Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json)
Hash identifier: H/TPMazYjY4r2+trX8einR4xWy+aCOcTJDkA4E8mu1s=
Subject key identifier: 5C:2C:0C:B6:54:A1:C8:05:14:2C:6B:59:F1:7A:DB:AD:D7:9E:11:4A
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858498339EEC9C8CFFB2C64887480
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 9009
IP address blocks: 172.98.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:39:ee:c9:c8:cf:fb:2c:64:88:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=567af205-3a83-4ef4-b2e8-0b49678410b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:76:b6:93:96:52:d2:be:26:aa:1a:ad:59:
05:07:a6:13:86:93:82:e9:7a:25:73:37:34:2c:c6:
87:33:5a:09:fa:5c:56:af:20:34:7f:35:0e:6f:65:
6f:6a:fa:3e:92:74:59:db:c7:54:d0:93:f4:43:30:
ea:cc:4f:e2:2b:6d:78:e6:de:7e:83:dd:46:23:60:
6b:f4:26:02:a9:8e:cf:a8:c0:7b:87:a4:ad:7c:e0:
49:e2:fc:da:81:ec:d3:59:c4:b8:4d:c5:a4:b8:5b:
d7:db:fd:42:20:93:82:1d:28:43:6c:5f:6d:e4:be:
32:e4:7a:54:ea:e4:1f:87:2b:e4:f4:50:b3:1d:12:
2b:4f:cd:79:a5:13:b5:77:ae:fd:8d:89:b6:ec:c6:
0b:e4:13:fa:cd:60:8b:18:12:15:50:78:99:3c:ee:
bb:78:8e:5b:4f:6f:42:ed:33:76:26:ec:25:4f:55:
e9:e8:65:9f:b6:e3:8f:0d:5a:fd:90:d8:6a:c6:c8:
08:85:0c:d4:48:51:af:05:72:c5:af:0a:66:1f:82:
f5:16:59:0d:da:eb:b0:36:30:93:c1:9a:f0:ae:79:
5a:b4:25:2e:7a:1a:09:7e:7e:ac:fd:07:f9:90:f3:
b1:96:f5:bd:ae:55:ef:a4:6e:b2:c9:c8:38:ba:69:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2C:0C:B6:54:A1:C8:05:14:2C:6B:59:F1:7A:DB:AD:D7:9E:11:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:fb:77:6b:4a:7d:3c:5e:8f:a7:a6:8d:b0:97:b3:b3:87:74:
1d:f9:6c:37:99:f6:ad:ed:3f:b8:29:3c:2f:90:a7:8c:29:1b:
8d:0c:fc:c3:58:7f:d4:05:c6:ea:ef:8c:2f:9f:64:f7:50:5a:
26:7e:d7:ec:4f:bc:1c:7c:83:c4:38:a0:56:b1:c0:fe:b5:89:
db:cc:b4:ea:a3:58:c4:db:cc:be:2d:31:b9:5f:0d:10:bb:a4:
9b:69:2f:05:92:45:37:5d:6f:11:8b:1d:02:7d:e7:f2:5b:86:
28:98:3b:ab:6d:38:57:db:d5:b9:ec:e7:ef:ed:76:9f:a6:09:
75:6f:74:7d:5e:4e:3b:d8:a0:0f:d2:3b:48:8a:d0:bf:ad:c9:
e7:89:74:68:a5:6c:d7:ed:0e:02:ca:04:fb:92:7b:ff:ec:8e:
37:c0:f5:1d:22:b4:d0:18:3d:1c:07:28:42:b6:cf:1d:62:be:
6e:f0:2c:71:d1:75:a2:80:ee:8f:07:0d:fa:8f:1e:18:df:57:
72:5a:7e:a5:33:9d:57:ca:eb:c7:2a:10:1e:5c:bf:b5:44:24:
ec:fd:56:a0:8e:8c:96:a5:b9:96:61:b0:27:a0:cf:7e:49:80:
24:a3:e9:5f:3b:b8:f7:13:05:4c:72:53:2f:46:33:77:e8:e5:
4f:94:b9:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOe7JyM/7LGSIdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
NTY3YWYyMDUtM2E4My00ZWY0LWIyZTgtMGI0OTY3ODQxMGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RZ2tpOWUtK+JqoarVkFB6YThpOC6Xolczc0
LMaHM1oJ+lxWryA0fzUOb2Vvavo+knRZ28dU0JP0QzDqzE/iK2145t5+g91GI2Br
9CYCqY7PqMB7h6StfOBJ4vzagezTWcS4TcWkuFvX2/1CIJOCHShDbF9t5L4y5HpU
6uQfhyvk9FCzHRIrT815pRO1d679jYm27MYL5BP6zWCLGBIVUHiZPO67eI5bT29C
7TN2JuwlT1Xp6GWftuOPDVr9kNhqxsgIhQzUSFGvBXLFrwpmH4L1FlkN2uuwNjCT
wZrwrnlatCUuehoJfn6s/Qf5kPOxlvW9rlXvpG6yycg4umnagQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwsDLZUocgFFCxrWfF6263XnhFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z
ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAH7d2tKfTxej6emjbCXs7OHdB35bDeZ9q3tP7gpPC+Qp4wpG40M/MNY
f9QFxurvjC+fZPdQWiZ+1+xPvBx8g8Q4oFaxwP61idvMtOqjWMTbzL4tMblfDRC7
pJtpLwWSRTddbxGLHQJ95/JbhiiYO6ttOFfb1bns5+/tdp+mCXVvdH1eTjvYoA/S
O0iK0L+tyeeJdGilbNftDgLKBPuSe//sjjfA9R0itNAYPRwHKEK2zx1ivm7wLHHR
daKA7o8HDfqPHhjfV3JafqUznVfK68cqEB5cv7VEJOz9VqCOjJaluZZhsCegz35J
gCSj6V87uPcTBUxyUy9GM3fo5U+UuYY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net