Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
File: 3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa (raw, json)
Hash identifier: 6w3xUvLveWqptYIfmgi7aLjqLvk4bR+2Gj5cCjzcsck=
Subject key identifier: E3:0F:2A:A5:80:73:B9:65:D5:BD:1F:40:50:10:D0:51:F5:51:DD:C8
Certificate issuer: /CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Certificate serial: 05171E6B483B4DAC79C109965F1FC4BB2B3E0F1B
Authority key identifier: 2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
Signing time: Fri 11 Feb 2022 23:45:35 +0000
ROA not before: Fri 11 Feb 2022 23:40:35 +0000
ROA not after: Fri 25 Feb 2022 23:45:35 +0000
asID: 16787
IP address blocks: 192.219.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:17:1e:6b:48:3b:4d:ac:79:c1:09:96:5f:1f:c4:bb:2b:3e:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Validity
Not Before: Feb 11 23:40:35 2022 GMT
Not After : Feb 25 23:45:35 2022 GMT
Subject: CN=E30F2AA58073B965D5BD1F405010D051F551DDC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:79:bc:dc:ad:a7:14:d4:60:03:39:3f:df:
46:65:26:f5:0d:1a:2d:11:32:32:eb:b3:9b:3d:14:
e0:bd:51:2a:08:1f:60:0c:7c:19:1e:83:57:24:f4:
58:fc:36:8b:7e:3f:fa:71:fb:0a:fb:8c:dc:e5:f7:
81:4d:b5:fd:36:85:18:6c:fd:55:92:48:f8:90:13:
58:56:b6:86:54:74:9b:a9:c1:ad:f7:89:8d:9c:c9:
e4:a4:19:b7:33:e2:eb:3b:d2:ac:3f:ec:69:f2:e0:
3b:51:43:08:eb:7e:27:c5:2f:b4:9a:2b:9a:2f:de:
3e:95:f8:4d:14:8c:1a:77:b7:39:78:57:b0:9c:67:
f8:05:0f:e3:58:4f:4c:d6:99:e9:e0:35:73:37:94:
7e:0e:b1:1d:63:98:2a:5d:fb:e6:82:16:8e:93:48:
79:b4:16:a1:fe:2c:2f:34:8b:0a:83:89:0b:32:41:
6b:dd:5e:51:e3:fb:51:72:cf:84:07:c9:ef:2c:9c:
d4:76:0e:37:c0:09:5d:8e:92:f6:86:dc:4f:70:59:
69:b0:fb:95:07:1d:2c:b8:ae:fc:f1:fb:d7:61:0a:
e8:59:55:5f:7d:4e:14:44:f1:d5:1e:77:b4:10:f5:
1a:be:29:b9:8e:55:f1:8b:f8:0d:82:e8:88:71:72:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:2A:A5:80:73:B9:65:D5:BD:1F:40:50:10:D0:51:F5:51:DD:C8
X509v3 Authority Key Identifier:
keyid:2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/2A336DBEE8C90A3D94705FD3F30EAB62D658DC52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.219.216.0/21
Signature Algorithm: sha256WithRSAEncryption
13:76:99:0a:b9:62:24:5f:96:2e:f1:c8:c7:d5:ed:08:bf:59:
bc:a9:7e:29:12:a5:26:63:ae:46:d3:67:03:71:f2:3a:29:28:
db:37:4b:58:e5:85:14:07:10:f4:94:8c:1e:01:50:9e:9a:6b:
83:54:e7:b7:c6:46:26:a9:3d:ff:41:de:b3:9d:eb:81:59:63:
6f:a7:14:a1:94:cd:d7:cf:32:5b:04:ae:37:aa:65:88:df:78:
f2:19:4d:01:1b:1b:bc:32:76:37:b5:8f:cd:91:8c:ec:22:e8:
04:6f:97:19:3e:60:8d:42:47:e8:5b:f8:13:05:ff:f3:86:11:
9f:fb:f3:de:19:78:f9:bf:35:f0:0e:e7:7d:a1:d7:c5:d7:0b:
7f:99:09:db:98:65:4f:28:4a:d2:e8:7a:40:6d:01:6f:69:09:
8f:46:cb:fa:c2:60:4d:90:cb:a1:58:4c:a6:7d:45:5d:c2:8c:
2f:24:4a:e4:8c:0a:c3:e0:f8:91:d7:2e:d6:d5:fe:4f:df:59:
8d:bc:91:8f:10:94:2c:14:6a:8f:76:46:15:3b:d1:00:5b:21:
36:d9:ca:2a:66:28:b1:62:d6:dc:00:84:93:05:28:48:fc:a0:
a4:69:e6:e1:f1:f6:15:eb:7e:14:5c:31:22:11:65:09:4a:74:
fe:8f:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:07:38 2025 by rpki-client