Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fc765834-561e-34cc-a80e-16f2d72909e6.roa
File: fc765834-561e-34cc-a80e-16f2d72909e6.roa (raw, json)
Hash identifier: t3YvmmaQTpGT7xNVnBTO5qJx8nshQcctVfWECi09nkM=
Subject key identifier: 5A:65:2A:B0:44:13:EB:A2:E1:55:67:9E:60:F1:D2:07:23:5B:0C:FF
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F43285849350EA53392B79FF1FAD69280
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fc765834-561e-34cc-a80e-16f2d72909e6.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 130.137.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a5:33:92:b7:9f:f1:fa:d6:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=c41dd2af-5987-4d3d-b969-df0980362cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:80:58:58:4b:69:72:d7:74:1b:75:4b:5a:
88:05:3d:90:05:cc:3e:20:62:e9:15:17:aa:19:1a:
25:04:42:17:b9:aa:2c:a4:b1:52:36:f8:02:62:18:
31:f0:54:3f:06:57:81:f2:21:73:8d:c9:40:36:5b:
60:a3:b2:38:d8:89:52:ec:ee:1c:ca:19:df:62:c4:
49:a2:8f:64:24:a3:f4:19:6c:50:df:ec:6f:4f:08:
62:93:89:20:f2:5b:82:a5:57:2f:f9:26:76:20:5d:
88:56:3d:19:52:db:3b:1a:d8:32:0a:4f:ca:1d:a5:
9f:b1:8e:c4:e1:a4:b2:3c:43:f5:6e:41:a0:8f:96:
28:ab:d7:2e:54:b5:60:32:f6:0c:97:5a:4a:96:9b:
e2:18:4d:7f:38:fe:1c:b3:ee:23:62:ca:51:19:d9:
de:2e:e8:aa:2e:4b:f7:46:d2:de:b4:03:19:62:b6:
4a:20:3f:92:74:5a:29:6d:3b:47:bc:11:ec:9d:3f:
69:28:ce:ac:26:fb:ee:23:c1:fe:ce:fc:54:51:dd:
ba:9c:bf:c7:82:d5:91:0d:77:e7:ad:d9:b4:4a:61:
aa:56:ed:a7:6a:a5:0a:ff:0b:05:e9:8f:b1:32:0d:
f4:01:60:4e:91:e6:7f:b3:0b:42:2e:89:16:0c:12:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:2A:B0:44:13:EB:A2:E1:55:67:9E:60:F1:D2:07:23:5B:0C:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/fc765834-561e-34cc-a80e-16f2d72909e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:21:06:41:bc:cf:14:b9:ad:c7:09:97:70:74:4d:83:42:76:
19:89:24:fe:2f:a2:6f:50:e0:c3:98:fe:b3:51:68:37:0a:d7:
2b:c0:51:ea:0f:bb:6e:9f:af:df:79:6a:f8:48:c6:ef:28:b5:
c4:19:23:e8:20:4e:1c:83:5e:a1:e3:ed:47:f8:b5:5b:c4:35:
e1:69:3c:3e:0c:29:c5:84:91:4a:26:50:f4:eb:ca:82:be:e9:
9b:13:29:13:36:2f:c7:c7:55:d7:5d:68:67:d0:86:f9:db:d5:
62:5d:88:54:96:49:c1:8e:6d:49:88:9f:08:95:73:2a:52:53:
dc:d9:a4:70:4c:00:e4:b6:ff:10:bb:15:ba:cf:25:53:ec:ae:
c0:b5:16:62:77:ad:01:cf:93:20:da:b6:90:10:28:32:aa:d2:
cf:1d:37:f7:41:06:8b:9f:6a:6b:64:80:7a:5e:7d:fa:05:a3:
dd:ae:9a:90:70:bc:fd:50:8b:a4:69:ff:58:3d:c9:28:81:ae:
f1:95:36:01:fd:db:d5:17:c2:8e:be:b6:9d:63:8e:bb:d8:24:
e6:76:24:08:d8:d6:b7:82:20:d8:c0:8b:86:c8:1a:a2:ab:52:
a3:4d:08:23:e3:71:88:03:e2:96:db:f7:e6:b0:b8:86:20:5f:
0f:b6:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:17 2025 by rpki-client