Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa
File: f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa (raw, json)
Hash identifier: 3gVk9pr/b5opiWswC7qpbnuCodztG8hEBPARWCgk0Es=
Subject key identifier: 85:58:96:44:29:2B:3E:E2:B7:A5:58:EE:DF:C2:C3:47:33:3C:FD:40
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F4328584908816E2DC23D3D14488E1800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 130.137.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6e:2d:c2:3d:3d:14:48:8e:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=46e37d71-f5cc-46db-b099-9ed54de670e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:11:18:98:cf:b8:cc:ef:11:09:93:9d:ab:
27:3a:ad:5d:2d:7b:8e:79:6b:7e:5b:5e:96:e4:27:
ed:60:1d:af:bf:c8:af:d1:a2:c7:fe:ba:86:52:a0:
f4:a4:9f:e6:20:90:05:06:c1:29:7b:ab:73:18:cc:
ad:d6:1b:c1:55:8f:08:2b:c5:06:3c:b7:ca:8d:21:
60:de:39:94:98:a3:9c:de:f8:a5:4b:61:31:10:54:
32:ba:97:57:b8:74:74:25:55:5e:a8:ad:3d:52:8f:
71:49:67:82:ea:ae:65:86:b9:78:27:52:dd:c4:f9:
9d:b8:7d:9a:c6:98:20:c3:5b:21:a5:b4:a1:00:51:
65:93:88:5f:99:59:0f:c5:c6:48:a1:a5:b7:7f:d6:
a8:e8:2a:0d:e8:da:3a:b9:47:63:52:c1:96:96:78:
64:bb:4e:87:ca:c9:27:89:f6:d7:30:bf:74:b3:6f:
25:f8:db:b2:06:18:a2:e7:b6:fa:27:03:c9:3c:df:
cd:46:91:18:dd:23:3f:f9:9b:08:87:bd:bc:c3:27:
5a:f5:ae:43:2d:a6:99:70:f2:9b:72:47:3c:8b:42:
bb:19:25:36:fe:bc:f0:76:18:2f:b6:bd:53:12:b7:
09:83:d4:90:7b:f6:2e:d1:34:5a:3d:7a:8f:c9:fb:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:96:44:29:2B:3E:E2:B7:A5:58:EE:DF:C2:C3:47:33:3C:FD:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/f77d415c-ceeb-36ac-a87a-2fa7034d6736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:59:65:43:90:92:80:3a:68:a2:95:81:5b:ff:bc:34:d7:8c:
bd:b0:61:66:74:ea:f5:85:cd:63:1f:b8:35:66:d6:d1:65:14:
01:18:09:06:e4:4d:8e:d4:da:6d:e5:22:a4:7f:07:66:a6:e1:
7a:de:23:03:45:35:4a:9f:e3:a5:74:62:75:bc:aa:cf:e3:12:
87:15:3a:99:75:65:ae:2f:ec:c5:c5:00:34:48:70:12:f0:53:
72:22:9f:af:bf:4b:ca:f5:61:ec:a5:a1:c2:fb:6e:a3:95:9f:
ca:94:a1:91:fd:82:c9:5e:d9:95:40:77:95:4d:15:da:a3:3b:
31:e6:8d:11:25:01:c1:1e:17:7a:50:92:50:72:c0:ec:db:40:
13:11:06:73:72:de:c2:a3:ab:20:46:31:e4:d0:cb:74:ae:dc:
b7:0e:f5:86:7c:6d:b3:8f:0c:22:4b:54:d6:f8:8b:40:10:e1:
40:07:64:7f:71:34:bf:ca:21:e6:c7:35:3e:4f:51:17:51:e4:
f9:5c:54:ba:3b:47:ec:9f:ae:f9:8d:2d:9d:0e:4c:07:f9:ce:
cd:41:98:2e:2d:ee:fa:9d:02:93:de:d7:ca:6a:a8:5e:29:7e:
ae:3a:37:18:e6:cf:c5:4d:f8:54:30:9a:b7:c3:e9:03:56:ee:
17:44:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:09 2025 by rpki-client