Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa
File: 8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa (raw, json)
Hash identifier: oD7QrARx0tIDY1WL49QMjOA7E4KsWB/3lurtMEpGB9M=
Subject key identifier: 38:6E:0C:11:C4:99:62:7F:74:0F:CA:FC:9B:96:CF:37:01:91:B2:62
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858491AA6B7C88F0733971C24E880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 130.137.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b7:c8:8f:07:33:97:1c:24:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=7251f4fa-abca-4042-b28c-fc04e79bea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:ec:46:65:b1:35:08:9f:f3:2d:65:11:ac:
a8:d2:1d:c2:a2:34:65:6e:2d:23:89:9a:fe:38:ab:
06:99:ca:84:b9:45:87:fb:a3:5d:fb:77:91:51:d5:
9f:7f:36:e4:4a:ca:f7:3e:d8:dc:6e:4c:b2:12:3f:
4d:f7:c8:a5:2e:f4:31:31:6c:3d:05:7b:6a:2a:71:
04:d2:f6:11:9b:d6:7c:be:00:8e:46:68:77:37:70:
1f:77:15:cf:29:72:6f:40:db:58:50:f6:14:d8:28:
32:1b:81:0e:c0:cf:76:8d:30:e9:58:1c:4f:55:28:
e1:26:d9:cc:d0:0b:ac:ae:6c:a4:ce:2a:1f:91:90:
0a:05:8f:17:de:33:fa:65:5b:46:95:c7:79:ca:b9:
b0:f3:99:fd:58:e3:53:6c:0d:46:a2:e5:97:3e:91:
28:2f:28:9c:ca:f7:89:5a:0b:5f:24:e7:a6:d9:44:
ce:96:47:2d:ca:e5:41:c3:3e:2f:9f:eb:0d:07:bb:
0b:ff:38:97:99:2c:c6:28:63:3e:e9:9a:3f:d2:81:
37:0f:6b:4d:e5:51:46:da:6e:44:8f:cf:8c:e9:73:
d8:43:cd:ee:b0:da:65:34:4b:e5:a7:11:05:eb:a5:
be:69:6a:1b:2b:70:86:38:b1:af:d6:bc:4f:75:1f:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:0C:11:C4:99:62:7F:74:0F:CA:FC:9B:96:CF:37:01:91:B2:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:55:98:8c:57:56:e9:d4:03:eb:c8:44:86:06:3f:84:fb:c9:
17:b0:47:4a:04:6f:ff:35:86:52:76:11:9f:1b:ec:b2:ef:b0:
3c:c5:e5:d7:9c:f6:35:b6:91:74:83:ff:73:11:1d:c7:ea:30:
7d:01:48:7b:db:98:99:71:fc:a1:24:62:71:30:73:fc:95:e4:
70:0f:6e:98:c4:b3:84:2b:cb:fe:30:77:7d:20:f1:c3:c3:f7:
e9:63:c6:71:a1:84:a8:47:b8:2a:fe:e6:23:6a:49:6e:e2:c5:
9e:df:9e:19:20:a0:8c:7a:d6:14:fd:97:f1:df:4e:8e:61:2b:
26:c5:34:ca:66:04:fe:26:80:1f:af:95:9e:80:3d:32:20:98:
0d:f7:a5:d6:b1:08:be:49:87:a2:35:fd:08:8d:95:c9:da:cd:
8a:10:e1:86:b8:8c:f3:80:52:2b:f6:d1:eb:aa:06:52:e1:93:
3f:9a:9d:cd:bf:a9:2e:cc:6b:79:81:61:55:f1:09:1f:3c:94:
cc:34:27:82:8b:c8:b0:7a:a7:db:34:06:8f:f7:d0:a0:b9:ef:
d4:d1:94:c3:6a:12:ed:79:6e:ca:61:dd:73:e4:2f:ed:be:ae:
d6:c3:cf:78:ea:38:ad:bd:aa:f1:80:bc:fd:99:cd:1e:70:1e:
01:3a:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:34 2025 by rpki-client on console.sobornost.net