Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
File: 3137322e3130392e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier: y0cjdXD6UIyUpYCaVBv3fUrYQjOcb/bBWKcnslxxkow=
Subject key identifier: 6C:8D:39:5E:61:AA:55:51:B9:FE:89:CE:99:5B:D4:88:37:C9:0B:81
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 5F7D6F9AB73E97273572BCC6CDED075EA6F436CC
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
Signing time: Tue 25 Feb 2025 05:08:51 +0000
ROA not before: Tue 25 Feb 2025 05:03:51 +0000
ROA not after: Tue 24 Feb 2026 05:08:51 +0000
asID: 5650
IP address blocks: 172.109.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7d:6f:9a:b7:3e:97:27:35:72:bc:c6:cd:ed:07:5e:a6:f4:36:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Feb 25 05:03:51 2025 GMT
Not After : Feb 24 05:08:51 2026 GMT
Subject: CN=6C8D395E61AA5551B9FE89CE995BD48837C90B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:e5:64:8a:8d:13:a1:f4:42:ce:8d:73:09:
ac:f7:a0:b6:f1:ca:e1:63:f8:3d:34:26:24:95:54:
ae:12:79:4a:05:9e:f2:d7:42:15:31:e9:34:4d:ae:
11:a8:af:bd:40:9b:e7:4f:f6:86:e9:96:5b:c1:b1:
22:20:ed:a3:2d:c5:46:e0:af:8d:cb:8c:31:c0:f1:
a9:8c:ef:47:1d:c0:4c:aa:e1:eb:78:f9:b5:58:e6:
fd:85:e1:14:bf:a0:1b:1d:66:10:d9:e4:18:dc:17:
dc:d6:ef:50:fe:42:23:a8:d6:35:3b:41:e8:f4:96:
69:a2:39:fd:da:6f:dc:91:4b:77:d7:a9:89:0c:c8:
20:b1:ee:23:01:82:1e:5b:17:97:40:ea:08:d3:8d:
23:f0:8d:be:48:f9:38:6b:d6:bb:76:b6:92:3a:94:
9e:8b:a6:10:7e:7a:26:3f:57:b5:51:88:32:36:25:
22:dd:cc:db:f4:86:bf:37:55:ea:c4:56:e3:5c:a7:
bd:fe:da:8f:dc:8e:5c:04:16:43:81:4b:c1:45:ad:
1b:fc:18:66:c6:3b:69:5d:1b:37:9c:f5:4a:53:e1:
8f:08:d0:8f:ba:39:b0:be:43:19:dd:6c:17:88:57:
dd:cf:cd:65:2c:c0:dd:04:cb:f8:4a:ae:0b:23:12:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:39:5E:61:AA:55:51:B9:FE:89:CE:99:5B:D4:88:37:C9:0B:81
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:8f:39:88:fd:98:1d:34:d2:28:d7:e0:03:c1:9b:f0:93:92:
f3:d0:36:57:7a:ce:99:fe:21:22:5d:e3:96:d8:66:21:ad:0e:
ef:60:3a:12:01:77:27:a7:4c:02:72:52:83:8c:73:8a:a5:5a:
c8:4d:6c:ea:37:cf:f3:0b:c5:f9:4b:bd:46:ca:99:52:49:63:
a2:60:9f:7a:41:15:ec:ba:2c:83:4f:53:7f:7b:f7:09:fe:f6:
cc:7f:39:04:b7:03:58:87:79:ac:35:10:e3:77:8e:e3:68:69:
c9:36:a7:fd:42:29:cf:b7:c9:ab:9a:1c:ab:60:ad:39:63:4e:
87:a0:a0:df:9f:b9:ce:4a:66:cf:31:49:a3:77:e7:ab:13:85:
a6:3c:ab:51:c9:af:ed:13:a4:99:34:71:00:1a:1d:70:d6:bf:
de:0c:9c:61:4c:18:1e:ee:83:08:89:59:28:4b:e2:95:74:f1:
fe:e0:bc:a4:07:a3:39:87:b6:85:62:bd:6f:36:74:ce:4a:60:
b0:a5:f2:56:5c:9f:07:84:34:2a:29:5d:0b:b3:24:97:c2:69:
d8:70:1e:4b:81:2f:47:b5:89:0a:2a:ee:f9:16:19:76:a5:1c:
8a:db:31:26:e7:96:ca:39:4f:7a:41:28:46:7d:55:51:01:ac:
19:27:2a:02
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIUX31vmrc+lyc1crzGze0HXqb0NswwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjUwMjI1MDUwMzUxWhcNMjYwMjI0MDUwODUx
WjAzMTEwLwYDVQQDEyg2QzhEMzk1RTYxQUE1NTUxQjlGRTg5Q0U5OTVCRDQ4ODM3
QzkwQjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLvlZIqNE6H0
Qs6Ncwms96C28crhY/g9NCYklVSuEnlKBZ7y10IVMek0Ta4RqK+9QJvnT/aG6ZZb
wbEiIO2jLcVG4K+Ny4wxwPGpjO9HHcBMquHrePm1WOb9heEUv6AbHWYQ2eQY3Bfc
1u9Q/kIjqNY1O0Ho9JZpojn92m/ckUt316mJDMggse4jAYIeWxeXQOoI040j8I2+
SPk4a9a7draSOpSei6YQfnomP1e1UYgyNiUi3czb9Ia/N1XqxFbjXKe9/tqP3I5c
BBZDgUvBRa0b/BhmxjtpXRs3nPVKU+GPCNCPujmwvkMZ3WwXiFfdz81lLMDdBMv4
Sq4LIxLs/wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGyNOV5hqlVRuf6Jzplb1Ig3
yQuBMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzEzNzMyMmUzMTMwMzkyZTMwMmUzMDJmMzEzNjJkMzEzNjIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCsbTANBgkqhkiG9w0BAQsFAAOCAQEA
vI85iP2YHTTSKNfgA8Gb8JOS89A2V3rOmf4hIl3jlthmIa0O72A6EgF3J6dMAnJS
g4xziqVayE1s6jfP8wvF+Uu9RsqZUkljomCfekEV7Losg09Tf3v3Cf72zH85BLcD
WId5rDUQ43eO42hpyTan/UIpz7fJq5ocq2CtOWNOh6Cg35+5zkpmzzFJo3fnqxOF
pjyrUcmv7ROkmTRxABodcNa/3gycYUwYHu6DCIlZKEvilXTx/uC8pAejOYe2hWK9
bzZ0zkpgsKXyVlyfB4Q0KildC7Mkl8Jp2HAeS4EvR7WJCiru+RYZdqUcitsxJueW
yjlPekEoRn1VUQGsGScqAg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:07:03 2025 by rpki-client