68:c8:45:2b:92:c0:51:24:56:6c:c4:fa:2b:e9:
a5:5e:19:9b:01:2f:df:29:d1:a3:ee:9b:89:be:99:ba:87:57:
64:4d:d6:d2:7f:cf:f5:ab:ea:5e:92:30:64:c8:35:44:f2:87:
12:02:10:26:e6:34:94:c0:77:85:d9:d1:c5:b0:62:25:08:08:
c2:16:4c:15:be:49:e9:4e:36:87:8e:82:1c:9f:1d:40:a7:bc:
ad:53:58:2f:6e:d5:47:9b:7b:4a:59:6f:43:d9:f4:e9:88:33:
d3:b2:6b:84:4c:f2:be:2b:e9:91:b1:20:23:a1:a2:c9:89:3c:
8e:45:e1:7c:94:0c:cf:24:79:fc:49:2d:5b:ca:2c:a8:48:4f:
a2:18:56:b8:9e:87:af:c3:c5:6a:19:63:a2:8f:67:58:01:b9:
a4:60:fb:70:a6:6d:84:53:4b:e3:6e:a6:de:d3:62:6d:a2:01:
d9:bb:d6:d6:a0:91:db:c5:9f:64:22:4b:99:bd:b0:b9:ed:50:
1a:dd:31:79:47:4e:84:46:d2:dd:dc:66:e9:45:c9:4b:10:40:
59:c1:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:19 2025 by rpki-client