Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa
File: f91931be-3fbf-37a3-932e-7cbf092669bd.roa (raw, json)
Hash identifier: Z5yCXBu67WjtLhbF3kUNuI/af6UeHfY6z5nTxwhSDac=
Subject key identifier: 91:7E:B6:B8:85:47:D1:C2:5D:FF:26:F5:99:EC:21:B5:4C:13:99:39
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858486C2B0B870769A4E05BDC5760
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 35758
IP address blocks: 172.98.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0b:87:07:69:a4:e0:5b:dc:57:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=88688741-947c-494c-9c8a-6f3eb0b8bbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:48:ee:c2:cf:a2:65:5c:79:b0:35:cd:c6:
69:14:5c:6a:09:45:f3:5d:42:d7:22:13:83:d5:9a:
bb:db:c1:85:15:ff:40:12:4b:c8:5a:a1:d6:75:d6:
82:47:6d:a3:d9:99:6e:e8:85:aa:bc:42:c8:38:24:
14:a6:f0:66:b1:7a:c3:64:c4:e5:af:bf:44:ab:88:
00:b7:7c:7f:37:95:fc:d2:69:cc:e4:70:fa:aa:e1:
17:5e:d6:a2:2e:90:72:7c:55:4b:d0:4c:52:c8:53:
45:10:fc:b2:95:ee:5b:0e:4c:67:31:c2:c1:19:44:
30:00:7d:20:73:51:da:53:41:93:94:3a:3e:cc:fe:
9a:f7:21:2f:9c:79:39:35:98:f4:d3:f8:ab:b6:1a:
ee:ea:7f:fe:5c:ec:ff:25:bd:b7:11:64:eb:01:35:
15:4e:b2:c1:ed:8d:90:0a:fc:6f:98:6a:8a:bf:eb:
7b:2b:d8:9d:b4:56:5c:83:71:04:b4:9e:52:12:52:
c0:fd:40:04:a2:6c:b4:ef:9a:14:8e:11:af:e5:05:
9c:07:ac:28:fa:c7:53:9b:8c:5a:de:5b:92:77:1a:
74:93:96:51:9a:46:1b:21:42:d9:93:67:8b:cd:10:
0c:d8:0a:17:93:ec:13:99:5c:e9:a4:91:80:a5:8c:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:B6:B8:85:47:D1:C2:5D:FF:26:F5:99:EC:21:B5:4C:13:99:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:4e:fe:f2:4a:b9:9d:f1:de:56:90:f7:bf:a4:e5:17:46:bb:
69:fc:9e:32:a7:4c:89:17:ba:c8:ff:3a:76:bd:4d:32:31:dc:
bc:b2:21:fe:89:e3:9f:00:e0:0d:55:61:f2:16:e2:2b:73:c8:
9e:2f:13:f0:1b:88:4b:f7:a8:f0:47:36:90:d1:ee:95:0c:33:
a9:35:97:5a:e9:b6:7f:be:74:17:ab:13:39:94:6c:88:d2:0c:
32:62:24:f7:eb:70:45:1e:c2:22:10:64:c9:4c:91:4c:b9:22:
03:18:c1:3e:7f:0d:5f:a0:c6:98:9b:f2:50:da:4b:ae:70:a8:
78:5a:e4:bb:16:16:60:85:a1:6a:16:46:4a:d7:c7:39:6b:84:
26:ac:d5:60:98:3c:03:ff:a9:12:e9:38:1e:d7:88:6b:eb:c0:
75:ec:1e:e6:ad:ce:8f:95:ee:47:34:f1:dc:6d:2b:89:d1:ef:
28:c8:10:c9:55:3b:9c:90:8e:db:15:a3:ce:01:db:5f:77:31:
eb:8a:61:32:71:c1:63:a3:90:10:ed:cb:a4:90:7f:c1:90:91:
16:dc:6f:aa:82:2d:08:fc:5e:ea:0a:b2:7a:54:28:f5:7c:75:
a8:9b:f1:39:e0:1f:15:f2:c7:8e:29:ff:02:d6:0f:33:51:d1:
1b:1d:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:19 2025 by rpki-client