Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json)
Hash identifier: 0qNqpZDz4k8x9K8IGXs+IKvDjawm4nWkoP+DP6uRNbE=
Subject key identifier: C4:4A:D5:43:75:E4:56:D8:24:E8:DF:CB:0D:77:A1:78:54:FE:BB:AD
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848A400B7DAB8E57DD0789A5080
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.98.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b7:da:b8:e5:7d:d0:78:9a:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=2b10968f-8781-44e5-8577-54e72330a18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:c4:86:79:9d:da:8d:e7:9d:26:8f:d3:45:
53:df:02:17:58:e3:30:6e:8f:12:d7:0c:27:7f:83:
5a:a4:f4:60:9b:97:0f:cf:fa:da:ab:34:05:36:a3:
cb:57:9b:2b:2f:73:8b:05:bd:4a:a7:b9:86:01:ba:
6f:2d:9c:3e:0b:f2:27:fe:84:77:6a:31:a9:38:f9:
26:8e:f4:10:2b:00:68:d1:47:bc:20:58:c6:9e:16:
22:aa:8b:42:a0:ab:b4:10:11:fc:d7:cb:8f:1b:6e:
79:b3:09:93:75:90:4c:bf:9c:82:4b:a9:c7:af:14:
af:e4:3e:ce:2a:2f:79:d3:98:fd:8f:0a:57:93:5b:
e5:41:f8:52:e2:6a:05:ac:5a:40:56:85:c1:9c:76:
7a:67:68:f8:ae:7e:81:65:8a:00:c2:06:db:fb:29:
72:10:20:e1:35:7b:83:0e:7b:46:b9:99:96:87:fe:
ea:d8:86:a5:d6:63:55:a1:2c:2a:0c:84:9b:7c:db:
b6:e7:15:45:43:8e:79:63:84:e0:75:4f:b0:83:56:
6f:f1:ac:a3:8f:34:a1:31:89:d3:4c:5e:1e:e9:7a:
95:41:c7:fb:1c:ca:0c:9f:28:37:dc:4c:e9:16:c0:
33:bb:77:e2:0f:49:65:34:bc:23:fe:08:4e:9e:76:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:D5:43:75:E4:56:D8:24:E8:DF:CB:0D:77:A1:78:54:FE:BB:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:e1:1f:a6:f8:77:89:a9:74:1e:db:0e:cd:30:3e:3b:ed:c2:
5a:8a:96:9d:97:d5:1e:43:37:cb:7f:4c:f9:ec:a3:b8:ef:1d:
48:0c:5e:9e:85:0a:56:fe:bc:7e:3b:4f:ae:88:34:ef:d8:c1:
a7:25:a0:8c:c1:e3:82:f9:59:01:2f:0b:3f:41:fe:f8:84:e7:
2e:bf:aa:a7:22:9b:0e:97:79:2a:51:fc:a5:c9:c1:e4:5f:87:
bc:c7:d1:e1:df:b0:ce:f9:9a:6d:59:4c:d5:69:0d:13:d9:41:
69:52:03:f4:13:cc:3d:df:f8:ab:42:9c:8a:e3:7a:ad:86:3a:
2f:81:97:ff:b7:e9:01:c6:75:ee:e8:7c:63:93:5f:00:7f:78:
92:4a:30:f8:eb:a8:ca:e7:27:00:ec:08:18:ba:9d:f6:3b:00:
1c:db:f3:db:6e:82:b4:1e:a0:75:69:23:de:eb:6e:76:e7:dc:
10:96:12:da:2d:16:a3:24:02:7e:e4:48:fa:88:a5:4c:3d:64:
da:f5:9f:15:ed:80:af:60:51:4e:7e:6a:d5:29:23:da:9f:2b:
0a:72:b3:9c:53:a9:09:ed:71:c6:db:52:6b:d7:ca:43:26:41:
48:0f:59:85:cb:7b:cb:26:14:1a:5c:26:69:fc:37:dd:42:f3:
b5:7f:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:58 2025 by rpki-client