Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
File: 37342e3132302e3132302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier: th/Wn53jvX4JHlWao7cRw11JoLUKSu2ZmsMKY8kaw9U=
Subject key identifier: 45:2A:69:4F:51:99:F4:87:F6:A7:B3:5D:E1:62:92:17:F7:9E:12:7D
Certificate issuer: /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial: 080C9F5C9E01CE146A73E502C48167ACAD6E5C69
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
Signing time: Fri 22 Nov 2024 20:49:22 +0000
ROA not before: Fri 22 Nov 2024 20:44:22 +0000
ROA not after: Fri 21 Nov 2025 20:49:22 +0000
asID: 8888
IP address blocks: 74.120.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0c:9f:5c:9e:01:ce:14:6a:73:e5:02:c4:81:67:ac:ad:6e:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Validity
Not Before: Nov 22 20:44:22 2024 GMT
Not After : Nov 21 20:49:22 2025 GMT
Subject: CN=452A694F5199F487F6A7B35DE1629217F79E127D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:bc:44:98:8f:2a:26:a3:0f:56:8b:79:47:
d8:86:23:62:ea:10:21:3d:40:3e:7d:b3:4c:29:6e:
fd:ba:4b:46:ad:2a:ae:15:ac:9e:69:38:97:92:a9:
03:fb:13:a9:75:0c:8c:4b:27:11:5a:6b:a3:96:e4:
0d:8d:1d:0b:36:39:0f:42:54:74:24:16:b2:bc:e8:
82:7b:77:48:a2:6c:a3:25:dc:38:e1:c9:66:0c:9c:
e5:90:27:e8:11:3d:62:f8:34:7e:21:b1:55:ce:15:
76:a9:c7:c7:ef:d7:e7:17:70:d4:94:22:15:e7:23:
06:51:fb:4c:47:38:74:a0:c5:17:40:21:39:d2:a5:
36:42:03:21:e7:6b:35:f4:ad:a6:ff:16:be:25:db:
58:80:8c:a5:11:de:f1:f2:ee:3a:13:ca:ea:7f:fe:
6d:a0:9d:67:51:16:ed:33:e9:b5:6c:19:71:ae:94:
22:ca:1c:73:f2:1e:3d:2c:16:d3:ba:a7:9e:bd:d7:
b5:7b:6d:34:5d:13:e5:6e:44:f6:a0:e4:ca:af:10:
ea:61:51:04:b9:4a:7c:93:2c:33:98:fd:72:a8:03:
a3:59:b7:d9:e9:1a:c8:cc:0c:e3:a8:32:6e:54:58:
38:61:5e:57:a4:bd:c6:4a:c6:d8:b3:d7:41:a0:3c:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:69:4F:51:99:F4:87:F6:A7:B3:5D:E1:62:92:17:F7:9E:12:7D
X509v3 Authority Key Identifier:
keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.120.120.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:38:96:e5:92:e9:3a:df:26:db:25:da:9f:9d:29:48:30:1d:
13:92:68:f9:4a:66:0c:3f:9e:5c:9a:e5:dd:6a:b2:b8:03:8e:
94:b4:fc:56:e7:aa:b7:43:8b:54:4c:11:78:81:07:cd:2f:12:
00:6c:77:b0:6d:3b:13:dd:ab:34:ce:bd:1e:5a:01:fa:9e:1f:
5c:8e:2b:b2:e2:1c:66:fb:41:e0:85:cf:ef:d1:85:d5:a1:26:
fe:f0:25:09:31:89:dc:24:d1:ca:51:0d:53:e3:44:f8:85:8d:
00:1b:67:f6:f6:89:e4:f1:b0:13:3c:ab:05:75:f6:19:a9:7f:
f0:dc:0e:a2:a5:d7:31:75:54:bc:3c:16:53:f7:68:9a:8b:05:
98:a0:78:2c:f5:f6:4f:c7:7d:06:14:c0:2e:69:c2:5c:61:3c:
17:3d:fc:6d:46:5e:e1:b1:5a:82:d6:78:4f:96:4f:0f:07:b4:
ff:54:f5:cd:61:de:52:9f:5f:ff:93:88:99:9c:90:e8:66:08:
4d:a3:dd:4a:70:eb:05:b3:01:8e:15:2f:a0:66:18:11:24:8d:
35:32:df:9c:79:ab:5a:8b:31:b4:51:73:e7:bb:f9:2f:aa:47:
e7:1a:dc:d7:1b:76:5f:ae:bd:34:99:e6:3d:40:ae:cd:8f:0a:
cf:13:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:48 2025 by rpki-client