Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa
File: 3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: VRyAoljT3d6qBgmmH0DJWIFpuKvaL2db2KLKVPHilmA=
Subject key identifier: 1F:EA:9E:AD:86:EC:1F:17:63:C7:69:3F:91:70:05:D2:DE:77:6A:BD
Certificate issuer: /CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Certificate serial: 7F12238EB38DB9BAAED9B60664A598A9E895A985
Authority key identifier: 47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa
Signing time: Tue 03 Jan 2023 20:26:55 +0000
ROA not before: Tue 03 Jan 2023 20:21:55 +0000
ROA not after: Tue 02 Jan 2024 20:26:55 +0000
asID: 9449
IP address blocks: 199.182.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:12:23:8e:b3:8d:b9:ba:ae:d9:b6:06:64:a5:98:a9:e8:95:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Validity
Not Before: Jan 3 20:21:55 2023 GMT
Not After : Jan 2 20:26:55 2024 GMT
Subject: CN=1FEA9EAD86EC1F1763C7693F917005D2DE776ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:06:7b:0b:a2:73:ca:28:7d:de:be:a4:fa:
06:db:45:0c:23:de:e4:98:5a:70:2b:39:ff:81:cc:
0a:b6:44:03:a3:00:d0:22:a0:57:dd:fa:9d:66:03:
2c:5b:d2:05:fe:60:36:94:03:3c:f0:bb:1c:a8:b2:
2f:02:ea:43:34:f0:97:cb:46:62:db:75:24:9d:ed:
99:4a:4a:26:36:57:60:58:84:ee:cf:48:1c:0e:d9:
db:bc:b6:bc:1b:0f:af:9d:4e:87:53:62:ae:ca:2c:
85:47:66:e2:09:15:61:7d:e9:5f:2c:2c:be:6e:c9:
01:8c:61:74:e4:f1:b5:e6:a9:b9:9a:e3:a0:82:b3:
9d:9e:c7:3d:1a:34:7b:57:05:44:80:de:d3:61:f0:
53:f3:1e:b6:a1:d2:75:85:0f:d0:62:f7:d6:04:e7:
27:19:e1:8e:af:4a:5a:6a:cb:9a:03:63:eb:35:8d:
ba:f9:0a:0d:61:e8:4f:2f:86:55:67:ba:64:63:be:
77:8a:71:6a:2b:36:44:48:24:df:be:20:79:f0:42:
02:70:f4:b2:2d:7a:d8:12:fa:55:5c:04:c2:0c:26:
10:a6:1c:5d:45:43:0b:a1:cb:e6:14:30:72:d6:e8:
4c:97:fe:40:31:c0:89:9f:d2:84:90:d0:d1:4b:54:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:9E:AD:86:EC:1F:17:63:C7:69:3F:91:70:05:D2:DE:77:6A:BD
X509v3 Authority Key Identifier:
keyid:47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/475558BF6CC83110141F0325D912A869EB234A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.134.0/24
Signature Algorithm: sha256WithRSAEncryption
95:88:05:47:2c:d7:97:73:b5:c8:c8:2f:a8:e3:43:bc:5e:61:
ef:8f:42:67:4e:c9:48:21:09:61:91:ff:ce:fc:68:e8:1f:30:
9f:85:3e:15:33:26:ba:44:cc:e5:55:9a:84:32:78:ae:75:1f:
c1:2e:5f:7b:df:be:db:b3:db:71:fa:dc:90:36:13:cc:63:ef:
67:c9:e1:35:74:d5:e9:78:df:92:e9:43:1c:2d:dd:81:b6:98:
8b:c6:b9:0b:3c:09:53:28:bf:a2:07:5b:ac:56:28:5e:fe:ea:
bd:d5:91:f6:b7:b7:47:c3:8a:69:93:8d:4c:24:13:eb:1e:15:
5e:fd:53:9b:19:5d:a0:e8:f6:a9:cb:35:74:57:8c:ac:48:a1:
3e:7e:a8:e7:7e:da:7c:0f:8d:df:8e:a0:8d:7b:ce:a2:8d:03:
86:25:f5:5b:0e:dc:34:34:34:d0:e6:40:7d:29:6e:a4:44:b5:
5c:fd:56:a0:0b:de:aa:05:8f:05:5d:8b:3f:40:0d:12:25:4d:
a9:66:3a:bd:f0:66:e6:ca:30:04:33:cd:5a:62:bb:3a:8e:00:
6f:8a:db:92:05:0b:65:7c:76:80:33:a4:86:17:44:07:30:fb:
90:c7:d9:e3:f9:b0:ef:1c:df:36:e0:bf:03:22:40:d7:28:f3:
57:03:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org