Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa
File: f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa (raw, json)
Hash identifier: WKvuM+DSXOQ1K/lNbbPrIg/erIdcU/orAJPUXmirbp4=
Subject key identifier: 3D:73:F1:A1:AE:CE:ED:54:07:D6:26:96:EE:97:2F:2D:A9:E6:F7:93
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858491D71747352A751D55320E080
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:74:73:52:a7:51:d5:53:20:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=c06f8d4a-f254-4745-b243-46f9d5f21278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:09:0d:b5:a6:29:c1:45:43:b3:e4:69:1f:
3b:f6:84:33:27:6e:58:25:0e:1c:e2:ab:1f:bc:3d:
92:04:7d:e3:7d:54:6a:ab:1f:34:9e:65:92:8b:7b:
9f:e1:54:ba:80:1c:aa:d8:a1:e8:c8:73:74:3d:cc:
c1:da:bb:7e:98:8b:84:d6:9a:1b:f8:1e:6b:da:cd:
e4:d1:4b:22:63:1f:59:92:c5:40:70:ce:28:47:d5:
1e:df:e0:b3:25:b4:fc:3f:a4:43:b9:bb:4a:7b:16:
9b:91:9f:4e:fa:b3:c1:c0:13:6e:13:ed:fc:6d:a4:
de:f2:6f:21:c6:12:30:00:ab:29:ab:ff:28:6e:b1:
94:4a:93:a7:56:b8:d8:c7:fc:d8:a5:a4:32:d2:2a:
0a:1c:00:32:4e:a9:99:5d:bc:c9:ca:af:dd:37:b4:
28:32:cd:d9:ce:a9:7d:9d:0e:8f:2e:80:f6:f4:66:
e0:a4:e9:ec:60:af:cd:c2:66:09:e0:60:38:34:0a:
8d:84:e8:67:bf:2a:02:6a:b8:b5:ce:03:dc:df:ae:
d7:1b:33:6b:ce:21:b6:d7:f3:7d:5f:ce:48:18:c6:
47:17:8e:ff:10:7c:b9:1a:ff:d2:d3:7c:1e:0c:0a:
ee:9c:d4:39:d8:f0:31:bc:ca:0d:7f:ca:7a:8a:14:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:F1:A1:AE:CE:ED:54:07:D6:26:96:EE:97:2F:2D:A9:E6:F7:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f0a46952-40b4-356c-843f-d4ee4b83f3c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:5f:a9:da:ab:ff:32:ca:6b:4c:c3:b0:f0:ce:b3:2c:3b:bc:
a4:e6:b5:74:25:51:34:ee:b6:ef:9e:8f:7e:75:30:e4:76:95:
48:10:26:3e:18:81:ae:06:80:b1:47:52:dd:f1:80:f5:25:b6:
50:7f:ff:ff:24:12:61:36:bf:89:07:4c:64:3f:92:fc:98:a9:
01:04:95:c6:5a:54:94:a2:1b:46:c7:78:28:42:e6:6f:d4:ae:
e1:e8:90:1b:fa:c7:e9:fb:29:f9:a8:2e:59:e7:1a:a8:1a:a7:
ec:e5:fe:ee:d9:69:31:ca:7e:b4:93:b9:9d:3c:9a:39:64:ac:
b7:94:b1:bc:7f:17:3e:bd:c8:99:80:9c:a3:a0:9a:9f:4a:01:
cc:de:9f:33:e0:c2:9f:aa:49:ae:63:0c:a2:04:ce:6c:33:96:
c7:e3:0d:d1:8c:55:b7:6a:65:a0:db:a7:ca:77:8c:3a:ba:4f:
2b:be:b2:57:1c:f3:ff:a7:61:db:9d:13:c1:3c:1c:e5:44:3a:
8b:c8:af:8d:9f:95:2f:34:eb:fc:07:7b:d2:91:dc:d1:06:1b:
94:af:5e:f8:50:d8:e4:7d:31:18:3f:ba:a3:95:f0:6b:4a:c3:
70:f2:61:2e:68:2a:60:3a:af:13:35:9a:1c:f3:9f:ef:0f:b3:
d3:01:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:34 2025 by rpki-client