Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
File: d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa (raw, json)
Hash identifier: mD6aCJdcIJiKHHxChGGFMDZyEHTA218vqyy8aNhG474=
Subject key identifier: 16:E2:0A:38:8F:C9:DD:B1:A4:62:82:F7:E1:C0:4F:D0:8D:49:55:CF
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858487755D7BE9937BA72CC4D8DC0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.98.162.0/24 maxlen: 24
172.98.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d7:be:99:37:ba:72:cc:4d:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=7c458dc5-d5bc-4a99-92d4-e5ecdef58d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:df:c7:e0:1b:24:9d:a7:bd:ba:6f:af:d1:
71:46:ac:d0:e0:5e:b9:d0:6e:a4:c6:22:2c:8d:6a:
bb:99:e1:7f:23:71:5e:93:1a:eb:24:7e:4f:36:4b:
41:ea:8c:c2:d3:35:87:83:c3:5a:8f:09:88:0c:6c:
cf:b8:e5:4c:92:e5:60:12:d1:a5:66:67:8c:87:54:
2a:1c:eb:60:83:9a:aa:57:a3:1b:06:e1:4d:61:aa:
a4:7d:05:91:f9:e2:e0:cb:15:76:9e:b0:45:8a:05:
21:3e:81:44:ac:73:57:c2:55:4d:81:99:48:a9:be:
c5:96:4b:d7:92:03:51:08:ce:71:97:90:af:25:f9:
de:8b:22:1c:57:1f:f8:76:02:fb:78:44:fb:71:f3:
ec:4c:74:fa:b3:e9:9b:2c:ae:3a:60:ab:17:32:be:
cd:f2:0d:22:b8:4d:b9:87:73:ec:9e:b1:55:1b:89:
88:20:0c:c3:76:f6:b5:40:0e:c3:f0:c4:d9:92:9e:
3b:1b:4d:35:eb:a0:02:cc:52:89:d9:c0:e5:58:83:
9f:fb:95:7a:3b:3f:8e:2c:62:c1:be:5a:95:11:c0:
5d:4a:02:ae:bc:6e:ed:0c:8b:e4:c8:38:23:e1:9e:
24:1e:ae:10:1e:e2:fd:2c:f2:09:71:5d:cf:d1:37:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:0A:38:8F:C9:DD:B1:A4:62:82:F7:E1:C0:4F:D0:8D:49:55:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.162.0/24
172.98.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:a4:82:e4:6c:59:99:f6:96:2a:02:8f:a5:ba:f7:02:32:1e:
d0:05:f5:76:d2:35:df:52:ad:1f:5d:02:8f:4d:02:ef:7b:d1:
24:9a:af:58:be:1a:ff:ce:e1:37:4a:6b:00:f6:ec:eb:63:71:
e5:69:bf:01:5c:83:e4:07:b7:5c:b5:03:a2:26:a2:1e:86:0c:
db:ce:b3:70:52:5f:3a:c9:a0:f5:fe:79:79:64:c4:92:b7:5b:
38:e9:91:1b:75:f3:66:6e:9a:74:99:d1:3a:ce:fd:9a:00:21:
42:db:0f:25:d3:2c:3a:bd:34:f2:8f:1c:e7:d1:8b:27:2e:dc:
94:5f:eb:cc:70:1e:c1:0b:e4:b4:af:4b:74:bc:31:0c:8e:4c:
69:23:dc:7f:96:dd:79:6a:6e:e7:17:4c:23:67:c4:c6:12:8c:
ed:cd:a2:de:08:06:69:4c:71:3d:fd:67:7f:cb:b0:42:d8:b8:
fc:ad:13:cf:00:68:4a:82:24:eb:e0:e3:3b:3e:0d:91:37:f6:
c2:ab:e4:a5:4d:80:ec:62:17:96:87:9e:bc:85:f0:24:8f:ca:
3d:ac:93:49:11:f4:2b:21:0b:d2:f1:ba:da:87:11:ec:7e:05:
08:a7:df:57:74:b9:ea:30:36:be:fe:12:18:44:6b:e4:b3:9e:
89:d3:91:8b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEh3Vde+mTe6csxNjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
N2M0NThkYzUtZDViYy00YTk5LTkyZDQtZTVlY2RlZjU4ZDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGvfx+AbJJ2nvbpvr9FxRqzQ4F650G6kxiIs
jWq7meF/I3FekxrrJH5PNktB6ozC0zWHg8NajwmIDGzPuOVMkuVgEtGlZmeMh1Qq
HOtgg5qqV6MbBuFNYaqkfQWR+eLgyxV2nrBFigUhPoFErHNXwlVNgZlIqb7FlkvX
kgNRCM5xl5CvJfneiyIcVx/4dgL7eET7cfPsTHT6s+mbLK46YKsXMr7N8g0iuE25
h3PsnrFVG4mIIAzDdva1QA7D8MTZkp47G00166ACzFKJ2cDlWIOf+5V6Oz+OLGLB
vlqVEcBdSgKuvG7tDIvkyDgj4Z4kHq4QHuL9LPIJcV3P0TfkswIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBbiCjiPyd2xpGKC9+HAT9CNSVXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDFkNTczNGMtZWZiYy0z
ZDk4LTkxM2EtZTYwYjhkN2UzM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKiAwQA
rGKsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIukguRsWZn2lioCj6W69wIyHtAF9XbSNd9SrR9dAo9NAu97
0SSar1i+Gv/O4TdKawD27OtjceVpvwFcg+QHt1y1A6Imoh6GDNvOs3BSXzrJoPX+
eXlkxJK3WzjpkRt182ZumnSZ0TrO/ZoAIULbDyXTLDq9NPKPHOfRiycu3JRf68xw
HsEL5LSvS3S8MQyOTGkj3H+W3XlqbucXTCNnxMYSjO3Not4IBmlMcT39Z3/LsELY
uPytE88AaEqCJOvg4zs+DZE39sKr5KVNgOxiF5aHnryF8CSPyj2sk0kR9CshC9Lx
utqHEex+BQin31d0ueowNr7+EhhEa+SznonTkYs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:03:36 2025 by rpki-client