Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139342e302e302f31362d3136203d3e2035363530.roa
File: 34372e3139342e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier: 8Isaf/8TAqiyHnC4fxvlmwFo0ReuoiPNhgjsTb+kO/0=
Subject key identifier: 97:DE:4F:D0:A8:EE:5E:80:E5:6D:7D:C7:E7:3E:61:BA:FF:BF:A1:20
Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial: 72713F66E8EAA764A57CCE06073B0BD479650EF1
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139342e302e302f31362d3136203d3e2035363530.roa
Signing time: Tue 25 Feb 2025 05:08:51 +0000
ROA not before: Tue 25 Feb 2025 05:03:51 +0000
ROA not after: Tue 24 Feb 2026 05:08:51 +0000
asID: 5650
IP address blocks: 47.194.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:71:3f:66:e8:ea:a7:64:a5:7c:ce:06:07:3b:0b:d4:79:65:0e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Validity
Not Before: Feb 25 05:03:51 2025 GMT
Not After : Feb 24 05:08:51 2026 GMT
Subject: CN=97DE4FD0A8EE5E80E56D7DC7E73E61BAFFBFA120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:4b:c2:29:ee:25:1c:67:13:ae:cc:16:95:
e3:52:ea:bc:a4:2e:20:7d:a3:e4:e0:26:03:5a:c6:
d9:61:61:83:ce:a0:46:58:94:ad:da:cc:2a:02:f6:
b1:bf:fc:65:84:64:0e:26:12:40:29:f0:96:4e:82:
e2:b0:57:d8:3f:de:d2:d5:64:04:b3:8f:6e:43:6a:
40:ed:f9:0b:9e:3d:24:9c:cf:05:b8:44:b6:f5:65:
10:46:ed:c7:68:b2:64:7c:0b:6c:67:b8:ea:1b:80:
80:50:e3:b0:28:6d:85:5e:5c:f3:5b:26:27:fc:4e:
ff:31:62:60:ae:b0:e1:95:bf:e5:46:28:f4:eb:33:
ee:01:74:67:96:f5:6f:1e:0e:96:e2:8f:93:8a:f3:
b5:87:ae:cf:05:61:49:87:7b:4d:9f:0d:a6:15:bf:
d1:a7:bd:a6:b9:5b:8b:7d:e9:ca:89:cd:0d:e9:4f:
c6:15:5d:96:8f:33:ce:02:33:db:94:03:0b:fd:5a:
e9:4d:c3:bd:82:01:de:fa:e0:10:73:c3:bb:03:bf:
93:f1:f0:23:4f:46:ac:0d:6b:5e:78:dc:69:0c:d4:
57:24:50:61:f1:34:53:4a:73:c9:d5:b6:67:be:68:
2e:df:81:e9:c4:55:66:ab:1a:dc:c4:f5:53:d2:cb:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:4F:D0:A8:EE:5E:80:E5:6D:7D:C7:E7:3E:61:BA:FF:BF:A1:20
X509v3 Authority Key Identifier:
keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139342e302e302f31362d3136203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:3a:20:de:9f:1d:23:ba:e3:a7:0b:52:0a:f5:ec:59:8f:d5:
56:e9:1a:29:99:bc:9c:bf:75:1b:12:79:5b:01:d7:eb:ce:14:
dd:19:86:27:a3:8a:39:c8:82:7e:3f:71:80:7f:ec:ca:77:d1:
db:72:3b:49:17:34:f3:f1:ea:24:f4:ca:e4:e3:b4:6e:41:e6:
91:b9:58:5f:64:82:03:62:89:8b:3b:48:e2:1c:4e:29:8b:39:
9c:e0:27:af:34:a1:46:5e:39:10:9d:97:f2:17:1f:f7:69:b1:
86:1e:8b:b2:20:15:bf:62:61:5c:de:08:10:5c:51:ae:00:b3:
6c:96:f1:cc:d8:af:5b:bd:19:1b:db:f0:fa:31:72:f0:ac:b2:
95:13:9d:1b:a4:fd:91:28:b0:00:69:75:8c:a9:9d:49:d0:7c:
a6:9f:00:c5:71:fc:54:6a:db:97:1b:2a:c6:49:fa:68:50:23:
c1:39:56:a7:ab:98:a9:40:4f:ac:f4:c2:1a:f6:ce:5b:f6:7c:
00:a1:01:9f:ef:3c:88:8c:e1:d0:de:aa:03:af:26:db:cc:e7:
80:43:e4:d8:6b:16:d2:ba:e4:4b:f5:ef:de:2d:fe:5e:0c:60:
8b:93:ac:db:46:e2:c6:c2:97:17:f6:90:8f:6c:7d:3e:1b:49:
59:8b:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:15 2025 by rpki-client