Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
File: d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json)
Hash identifier: ZAm/Svj0Jra3DEidiEW6MyZlh8j+3c6W5VtSHwwS9Us=
Subject key identifier: C1:5B:BA:F6:AE:13:85:EF:A2:2D:85:92:30:FA:A4:64:4E:C7:BE:C2
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858485F9AE4AF13AF99D94893CB00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 46261
IP address blocks: 172.98.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e4:af:13:af:99:d9:48:93:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=8852fffe-9211-48bd-a31f-4b560c94b745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:11:00:f1:47:a8:cb:fe:c2:40:a8:3d:35:
9b:a0:7f:ee:8d:d5:f7:0b:1f:b5:af:38:d4:9b:7e:
43:5f:5c:bd:39:d7:32:30:f2:a9:8b:ff:e6:e9:85:
63:4f:12:0d:f5:26:d2:04:43:b4:0d:ea:3b:3c:f5:
ae:84:e5:89:23:6c:c4:57:d1:81:66:5a:5c:49:31:
bf:5b:a5:ff:e4:d1:d4:6b:db:8a:65:ac:6b:e1:32:
5e:fa:be:22:13:45:6e:3e:31:b4:e1:0e:f1:fd:21:
8f:1c:d9:47:69:ca:d3:86:c1:79:47:dc:3c:09:33:
fd:3c:82:27:cd:b8:64:d4:bc:df:49:5b:31:5a:1e:
79:6c:10:06:5f:02:04:46:28:0b:4c:03:35:a9:e0:
25:15:04:c7:95:a7:46:4d:44:db:54:09:ca:93:2a:
a7:c8:2b:76:5d:a3:61:62:3c:fa:15:47:92:4a:af:
e3:b9:e1:af:43:40:88:d3:4e:96:3a:75:00:0e:f9:
ab:17:1a:27:57:48:9c:41:48:a4:52:73:b1:c7:af:
fa:da:f7:02:66:77:be:33:55:76:5c:86:0f:aa:44:
92:5c:56:eb:cf:8e:fa:14:df:68:1b:ed:b9:72:f7:
98:36:1b:d2:34:1a:1a:8d:50:6d:b7:52:9d:db:28:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:BA:F6:AE:13:85:EF:A2:2D:85:92:30:FA:A4:64:4E:C7:BE:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d5:e1:6c:d3:7b:b1:0f:d5:c9:3a:94:d7:30:21:6b:e9:a2:
47:66:78:fd:95:45:2b:0f:ee:f4:4b:6e:aa:6e:d1:b5:24:b5:
79:b9:1d:7b:c2:a2:d7:81:ca:5a:be:c6:2f:e6:90:36:ac:fa:
35:dc:91:cd:70:cd:4a:fa:f9:9f:fa:7f:ea:1a:e8:16:85:f2:
89:23:ae:41:3e:a7:b9:42:7b:25:b8:b0:d7:38:1d:d5:73:7b:
02:24:1c:f3:0b:47:a0:f8:d6:b2:63:56:ff:15:4e:8d:9f:3f:
8c:74:8d:50:0b:6c:0b:d8:03:82:4f:bf:46:ea:c5:bf:e5:3c:
e5:31:e0:53:0b:c9:25:4d:39:79:dd:c5:c5:07:9d:97:9b:9f:
b8:b5:40:5e:ec:a7:10:7f:7f:1e:49:14:21:da:3f:5f:85:e9:
49:a9:65:47:ff:ed:b4:1c:26:cc:8b:db:68:f2:ab:8c:1a:95:
28:b0:da:5e:82:7c:2e:1a:7a:a7:44:bd:88:8c:f7:e1:56:16:
c7:a0:2b:41:7d:ca:22:f6:3b:c6:78:bb:cf:8d:f1:53:ac:03:
cb:fa:fd:b7:16:ff:cc:2c:96:fb:d1:23:d7:db:e4:13:90:e4:
41:e4:df:64:62:22:ab:ea:ae:40:4c:ec:52:f2:b2:f4:0d:5b:
78:b1:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:39 2025 by rpki-client