Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa
File: 3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier: u1ZNr0dqttLK5foZ4zTCRgUny6gzY6z5eCG8xEFFQoc=
Subject key identifier: EF:E4:90:A4:17:F3:CB:30:42:C9:E6:F0:33:DA:B2:B3:B9:21:78:A8
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 037C4F0865B70C42A5730980AFE341B8CD27C532
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa
Signing time: Tue 17 Dec 2024 10:28:23 +0000
ROA not before: Tue 17 Dec 2024 10:23:23 +0000
ROA not after: Tue 16 Dec 2025 10:28:23 +0000
asID: 211439
IP address blocks: 216.247.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7c:4f:08:65:b7:0c:42:a5:73:09:80:af:e3:41:b8:cd:27:c5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Dec 17 10:23:23 2024 GMT
Not After : Dec 16 10:28:23 2025 GMT
Subject: CN=EFE490A417F3CB3042C9E6F033DAB2B3B92178A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:6e:f2:aa:9f:4f:7d:d4:a2:2e:3d:d1:dd:
99:25:06:29:f4:10:73:a2:15:77:7d:39:74:92:35:
73:d9:e9:5c:df:4c:04:6d:e9:00:2c:1b:d7:ed:cc:
6d:b4:3f:dd:9e:6e:4b:d3:fe:b9:4a:fe:b5:f4:32:
37:f0:79:6f:8e:85:52:ca:6c:66:68:5b:a5:00:d9:
52:b2:34:cd:18:cf:2e:08:3a:48:e0:e1:31:c2:ae:
12:11:50:9a:6d:49:e4:32:ab:78:8f:d5:c1:9c:6a:
2b:37:70:20:9f:44:b7:b7:40:01:a3:dd:7e:6f:2e:
8b:23:1b:7d:20:3e:7c:6d:7f:59:38:08:f0:58:74:
51:b8:e6:44:e5:4f:de:27:8c:34:0b:67:b7:c0:4a:
f0:f4:5f:0d:d6:f0:a6:20:e2:24:72:78:2b:11:06:
a0:18:a9:88:e2:6a:0a:3f:e4:3e:44:04:aa:a5:ab:
32:0d:e0:16:c7:5d:2e:ca:26:fa:28:b6:f8:28:9e:
e5:b0:e3:be:f6:1c:4c:af:aa:04:9a:b6:00:3a:0a:
5e:76:0f:49:66:7f:d9:a3:5d:76:f9:61:f5:b2:bc:
14:13:00:37:98:e3:76:d1:89:49:27:a7:3f:ba:cd:
09:5b:b0:f7:3f:01:4b:b8:e4:c1:03:79:0d:f6:54:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:90:A4:17:F3:CB:30:42:C9:E6:F0:33:DA:B2:B3:B9:21:78:A8
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.107.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e6:78:4e:e7:8a:21:a4:3d:3b:9d:18:80:94:e6:5d:e7:09:
bb:fb:7c:2a:0d:ec:2c:9d:12:f5:c3:a7:9f:73:4b:6b:2e:8a:
84:e9:2f:ec:27:27:19:39:87:f8:d3:04:de:26:ad:7d:ec:07:
a4:dd:93:d0:46:e8:2d:6e:99:a0:4d:90:ca:36:42:bb:8b:d8:
cc:14:af:ab:f0:2d:79:56:a8:1a:72:33:f0:22:78:3c:20:52:
1d:5b:e9:04:29:0f:d0:c0:22:ec:27:0f:54:90:87:2e:77:5f:
36:d1:bc:17:4c:ab:44:c4:88:27:cc:f7:b2:82:f2:aa:a3:70:
db:fc:24:72:cb:f7:68:e2:12:84:b3:69:ce:7c:f5:7a:31:c7:
32:55:c8:ef:d1:90:8e:11:ed:fa:fc:65:39:c6:43:4b:5a:34:
cc:ec:ae:6c:3e:1e:2b:86:7a:0b:5d:82:d9:8f:4c:a9:8b:fd:
b9:29:ea:8d:de:6e:5a:d7:b6:2d:73:cf:d8:20:b0:d5:49:32:
df:de:50:5c:95:a0:22:33:f3:d4:07:e3:ae:0b:8e:90:c4:8d:
46:a2:01:ba:84:b2:97:35:4c:2d:95:64:81:db:ee:1b:37:b5:
1c:94:9c:6c:2d:5e:b1:4d:d2:0f:01:00:b6:9a:fb:c2:f3:83:
45:a8:ac:74
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUA3xPCGW3DEKlcwmAr+NBuM0nxTIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjQxMjE3MTAyMzIzWhcNMjUxMjE2MTAyODIz
WjAzMTEwLwYDVQQDEyhFRkU0OTBBNDE3RjNDQjMwNDJDOUU2RjAzM0RBQjJCM0I5
MjE3OEE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq9u8qqfT33U
oi490d2ZJQYp9BBzohV3fTl0kjVz2elc30wEbekALBvX7cxttD/dnm5L0/65Sv61
9DI38HlvjoVSymxmaFulANlSsjTNGM8uCDpI4OExwq4SEVCabUnkMqt4j9XBnGor
N3Agn0S3t0ABo91+by6LIxt9ID58bX9ZOAjwWHRRuOZE5U/eJ4w0C2e3wErw9F8N
1vCmIOIkcngrEQagGKmI4moKP+Q+RASqpasyDeAWx10uyib6KLb4KJ7lsOO+9hxM
r6oEmrYAOgpedg9JZn/Zo112+WH1srwUEwA3mON20YlJJ6c/us0JW7D3PwFLuOTB
A3kN9lRi4wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFO/kkKQX88swQsnm8DPasrO5
IXioMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzNDMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92swDQYJKoZIhvcN
AQELBQADggEBABTmeE7niiGkPTudGICU5l3nCbv7fCoN7CydEvXDp59zS2suioTp
L+wnJxk5h/jTBN4mrX3sB6Tdk9BG6C1umaBNkMo2QruL2MwUr6vwLXlWqBpyM/Ai
eDwgUh1b6QQpD9DAIuwnD1SQhy53XzbRvBdMq0TEiCfM97KC8qqjcNv8JHLL92ji
EoSzac589XoxxzJVyO/RkI4R7fr8ZTnGQ0taNMzsrmw+HiuGegtdgtmPTKmL/bkp
6o3eblrXti1zz9ggsNVJMt/eUFyVoCIz89QH464LjpDEjUaiAbqEspc1TC2VZIHb
7hs3tRyUnGwtXrFN0g8BALaa+8Lzg0WorHQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:01 2025 by rpki-client