Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203231383539.roa
File: 3231362e3234372e39392e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: HwRCoOR8O6KJnxYGkjCGx6CmU4OgqvRvYEngwODKB6A=
Subject key identifier: 5D:56:EF:66:13:4E:73:D7:3E:77:1F:47:8E:1B:D6:14:04:C3:4D:57
Certificate issuer: /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial: 4B119AA5E5A7BFD741D0E93C5BBA93F5A2AE6E75
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203231383539.roa
Signing time: Thu 12 Dec 2024 04:28:23 +0000
ROA not before: Thu 12 Dec 2024 04:23:23 +0000
ROA not after: Thu 11 Dec 2025 04:28:23 +0000
asID: 21859
IP address blocks: 216.247.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:11:9a:a5:e5:a7:bf:d7:41:d0:e9:3c:5b:ba:93:f5:a2:ae:6e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Validity
Not Before: Dec 12 04:23:23 2024 GMT
Not After : Dec 11 04:28:23 2025 GMT
Subject: CN=5D56EF66134E73D73E771F478E1BD61404C34D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:d3:2a:a4:24:94:19:0a:15:3c:19:eb:eb:
a2:99:24:f3:8a:b4:56:4f:e6:a3:26:b4:51:62:ab:
35:6a:ad:b8:e4:15:cb:4b:bb:af:e8:ea:3c:9e:9a:
1e:8c:4c:31:ce:99:d5:f8:10:14:c0:f5:58:0f:a1:
c3:6b:33:cd:ca:28:b8:e5:e6:22:1a:2d:c6:82:59:
46:64:37:a8:96:82:52:18:8e:eb:66:28:be:a5:2c:
c9:17:5f:0e:f9:eb:b1:ac:65:23:b7:f4:fa:77:e2:
83:1b:4d:bb:ec:80:f1:dc:c7:2a:0e:7b:f8:e3:2f:
f1:b5:9f:8b:71:35:44:70:07:ca:7e:2f:ac:ab:c5:
c4:4b:83:e8:f9:61:bb:0e:f8:e7:5a:28:15:97:19:
cf:fb:45:27:f3:b9:b5:90:0e:0a:77:80:ef:f5:e2:
4e:97:8b:a1:65:93:f8:f9:73:c1:f2:83:45:b0:f0:
b7:d2:43:61:1e:dc:6e:49:5c:e2:94:aa:1a:4c:80:
84:a3:90:bc:01:98:cf:f4:83:4f:4e:e1:18:05:06:
70:70:d1:db:9f:69:b5:61:1b:ee:5c:42:59:a0:3e:
6e:e7:bf:3d:29:b6:e5:f8:9d:ec:70:6b:c1:9a:4e:
c8:e5:10:62:53:35:88:e9:e6:aa:3d:92:97:d4:43:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:EF:66:13:4E:73:D7:3E:77:1F:47:8E:1B:D6:14:04:C3:4D:57
X509v3 Authority Key Identifier:
keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.247.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:db:5c:8a:44:dd:fc:ae:31:92:de:8b:81:e2:ba:e8:64:d1:
05:9f:cd:c6:6e:b3:ec:70:e2:2b:20:e3:2d:2c:11:4f:46:34:
6e:10:79:47:7c:91:c8:9f:a7:05:7c:4b:c3:8f:37:7d:14:fe:
fe:d2:ec:c2:c7:99:3f:8a:1c:d6:ea:92:f9:95:1e:a6:f3:07:
8b:65:31:d6:f1:56:3c:17:98:ed:97:09:bf:4f:61:8d:8a:fe:
e6:65:3b:5a:3d:4b:b5:48:e2:50:93:37:d6:ab:cf:06:c7:d8:
04:53:65:89:77:4f:5a:18:dc:6d:11:8a:7e:d1:87:55:6d:59:
b0:43:fe:85:ef:30:1a:65:c6:91:ca:1d:94:9b:c9:11:1e:c9:
dc:8e:26:7f:6e:2e:ac:b6:2f:28:73:4b:64:52:7e:96:32:57:
a8:f5:a7:63:76:1c:88:a9:ee:69:01:b4:9a:89:4c:bd:17:87:
ba:26:2c:ce:e2:bc:c2:24:78:d2:8c:a8:fe:4f:b8:5f:38:ac:
41:be:82:cc:0d:20:73:f3:49:80:63:d7:11:8f:ba:08:5a:85:
04:b3:3e:f1:a4:30:12:86:3d:54:4a:27:39:91:d0:2e:b3:d4:
9f:5e:d3:5f:01:08:6c:7e:3f:15:a9:26:bf:6e:90:43:6a:98:
c6:98:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:42:56 2025 by rpki-client