Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa
File: ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa (raw, json)
Hash identifier: ZMxZwPlA3c06lFofk52nVpeV2m1DztZnJUUTqkDXgZE=
Subject key identifier: BC:29:1D:DA:46:3E:1B:08:2F:DF:8F:CD:39:D0:B0:6F:E7:F0:76:02
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858493243DA66515ABF9B98ED1900
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 8987
IP address blocks: 130.137.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:da:66:51:5a:bf:9b:98:ed:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=a4f26ccf-ec3d-4148-b287-9c7712f6a430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:c9:eb:59:4a:2f:9b:10:48:5f:78:45:53:
8f:3c:1a:ba:0d:b6:a5:8c:f4:eb:66:fa:f3:c1:94:
8b:1d:b1:e4:cd:f2:7e:64:84:0c:0d:68:01:2d:cf:
ea:5a:68:95:70:b3:43:e2:bf:5a:b2:3a:46:f0:2b:
1f:89:c3:e1:63:e6:6f:11:b3:07:fa:b6:68:f8:ba:
95:ee:97:14:ef:f2:d9:d6:ee:00:d2:0e:9e:e8:16:
8d:5a:99:e8:a9:ce:54:74:55:66:19:67:07:07:08:
68:f9:a5:a5:1b:d1:64:b3:31:08:11:ef:4d:26:23:
56:15:ce:96:41:08:07:25:4f:3c:82:b4:ef:83:f3:
75:c4:9b:31:dd:02:e9:22:6d:77:9d:80:64:0b:82:
67:f9:d1:22:50:0e:61:fe:ba:3a:fe:87:43:dc:75:
89:17:91:6c:90:91:9e:41:eb:39:c9:c5:83:0d:be:
36:e8:28:a2:dc:27:b1:f9:8e:5a:e7:9e:f5:db:e7:
7e:f2:59:3d:53:a3:b0:c9:ea:44:5e:92:a9:67:ff:
76:e2:7f:be:99:c3:1f:84:4c:20:fb:7e:f6:ad:a1:
ea:a7:fb:0a:b2:c1:73:e1:2e:ce:49:98:07:b9:a1:
c8:01:af:ae:72:c0:85:99:41:fc:cf:63:66:f6:69:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:1D:DA:46:3E:1B:08:2F:DF:8F:CD:39:D0:B0:6F:E7:F0:76:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:04:fb:15:f1:ff:97:88:c5:4a:d2:10:9a:81:48:ed:8a:68:
e0:7f:54:b4:24:5f:3a:e3:e8:e5:33:3d:10:f0:83:68:fa:eb:
26:3f:fe:62:ce:0c:0e:d4:94:43:91:f3:2b:28:3a:7b:3a:18:
fc:d7:ae:b2:ce:c8:2e:51:89:3a:b7:54:12:6f:d0:dc:90:82:
08:3e:5f:b2:41:bc:03:2c:77:71:cf:77:69:5d:91:b9:c2:3e:
1a:b5:de:61:04:98:c5:d9:03:ca:f3:b6:d3:80:e3:f2:81:7f:
0f:d5:8e:81:3e:28:43:b9:d2:ed:be:fe:68:f6:ea:7a:5a:8f:
35:84:48:d3:f2:1c:d5:a5:f7:14:17:ce:9c:64:d9:d8:c7:8b:
39:c4:7e:da:23:0b:00:71:cf:c9:ca:34:b3:2f:52:5c:b8:c3:
2c:49:c7:42:6b:3a:ec:4b:71:32:98:c2:b5:0f:3f:03:42:28:
21:c4:0c:de:f5:69:13:9c:06:46:b0:cb:a5:82:79:7e:b5:05:
a5:63:3d:cd:c8:42:ee:75:a0:81:21:ec:3c:ad:4e:e1:d0:24:
01:fe:32:22:ae:74:f4:ed:09:42:29:c7:23:67:3a:95:e8:53:
6d:bd:17:f3:e6:fd:8e:56:80:b0:df:a4:56:06:6d:e1:c3:54:
d5:f8:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:34 2025 by rpki-client on console.sobornost.net