Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203136353039.roa
File: 3139392e3233312e36362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: avGTfj+s24cW6Cp5101uhWkZ5VLyWfDyASKDJdhm+0o=
Subject key identifier: DD:8C:C4:4F:8A:77:51:E3:0A:FB:35:7B:67:AE:55:5D:D3:61:25:E1
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 163D96F797B5327391189B9C82278A4A7F23C32E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203136353039.roa
Signing time: Thu 13 Feb 2025 07:12:31 +0000
ROA not before: Thu 13 Feb 2025 07:07:31 +0000
ROA not after: Thu 12 Feb 2026 07:12:31 +0000
asID: 16509
IP address blocks: 199.231.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3d:96:f7:97:b5:32:73:91:18:9b:9c:82:27:8a:4a:7f:23:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Feb 13 07:07:31 2025 GMT
Not After : Feb 12 07:12:31 2026 GMT
Subject: CN=DD8CC44F8A7751E30AFB357B67AE555DD36125E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:e9:d5:13:3d:b1:ac:07:53:9f:0d:9d:9f:
5d:e5:b0:e3:0d:5f:73:55:17:5f:e0:1e:bb:73:8d:
b2:92:55:c3:08:d6:98:75:90:30:3b:09:98:34:a7:
2a:38:c3:15:43:a0:a1:dc:74:89:38:75:00:6c:09:
84:e0:0c:f1:cf:64:42:d5:47:d4:88:04:56:b5:23:
b8:5e:f9:3a:8f:d3:64:ec:f2:19:0b:06:e5:3b:30:
17:37:bc:5d:36:9f:d3:9c:26:ab:67:b8:ba:76:f7:
77:c6:38:b8:07:61:df:3c:93:7b:87:9b:ee:ba:55:
46:36:7f:bb:1d:8b:20:ea:0f:dd:8d:ff:b2:65:61:
02:cc:83:22:d3:fe:95:d8:47:19:f8:d9:0c:38:21:
e2:69:3d:fd:91:79:9b:26:e7:48:e4:06:af:11:58:
2d:c0:50:f1:35:73:2e:27:97:67:59:d2:eb:a5:cb:
44:9e:a2:d0:cd:ef:24:41:18:55:3a:53:d8:ce:35:
da:37:d3:40:ea:dd:b3:91:49:d4:5f:4e:f7:bf:9b:
04:5c:6a:6e:ff:4f:d7:67:f8:e8:81:29:b8:90:b4:
ad:1a:05:a6:e4:29:70:65:0a:5f:fa:33:d7:38:2e:
ae:de:24:14:b2:34:ac:b4:5e:70:1d:01:cc:d6:77:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:C4:4F:8A:77:51:E3:0A:FB:35:7B:67:AE:55:5D:D3:61:25:E1
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
62:63:75:36:21:89:25:79:c3:9f:31:ef:9d:34:7c:4c:79:16:
27:f1:4e:06:a0:79:dc:e5:6e:71:33:88:61:7c:fb:b6:d5:f5:
f2:c0:da:23:e6:e0:10:ca:a9:1b:f3:a9:15:89:a2:db:04:ab:
d0:ff:1d:ed:fb:c5:79:24:55:c2:ee:59:5c:c6:59:f5:5b:97:
9a:2b:ac:7f:3c:44:98:5f:4c:84:d9:da:59:30:92:ff:0c:44:
c6:b1:d4:7d:ca:2e:7a:bd:60:68:4d:8a:51:29:05:6b:a5:12:
ae:03:e0:a6:e6:ce:36:a0:40:03:7f:91:97:e5:92:20:f2:df:
fd:6a:ab:54:43:09:37:a3:67:a4:e0:88:c0:2d:38:d1:ff:e6:
96:ee:dc:12:11:6f:03:42:4d:7b:78:f3:1f:48:34:b0:6e:b6:
3e:03:e6:4e:93:34:03:a2:cd:29:8b:8e:3f:74:63:28:d0:63:
4c:85:6a:b2:22:b0:82:09:01:1f:3f:02:9e:6d:43:e5:a2:f8:
46:7d:e0:18:38:b6:90:f8:68:79:e2:b4:31:a5:7e:1d:1c:c5:
2a:3c:cb:38:15:25:ed:77:e5:4d:27:99:1c:0b:b1:c8:b2:24:
40:49:26:ca:78:e5:a1:34:ea:d8:dd:d5:00:24:16:4b:00:bc:
f7:38:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:03 2025 by rpki-client