Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
File: fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa (raw, json)
Hash identifier: GgTTcfW8/TL3tcp0FukwJBVnd6wTBoxkX0N7uySnrmo=
Subject key identifier: 91:DE:CC:9D:55:A5:F5:F5:11:60:C1:BF:95:3C:7C:0D:83:C1:2E:66
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858493ED3D31E33A4096F6C0AD630
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 9009
IP address blocks: 172.98.164.0/24 maxlen: 24
172.98.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d3:1e:33:a4:09:6f:6c:0a:d6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=f8fb7f95-50e6-46d9-9848-54fa8c11dded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:1c:cb:be:14:bb:da:ea:94:4b:74:31:b4:
fc:31:a5:f9:fd:cc:b0:25:aa:66:14:e2:22:15:67:
f9:55:df:57:d5:9c:83:db:50:c6:a6:99:e7:dc:52:
f2:a9:ba:79:07:b9:34:04:75:cf:30:d5:e0:ce:f6:
25:f5:56:59:d0:15:d3:44:07:82:f8:7e:12:36:f0:
47:59:ba:76:46:38:ef:bf:85:53:92:fe:93:c8:9f:
a3:ca:79:b6:47:31:7c:49:93:0d:1e:77:d6:07:47:
4f:16:0c:b0:86:79:d7:9f:7b:4f:b5:b1:17:7d:a5:
c8:8f:9b:a5:75:5e:b2:83:6e:08:e0:ed:48:7c:4b:
00:b4:c5:4b:94:7b:36:6f:e9:31:7b:f3:3d:aa:e4:
2d:5a:f8:f0:a1:61:4d:f3:fc:be:0c:7e:74:10:fe:
43:07:ec:2e:ef:16:6a:af:b2:51:a7:d8:e3:98:46:
10:82:26:55:b1:33:f7:f3:fd:5f:c1:e3:b2:a4:c5:
92:20:d3:9f:34:ea:2d:48:76:92:a9:ec:ec:8a:d3:
a5:65:47:8f:8a:c3:58:78:30:48:c0:bd:e2:50:8f:
b5:1d:37:e1:55:a2:ec:77:4b:01:79:ec:0c:ca:d6:
a1:7e:ce:49:48:d0:31:2e:d4:3b:bb:3a:26:33:f2:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:CC:9D:55:A5:F5:F5:11:60:C1:BF:95:3C:7C:0D:83:C1:2E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.164.0/24
172.98.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a0:e0:61:fb:81:69:37:16:29:50:b4:bb:44:71:cd:1b:de:
9e:f4:e9:8d:c1:69:93:ed:28:6c:ca:bc:bb:40:1c:27:1c:0a:
1d:80:f1:8f:5a:fc:5b:7a:d7:7c:3f:8b:ee:53:c6:fe:f9:7a:
48:98:b7:73:c3:da:64:d4:38:42:8a:29:d4:a8:19:2b:40:5f:
51:b6:85:83:0b:4b:8c:ba:62:11:b3:5a:7c:ba:76:8b:a8:1f:
2b:01:42:5a:60:18:87:0b:bf:3a:7d:98:aa:04:6c:44:92:60:
fa:4e:98:5e:86:98:aa:8e:a7:0e:d6:3b:68:b4:69:ab:61:75:
91:b9:24:25:d4:87:e5:50:c4:fb:39:8d:d7:0e:9b:47:e8:ba:
64:36:d3:1f:f4:8b:74:8c:9b:8a:91:10:aa:ee:19:de:f5:01:
e8:48:b0:58:8f:95:5f:2a:07:37:0f:22:8a:91:fd:6c:8c:f2:
2f:91:31:cc:eb:c5:7f:32:09:1d:c9:d8:46:9c:06:09:0b:bf:
b1:d3:2a:9c:12:46:2e:cb:1a:ce:08:0b:de:d6:dc:56:ca:34:
6c:b3:54:f5:f6:c3:34:9e:d9:64:a5:0d:fc:ba:59:90:2a:f0:
f2:b6:bd:54:13:8c:f8:03:49:15:46:82:08:4e:ec:be:a5:26:
5c:ad:c3:19
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk+09MeM6QJb2wK1jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZjhmYjdmOTUtNTBlNi00NmQ5LTk4NDgtNTRmYThjMTFkZGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWccy74Uu9rqlEt0MbT8MaX5/cywJapmFOIi
FWf5Vd9X1ZyD21DGppnn3FLyqbp5B7k0BHXPMNXgzvYl9VZZ0BXTRAeC+H4SNvBH
Wbp2Rjjvv4VTkv6TyJ+jynm2RzF8SZMNHnfWB0dPFgywhnnXn3tPtbEXfaXIj5ul
dV6yg24I4O1IfEsAtMVLlHs2b+kxe/M9quQtWvjwoWFN8/y+DH50EP5DB+wu7xZq
r7JRp9jjmEYQgiZVsTP38/1fweOypMWSINOfNOotSHaSqezsitOlZUePisNYeDBI
wL3iUI+1HTfhVaLsd0sBeewMytahfs5JSNAxLtQ7uzomM/JnIQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJHezJ1VpfX1EWDBv5U8fA2DwS5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZmNkNzUyMDItMmJjNS0z
NmRlLWE1YTItM2MwYjAwYTgxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKkAwQA
rGK6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGqg4GH7gWk3FilQtLtEcc0b3p706Y3BaZPtKGzKvLtAHCcc
Ch2A8Y9a/Ft613w/i+5Txv75ekiYt3PD2mTUOEKKKdSoGStAX1G2hYMLS4y6YhGz
Wny6douoHysBQlpgGIcLvzp9mKoEbESSYPpOmF6GmKqOpw7WO2i0aathdZG5JCXU
h+VQxPs5jdcOm0foumQ20x/0i3SMm4qREKruGd71AehIsFiPlV8qBzcPIoqR/WyM
8i+RMczrxX8yCR3J2EacBgkLv7HTKpwSRi7LGs4IC97W3FbKNGyzVPX2wzSe2WSl
Dfy6WZAq8PK2vVQTjPgDSRVGgghO7L6lJlytwxk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:08 2025 by rpki-client