Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
File: 416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json)
Hash identifier: nnO+3ljDxXePm8MsJq0oJFAhZAW3hDFyfia/kfTeqLw=
Subject key identifier: 92:4E:9E:9C:78:41:3F:3E:3B:9B:9D:3E:A0:2C:2A:BB:19:37:FC:8A
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584949FE8EA9CF7008FB7A9057C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 1239
IP address blocks: 172.98.161.0/24 maxlen: 24
172.98.167.0/24 maxlen: 24
172.98.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:8e:a9:cf:70:08:fb:7a:90:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=90cb4bc3-e094-42af-b9a2-833c4d0c6b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:6a:0a:4e:0e:ca:29:e4:32:b9:93:b8:81:
58:a9:5d:53:a4:b2:2a:c9:ff:e6:4f:a9:d5:68:33:
10:0b:b2:3d:b9:6e:92:77:81:e7:dc:fb:5f:99:92:
65:06:41:79:75:77:81:b9:3d:58:d2:d2:24:00:33:
28:7f:79:f1:de:ca:8b:e1:d9:47:f9:f4:7e:79:85:
b7:ff:98:13:d7:6a:0b:1a:48:32:5b:d9:3c:8a:cc:
a3:18:d8:6d:da:bd:26:19:97:96:54:47:b9:6d:7e:
e8:71:ad:bf:3e:03:3f:7d:96:94:10:b8:eb:0f:80:
b8:02:b1:bf:5c:b7:5b:28:a2:c8:bc:df:83:3c:13:
a9:4d:70:00:93:3d:ed:e6:3a:0a:bc:58:2e:fc:32:
7e:88:31:12:a2:8a:31:cb:54:2a:74:c8:8c:0e:ad:
ad:a7:8b:00:72:9b:a2:fe:77:aa:42:c3:88:ab:63:
75:bd:0b:77:e5:ca:08:35:e4:f9:c0:65:d8:80:a4:
7e:43:bd:c9:45:7f:88:df:ec:ad:bd:53:9b:25:8b:
8c:50:2d:28:7e:83:1b:dd:07:17:e4:a8:22:80:c3:
31:26:e8:c5:ef:d2:1d:8b:67:f8:e6:63:a9:c4:c6:
ed:ef:40:7a:bb:93:02:84:06:d7:6b:ac:60:e5:8c:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:9E:9C:78:41:3F:3E:3B:9B:9D:3E:A0:2C:2A:BB:19:37:FC:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.161.0/24
172.98.167.0/24
172.98.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c4:74:1d:ac:8e:b4:c3:d4:d2:3d:05:09:9c:11:82:79:15:
92:ac:62:f8:0e:f8:71:bc:fc:07:06:4c:8e:4f:94:85:39:18:
c6:31:4b:ef:d2:ad:cd:fc:c5:eb:52:09:91:a1:62:3e:10:d9:
dd:3d:a5:25:3e:52:c5:d2:ee:88:f7:fe:b4:ae:97:58:c1:53:
ea:78:0c:46:f7:cb:a9:f0:55:3c:01:4e:53:a0:c2:f6:a1:72:
67:49:a3:24:9e:ac:c0:b1:d8:be:03:ca:2d:54:bb:b1:aa:b4:
34:2f:46:ac:25:ac:a9:31:6f:14:f8:25:8c:93:54:c0:d1:18:
e6:01:c1:a6:c5:00:f5:e5:9f:95:36:6e:3b:a0:04:71:11:c6:
46:13:90:9e:e1:23:24:d3:18:cc:7c:d9:87:99:7c:84:f3:66:
92:02:84:7f:75:dd:2a:4d:b4:02:2a:20:e7:9f:f3:b3:da:c6:
cd:9b:d7:4d:b5:91:c5:a9:cd:aa:c2:70:23:18:7f:0c:f1:0f:
34:37:df:43:dd:47:4e:de:33:e9:3a:7f:05:a5:88:40:41:2f:
af:57:b9:b9:17:86:8e:de:50:99:5a:d0:2b:1e:79:1d:1b:36:
73:40:46:bc:0e:cf:eb:af:a7:22:27:c3:2a:b8:f5:06:59:6d:
04:6c:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net