Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
File: 3137322e38322e39312e302f32342d3234203d3e20323132333936.roa (raw, json)
Hash identifier: E8u/JfNfXkvK/7czWUIQ69tpCX4KPQa9Ag+IvA5NsIg=
Subject key identifier: 28:6D:7E:90:A6:F4:72:AE:89:B5:CD:C2:E5:8E:D5:29:84:0E:FF:AE
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 79533B20BB63FC74798ED61C23363067629F76E5
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
Signing time: Thu 27 Mar 2025 10:09:32 +0000
ROA not before: Thu 27 Mar 2025 10:04:32 +0000
ROA not after: Thu 26 Mar 2026 10:09:32 +0000
asID: 212396
IP address blocks: 172.82.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:53:3b:20:bb:63:fc:74:79:8e:d6:1c:23:36:30:67:62:9f:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Mar 27 10:04:32 2025 GMT
Not After : Mar 26 10:09:32 2026 GMT
Subject: CN=286D7E90A6F472AE89B5CDC2E58ED529840EFFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:fa:ab:4e:ce:2b:3a:b6:61:ab:aa:b2:4d:
97:28:ea:32:fd:fe:98:26:df:3c:3b:4a:80:04:cb:
81:43:ae:e5:b3:1f:9f:2c:29:3f:db:1f:7a:12:24:
4d:c0:6c:6d:17:db:84:09:e7:87:8d:50:0b:a9:8b:
1e:46:95:f7:f9:7a:91:58:37:c3:cf:c7:91:b1:ce:
6a:2e:0a:96:75:92:73:95:34:08:94:62:2b:c9:78:
d2:42:f4:84:5b:df:8f:34:08:c2:e8:41:4d:99:1d:
bb:2e:de:02:d4:40:37:a8:ef:f9:d7:d1:7b:c3:9d:
70:fd:28:19:36:7d:17:72:5f:d0:c9:b7:68:5b:a5:
7f:c0:aa:20:6b:08:91:2e:39:1b:8f:08:88:7b:46:
9f:6d:d6:77:50:da:c8:fa:f8:b4:58:72:ce:0a:ce:
06:9f:55:57:bb:19:58:77:5d:0c:7c:d1:b6:9d:ba:
07:04:05:b8:0f:38:3e:ca:80:92:5c:cc:1a:dd:3d:
b5:ec:1d:a9:ec:3f:23:ea:68:85:7c:0e:48:f9:83:
7f:4c:53:03:b1:64:32:5e:94:0a:cf:11:94:15:32:
70:01:42:8d:e4:ff:21:76:5c:b6:78:43:e7:b3:c5:
90:cc:03:ee:d5:85:b8:9d:20:c7:30:b0:a5:47:3e:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:7E:90:A6:F4:72:AE:89:B5:CD:C2:E5:8E:D5:29:84:0E:FF:AE
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0a:78:8f:05:52:17:36:d6:83:09:62:b0:0e:96:29:c8:48:
45:30:3e:17:1b:ca:0b:d2:f1:6a:79:38:5b:73:19:11:16:d7:
47:5e:3f:20:65:54:d1:f5:5c:f2:ed:9d:b5:cc:6f:ae:47:84:
1a:69:93:8a:94:b9:ab:5b:2c:ca:7c:f4:03:5d:0b:88:47:ab:
2d:e3:94:e5:99:03:2a:4a:5d:a5:e7:11:4a:08:bf:33:8d:a8:
e3:b9:8f:86:7c:29:c4:89:1f:e0:62:2a:f3:e3:52:53:e6:4d:
92:39:fe:9b:93:bc:ca:bc:1b:28:52:72:57:2a:0c:20:d3:30:
87:6c:6c:d3:e0:02:b6:fa:0e:dd:07:ed:53:1f:a9:cb:48:dd:
50:a7:3a:cb:24:45:d2:0f:28:cd:9b:0f:18:03:9d:df:b6:87:
5f:da:2a:8f:1e:de:13:3f:9d:2d:49:9d:80:b6:c1:0e:20:7c:
19:2e:ba:c4:82:31:5d:ae:66:4e:18:1d:d9:0e:90:ed:10:2a:
6d:eb:45:50:93:ac:4c:9e:2a:bf:23:c6:49:52:b7:bf:00:a2:
53:da:64:f9:fc:68:97:f8:7f:1c:4b:41:0f:6d:6f:44:8a:2d:
d6:21:0e:97:c2:89:e5:74:ae:ad:3e:89:dd:d3:ae:df:3b:6d:
34:60:1d:38
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUeVM7ILtj/HR5jtYcIzYwZ2KfduUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjUwMzI3MTAwNDMyWhcNMjYwMzI2MTAwOTMy
WjAzMTEwLwYDVQQDEygyODZEN0U5MEE2RjQ3MkFFODlCNUNEQzJFNThFRDUyOTg0
MEVGRkFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHT6q07OKzq2
Yauqsk2XKOoy/f6YJt88O0qABMuBQ67lsx+fLCk/2x96EiRNwGxtF9uECeeHjVAL
qYseRpX3+XqRWDfDz8eRsc5qLgqWdZJzlTQIlGIryXjSQvSEW9+PNAjC6EFNmR27
Lt4C1EA3qO/519F7w51w/SgZNn0Xcl/QybdoW6V/wKogawiRLjkbjwiIe0afbdZ3
UNrI+vi0WHLOCs4Gn1VXuxlYd10MfNG2nboHBAW4Dzg+yoCSXMwa3T217B2p7D8j
6miFfA5I+YN/TFMDsWQyXpQKzxGUFTJwAUKN5P8hdly2eEPns8WQzAPu1YW4nSDH
MLClRz49WwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFChtfpCm9HKuibXNwuWO1SmE
Dv+uMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMxMzczMjJlMzgzMjJlMzkzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxSWzANBgkqhkiG9w0BAQsF
AAOCAQEADAp4jwVSFzbWgwlisA6WKchIRTA+FxvKC9Lxank4W3MZERbXR14/IGVU
0fVc8u2dtcxvrkeEGmmTipS5q1ssynz0A10LiEerLeOU5ZkDKkpdpecRSgi/M42o
47mPhnwpxIkf4GIq8+NSU+ZNkjn+m5O8yrwbKFJyVyoMINMwh2xs0+ACtvoO3Qft
Ux+py0jdUKc6yyRF0g8ozZsPGAOd37aHX9oqjx7eEz+dLUmdgLbBDiB8GS66xIIx
Xa5mThgd2Q6Q7RAqbetFUJOsTJ4qvyPGSVK3vwCiU9pk+fxol/h/HEtBD21vRIot
1iEOl8KJ5XSurT6J3dOu3zttNGAdOA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:49 2025 by rpki-client