Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20353737.roa
File: 3139392e34382e3234332e302f32342d3234203d3e20353737.roa (raw, json)
Hash identifier: 7uBCTPQDG2SfMPxyjq76qsAfsUHxyVYI2ZUBEiUMtX0=
Subject key identifier: 06:3C:F4:7C:4B:AA:26:44:8D:C2:64:A1:AF:2D:F5:14:07:F4:B6:64
Certificate issuer: /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial: 53CA4F081094B8478E7B0A500391A5A04903E066
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20353737.roa
Signing time: Sat 09 Dec 2023 14:27:53 +0000
ROA not before: Sat 09 Dec 2023 14:22:53 +0000
ROA not after: Sat 07 Dec 2024 14:27:53 +0000
asID: 577
IP address blocks: 199.48.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ca:4f:08:10:94:b8:47:8e:7b:0a:50:03:91:a5:a0:49:03:e0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Validity
Not Before: Dec 9 14:22:53 2023 GMT
Not After : Dec 7 14:27:53 2024 GMT
Subject: CN=063CF47C4BAA26448DC264A1AF2DF51407F4B664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:42:c2:38:b2:2f:b0:71:45:48:49:03:7d:
82:a2:d6:89:ba:77:9c:cc:56:cf:e1:fa:cf:e6:a5:
1a:72:89:43:ac:bd:36:c4:a2:c6:6e:55:55:5e:4b:
60:18:26:f8:5d:31:0c:1d:33:45:6d:4b:75:b0:e4:
25:ef:1b:dd:c1:71:6a:32:1b:c0:96:b8:8a:20:da:
7a:a6:49:c2:a6:25:df:5a:43:63:3a:c1:c4:8b:f6:
c4:70:d8:a6:14:ba:fb:65:48:02:8f:5d:10:07:19:
5d:62:c6:d1:2f:60:6b:07:a0:4c:b9:d9:77:7e:39:
da:06:03:e8:95:86:43:d5:5a:af:fd:b1:e5:86:be:
b6:0c:b6:7a:0a:e4:25:a4:3c:75:63:b1:de:6f:fc:
95:8f:1b:0b:80:e9:6f:a6:95:9e:19:8c:02:9c:e4:
06:11:d2:18:08:be:1c:44:46:44:7d:a7:32:b0:88:
7c:55:b5:0e:f0:ff:98:b4:81:39:fc:74:9b:b1:9c:
72:d3:32:c7:81:68:0e:29:25:7f:3b:a7:6b:00:7c:
c3:78:fe:79:98:99:e1:25:c8:e0:54:c4:22:5c:d2:
88:12:26:9d:af:ef:2e:e1:e2:e3:76:87:60:4d:55:
5c:cc:b6:d4:b9:a7:ee:44:be:28:15:09:cc:40:23:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:F4:7C:4B:AA:26:44:8D:C2:64:A1:AF:2D:F5:14:07:F4:B6:64
X509v3 Authority Key Identifier:
keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.48.243.0/24
Signature Algorithm: sha256WithRSAEncryption
20:47:6e:38:35:05:ea:5a:d6:20:24:06:21:ba:e1:f8:9a:ee:
09:71:df:32:48:02:f0:9c:bd:90:9f:51:da:2d:e6:bf:2d:c8:
34:f9:a9:b6:8a:3b:fe:1e:b6:f5:af:72:3c:f0:e4:1c:dd:39:
99:52:fb:c7:9c:b2:2e:46:85:6f:60:e0:f7:60:2d:93:38:4c:
38:1f:6c:5c:63:bd:30:8c:f8:52:39:d1:21:87:2e:f7:cd:36:
8a:72:af:5e:e7:43:33:22:d0:4a:fc:81:e1:c0:3b:df:2e:c5:
87:7d:e6:37:40:aa:f9:eb:a7:07:2d:7d:04:c2:90:d1:d2:9f:
97:68:9c:9d:a5:82:ca:33:7a:1b:94:95:31:e1:f2:0c:b6:a8:
f8:68:e6:4f:23:46:96:29:86:f5:ed:55:92:bb:4a:70:90:f5:
b1:64:d7:1f:6a:f4:5a:cb:3a:cd:3c:2e:5e:b9:44:d7:9e:fd:
6e:9d:57:68:07:e2:d5:3c:81:08:3c:76:35:51:cb:73:03:cf:
f9:cc:2f:9e:f8:04:54:b6:3f:42:9e:df:d9:0c:d5:ed:a5:0e:
bb:2c:2a:88:dc:08:a7:4b:73:b6:9c:eb:44:e9:c7:c0:2b:ee:
f5:35:c0:96:04:0d:9b:35:5c:1d:49:3a:ff:9f:8d:63:98:25:
b9:1f:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:58:56 2025 by rpki-client