Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa
File: e2210da3-0122-3d9c-898b-b2cc95169f2a.roa (raw, json)
Hash identifier: YtbXL5mdWXND9WvXEfRgJVLOvlTdQ+VjL2ydY4YHjEA=
Subject key identifier: 8E:83:F1:4C:AC:13:09:DB:FE:A0:D1:72:23:C1:E9:7A:B9:5E:E9:C3
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858491D71705D96A9699BA1336800
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 7979
IP address blocks: 172.98.170.0/24 maxlen: 24
206.127.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:70:5d:96:a9:69:9b:a1:33:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=e3815475-907a-4aab-a7d5-db5356b1ae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:3e:56:99:f9:83:e4:c8:94:9b:7b:f7:34:
60:8a:5a:5c:11:55:c5:57:f2:9d:c5:55:09:e7:a7:
82:c7:e6:6c:f1:2c:3f:3c:24:6a:ed:f0:cc:73:4d:
50:b3:56:20:f2:dc:95:eb:8b:aa:ab:6c:3f:2f:9c:
2d:aa:50:0e:a7:89:f9:29:d7:ea:20:d1:77:5b:5c:
63:d9:36:1d:e9:a6:3f:9e:66:4b:bb:c4:4e:e9:dc:
2a:46:65:67:7d:03:8d:59:01:3e:b2:5c:16:65:ac:
9d:4d:bf:3f:1f:0e:c4:89:fa:e9:8e:b3:94:b9:77:
c2:4c:d3:30:e3:0d:21:28:eb:eb:4b:81:ea:8b:9b:
16:61:07:14:fb:0c:b2:55:d9:72:81:8d:42:9a:58:
c6:8c:fd:f1:cf:17:51:86:57:c5:83:2c:bb:ff:de:
63:0d:1b:5b:d5:f3:5b:99:bc:c1:4a:de:07:18:c2:
28:8f:10:0d:0c:13:1b:8c:7a:91:ef:d4:3c:24:32:
53:f3:35:8a:ae:b1:bd:ae:1a:b6:d2:92:03:64:e4:
48:15:09:f4:f9:b1:db:a8:4c:d0:e8:01:6e:b3:8b:
98:52:02:f5:32:83:ad:52:93:08:f1:62:d6:22:8e:
ec:24:71:0a:aa:1c:f8:2c:a5:83:f8:bd:c3:49:78:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:83:F1:4C:AC:13:09:DB:FE:A0:D1:72:23:C1:E9:7A:B9:5E:E9:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.170.0/24
206.127.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:52:7d:64:30:68:86:2c:e7:e5:54:48:e9:4a:ea:ec:d5:e9:
46:5e:c7:de:46:49:75:55:40:33:16:ba:77:99:f6:86:01:92:
e9:59:2b:77:6b:2c:60:ef:46:63:30:06:94:4f:93:7e:1f:d9:
b1:a7:ce:7f:0a:9b:14:22:2a:95:48:8c:37:8c:6d:12:95:a9:
c9:65:77:d7:12:54:de:a5:d2:09:f3:f7:d6:ac:78:5e:4a:b2:
68:b1:db:13:a7:66:48:43:f3:e2:b7:d9:26:f4:5a:64:df:e1:
5b:bc:86:80:3b:1a:f0:ef:ce:ea:6e:cd:9f:8a:31:66:61:02:
43:54:c3:d9:cc:e2:5c:a5:30:e7:5d:57:90:df:55:29:67:2b:
98:0b:d2:98:2b:27:e0:cf:c7:15:8e:fd:51:54:73:93:25:ff:
c9:99:35:7e:b2:82:19:a8:06:98:69:be:36:4d:74:d7:d7:12:
ff:db:b7:be:ce:39:a5:7a:3b:d7:6f:ee:c1:4f:8b:28:55:38:
d0:b8:e4:30:da:42:f5:0a:23:2b:5a:bf:89:36:be:bf:79:cb:
76:91:66:c3:87:26:ce:90:fd:4e:a9:ae:fb:3b:5e:41:2d:19:
2a:e0:e0:d3:6e:e1:52:66:6b:8f:8a:65:76:d7:dd:65:ea:5c:
31:b4:ef:06
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkdcXBdlqlpm6EzaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZTM4MTU0NzUtOTA3YS00YWFiLWE3ZDUtZGI1MzU2YjFhZTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0+Vpn5g+TIlJt79zRgilpcEVXFV/KdxVUJ
56eCx+Zs8Sw/PCRq7fDMc01Qs1Yg8tyV64uqq2w/L5wtqlAOp4n5KdfqINF3W1xj
2TYd6aY/nmZLu8RO6dwqRmVnfQONWQE+slwWZaydTb8/Hw7EifrpjrOUuXfCTNMw
4w0hKOvrS4Hqi5sWYQcU+wyyVdlygY1CmljGjP3xzxdRhlfFgyy7/95jDRtb1fNb
mbzBSt4HGMIojxANDBMbjHqR79Q8JDJT8zWKrrG9rhq20pIDZORIFQn0+bHbqEzQ
6AFus4uYUgL1MoOtUpMI8WLWIo7sJHEKqhz4LKWD+L3DSXiGtQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFI6D8UysEwnb/qDRciPB6Xq5XunDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTIyMTBkYTMtMDEyMi0z
ZDljLTg5OGItYjJjYzk1MTY5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKqAwQA
zn/UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFJSfWQwaIYs5+VUSOlK6uzV6UZex95GSXVVQDMWuneZ9oYB
kulZK3drLGDvRmMwBpRPk34f2bGnzn8KmxQiKpVIjDeMbRKVqclld9cSVN6l0gnz
99aseF5Ksmix2xOnZkhD8+K32Sb0WmTf4Vu8hoA7GvDvzupuzZ+KMWZhAkNUw9nM
4lylMOddV5DfVSlnK5gL0pgrJ+DPxxWO/VFUc5Ml/8mZNX6yghmoBphpvjZNdNfX
Ev/bt77OOaV6O9dv7sFPiyhVONC45DDaQvUKIytav4k2vr95y3aRZsOHJs6Q/U6p
rvs7XkEtGSrg4NNu4VJma4+KZXbX3WXqXDG07wY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:41 2025 by rpki-client