Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
File: 34372e3139312e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier: W+Av/oTV4evi2qSfzbzH0ZDMp45RBwgEa46yt57QG9o=
Subject key identifier: E7:00:FF:F4:FE:81:D7:0F:C0:30:33:4C:D1:A7:5F:D2:0C:77:E7:11
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 661E83E7D1DC97589F6CE0E6B3D58B3178E0DF76
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
Signing time: Tue 25 Feb 2025 05:08:51 +0000
ROA not before: Tue 25 Feb 2025 05:03:51 +0000
ROA not after: Tue 24 Feb 2026 05:08:51 +0000
asID: 5650
IP address blocks: 47.191.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1e:83:e7:d1:dc:97:58:9f:6c:e0:e6:b3:d5:8b:31:78:e0:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Feb 25 05:03:51 2025 GMT
Not After : Feb 24 05:08:51 2026 GMT
Subject: CN=E700FFF4FE81D70FC030334CD1A75FD20C77E711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:7d:a1:7d:81:e6:64:a1:6a:f3:e8:7a:2d:
6f:62:7b:8c:ad:7f:d6:a2:a6:f2:2f:d9:ba:86:1f:
b4:7e:ea:db:e9:34:43:d2:27:60:ba:11:22:22:9f:
11:53:5c:9e:9d:a8:64:32:bb:8e:8c:d9:07:2e:9e:
6b:0b:5e:9d:a1:bb:70:69:b4:20:6d:36:00:12:b0:
dc:b0:4a:77:3a:8b:a9:c7:49:f2:b9:df:c8:6e:20:
b3:fa:9a:00:93:0e:47:5c:c3:3a:32:82:38:4e:e5:
06:89:12:9e:75:b5:22:37:21:c8:bc:97:87:cc:a3:
e8:d3:0b:0c:02:19:59:5c:1b:4a:8b:7e:23:c7:2e:
9b:63:b8:f0:0d:7b:9b:b5:ea:c9:d2:ee:fb:29:ae:
08:8a:82:be:1c:3a:9f:ee:85:c6:6c:c8:8d:45:bd:
8f:fb:b7:f0:f5:0e:b8:ca:ec:b2:83:a1:9c:ee:51:
fb:9f:b3:79:79:97:d2:24:21:c0:b4:4f:fe:e5:6b:
d2:6f:3d:27:79:b4:74:65:d0:a3:64:08:ba:e3:48:
db:d9:bd:f7:41:a3:0c:6b:67:bd:73:55:e8:5b:f7:
f8:0d:36:de:eb:de:90:93:97:2b:8a:34:88:02:1c:
2c:9c:b2:23:06:09:d9:1c:8e:69:8b:b6:3e:e1:3a:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:FF:F4:FE:81:D7:0F:C0:30:33:4C:D1:A7:5F:D2:0C:77:E7:11
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139312e302e302f31362d3136203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.191.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:9f:ff:fa:ed:61:fa:7c:f2:06:ee:14:99:93:a1:93:83:29:
97:99:00:18:be:7c:b5:31:4b:ea:b8:a2:9a:84:cd:7c:d2:bc:
a1:8c:4e:16:6f:7d:aa:8a:8b:9e:99:d3:9f:72:aa:2b:4a:94:
e0:5a:2b:57:01:6c:a5:ac:41:61:2d:c7:7a:48:7b:82:95:b2:
3a:4c:e5:b4:31:85:69:fb:44:f9:1b:db:8c:5e:4a:11:ae:85:
e4:3d:31:3f:0d:61:9f:e8:ea:b1:75:9d:40:9b:bd:bd:04:a4:
cf:33:ee:b1:16:e5:fb:2e:3e:c5:5f:c5:32:f5:53:50:9a:c5:
d9:bb:57:bf:ae:7c:12:6e:b0:ea:a2:53:d8:72:a7:46:97:f0:
04:41:73:43:ed:ef:a5:61:b3:26:7c:9e:9b:e9:44:4e:76:44:
ba:81:58:bc:00:a4:13:e0:73:bd:70:cd:76:64:1a:8c:60:e5:
6f:10:43:dc:b5:1e:41:17:d7:58:a5:bb:75:5b:bf:8c:67:3d:
98:e9:87:c8:5a:07:5b:b2:e7:64:00:d8:72:b6:3f:04:56:a8:
0b:b5:59:ba:15:e7:3f:b2:05:e0:81:62:8b:c8:89:e2:8e:ba:
9d:cf:e4:d4:5d:53:29:4a:2d:04:e4:5f:c1:a6:a3:14:bc:57:
5d:d8:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:20 2025 by rpki-client