Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
File: d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json)
Hash identifier: dqEckenILDsqsprH8hUz0sYTxOhe2LxXe68Rg4aWmyk=
Subject key identifier: 5A:AA:FF:23:75:F0:74:F0:EF:FA:7C:14:62:95:C4:62:FE:96:43:A0
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584940394C66ABB275B76D94C980
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 46261
IP address blocks: 172.98.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4c:66:ab:b2:75:b7:6d:94:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=c1d8051c-fd82-439b-ba81-2a15c81d21c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:22:7a:d0:c9:1d:8e:81:0b:d3:d3:a1:15:
c2:60:52:c6:c6:ec:a9:70:76:03:bd:04:13:ad:77:
34:c7:5b:13:ce:0f:8b:51:28:d2:5c:dd:92:5c:e0:
32:a2:1a:2a:8a:c5:c3:a9:32:ba:16:c6:af:c6:3f:
d8:f1:a3:fe:ec:70:7c:d7:ac:0e:dd:5e:9d:7f:7f:
1c:51:d8:c9:90:a0:1c:70:3d:52:3e:3e:e4:aa:1e:
b2:3e:4c:c8:0e:8c:c2:64:ed:78:48:d0:06:f6:76:
ec:ac:5a:0a:c5:5c:18:42:a8:9e:f6:d4:4c:01:08:
9f:68:b5:02:77:a1:4e:a7:58:19:1a:55:99:63:9b:
89:85:22:6f:51:e9:fd:56:01:2e:b8:66:9c:7a:c0:
de:79:11:4e:b6:f4:cf:86:f9:5f:63:75:04:b4:e9:
7c:8c:60:28:0e:b5:48:0b:65:fb:70:48:04:05:06:
01:a9:f8:b3:ae:7b:48:b2:df:12:cf:ce:58:6a:e5:
1e:4d:18:40:0f:f3:3c:fc:73:81:a1:2c:c5:85:07:
a5:14:ef:7a:db:65:e9:0e:4c:f4:26:45:2d:d9:e4:
c8:ce:af:29:ef:f5:f8:f9:43:64:0c:05:83:09:e1:
4d:e0:8f:9a:a9:26:0f:8a:b5:d6:6a:d1:40:23:8e:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:FF:23:75:F0:74:F0:EF:FA:7C:14:62:95:C4:62:FE:96:43:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:95:33:2c:36:10:02:5a:0f:06:0d:eb:15:c7:e3:e3:26:05:
28:ec:54:c7:fa:91:ae:1b:af:e8:fa:a6:39:77:e0:63:7c:40:
ef:70:8f:43:57:c2:e5:64:7d:dd:d4:3a:80:23:dd:2f:71:7b:
85:ac:96:40:30:24:9d:6d:c7:e7:36:a7:40:1d:2d:fd:02:dd:
1b:93:ab:9a:3a:ee:3d:ce:36:54:23:73:d9:d6:b8:9c:63:69:
d8:26:61:cd:66:07:ea:30:fb:b8:db:bd:ab:87:92:96:04:8b:
b1:f2:03:6a:01:e5:48:38:c6:53:65:37:51:40:f7:7d:66:4a:
7d:96:2e:76:48:41:30:2b:00:6f:60:6c:19:75:57:96:c9:c0:
8a:ef:58:e8:48:73:d7:f7:46:e6:bf:d3:66:d5:1f:76:6c:5f:
8a:1a:fd:50:0f:90:a6:49:a7:6b:13:76:94:b9:8d:58:11:fe:
dc:a9:d6:2b:1b:32:92:ce:ce:7a:7b:73:4c:1b:42:92:81:ae:
c9:fc:47:a2:e2:d6:80:18:5c:0b:fc:28:4c:5e:a6:70:00:a1:
fa:46:9f:89:14:3d:13:48:fa:37:b0:72:9f:30:e4:e8:59:8d:
a4:1b:e7:ab:3d:7f:8c:4d:56:3c:24:7e:00:61:2c:b4:0a:92:
9f:36:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net