Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa
File: 139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa (raw, json)
Hash identifier: wr4OxSqqBN0F1gAESXRdRnAqbx99klnh95xUJkMrvso=
Subject key identifier: C0:93:0F:57:3D:E7:59:B8:70:CC:4A:1D:F6:47:6F:20:9F:06:3F:A0
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848A565F8F28033985F05CF9780
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 42831
IP address blocks: 172.98.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f8:f2:80:33:98:5f:05:cf:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=16ced441-abcc-4347-b5ed-4a695fce222e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:44:cb:c8:85:49:3b:41:33:af:cc:ab:76:
1b:85:42:36:44:19:72:84:2e:31:78:f3:24:4f:15:
e7:08:b6:f1:69:22:e8:ba:c2:ce:b5:db:71:be:6a:
d5:ec:53:b8:36:6e:2e:5b:5b:8a:a3:6c:dc:54:c9:
fb:7d:58:9c:16:58:d0:52:74:f6:98:e0:af:00:ff:
3b:aa:b7:fc:f6:13:e9:59:4e:0e:ff:84:0b:37:12:
c0:4d:af:a9:59:04:d3:c3:54:0e:0c:7a:a2:bf:65:
55:db:e8:df:f4:8a:34:16:7d:b6:2d:01:03:32:41:
ea:d0:28:e2:44:51:1e:59:33:78:5c:a3:27:7c:a2:
44:33:94:18:07:25:9c:5c:c5:f1:14:ef:a3:16:ed:
c4:8b:b9:32:54:6c:6c:07:5c:ea:64:df:3f:8b:c2:
93:58:65:af:08:bb:b9:21:1b:75:1b:83:47:68:59:
be:ad:5a:52:8b:65:78:ef:1e:f4:55:8b:c4:cc:6b:
a2:85:c1:19:73:ab:ce:37:25:da:e5:66:48:78:e5:
14:14:81:ab:5e:aa:eb:46:d7:d4:d2:62:0c:03:ee:
53:14:43:ee:de:69:d5:2e:af:fc:11:a0:b4:41:dc:
d1:39:a4:24:ee:7d:b3:2c:91:6a:c6:88:7b:d2:f1:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:0F:57:3D:E7:59:B8:70:CC:4A:1D:F6:47:6F:20:9F:06:3F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:5d:1f:e0:ee:6b:52:50:d7:18:eb:d4:96:2a:04:e0:c5:37:
51:fb:e6:4a:17:0f:cd:9a:02:28:25:00:c2:96:52:6f:2f:2e:
63:99:c8:83:d5:0f:76:19:3b:dd:58:26:19:8a:a6:4c:87:14:
a2:9f:d6:6a:6d:0f:44:bb:e9:0d:95:06:9c:51:77:01:c2:1c:
36:93:1c:c1:38:4d:e0:c7:03:98:8c:0b:1b:7a:7c:15:40:36:
d8:88:13:47:84:f0:db:bb:e2:4b:fb:fd:d3:81:e9:cd:13:12:
89:04:9f:7a:c3:c6:b2:00:17:19:83:ea:79:a2:ba:6f:3c:e2:
cc:29:91:77:82:5d:0f:7b:38:ea:3e:8b:86:01:a3:95:42:a1:
cb:e4:39:f8:1b:0a:89:48:7f:31:ea:76:3d:c4:b9:46:0d:d0:
54:f0:44:1f:4c:16:93:8d:00:c9:3c:71:45:9b:45:1f:70:b9:
03:f2:45:4b:a8:e5:41:6d:b8:42:a1:39:4f:89:13:33:ba:78:
b5:9c:10:77:d3:b1:85:30:c8:f3:a3:82:c2:b8:f8:64:6d:35:
b0:79:81:98:8d:77:af:09:2c:da:a5:ee:cf:0b:9c:3c:17:fe:
c0:2a:8e:0f:ca:5b:fc:c3:97:fb:ee:72:31:6e:f6:ab:9c:f5:
3c:30:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:46 2025 by rpki-client