Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
File: 3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa (raw, json)
Hash identifier: GMQ56Og20xEjHEoiWwPqdfn6udDIfnL1COvTWiB8/6s=
Subject key identifier: A7:52:01:5E:9E:39:BA:5F:08:77:64:2B:2D:6C:44:46:78:89:81:FD
Certificate issuer: /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial: 3572572A6AA5F1B0D687A2FBAAFC39F0968607A7
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
Signing time: Wed 12 Jun 2024 13:43:55 +0000
ROA not before: Wed 12 Jun 2024 13:38:55 +0000
ROA not after: Wed 11 Jun 2025 13:43:55 +0000
asID: 26127
IP address blocks: 107.191.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:72:57:2a:6a:a5:f1:b0:d6:87:a2:fb:aa:fc:39:f0:96:86:07:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Validity
Not Before: Jun 12 13:38:55 2024 GMT
Not After : Jun 11 13:43:55 2025 GMT
Subject: CN=A752015E9E39BA5F0877642B2D6C4446788981FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:eb:70:5f:56:c6:b2:0d:5c:08:70:4b:cd:
c3:cb:91:f6:00:32:45:47:7a:61:0e:90:60:8f:bf:
20:3e:68:36:0b:f3:d1:e3:df:63:61:1e:5d:52:14:
97:d4:fd:ab:85:75:56:3a:d2:4f:06:d1:64:5d:3d:
5a:17:3a:2f:4a:14:b9:90:98:12:94:76:92:d4:14:
1a:94:2e:cd:c0:1d:43:48:75:17:12:72:99:f7:26:
a1:42:bb:d6:fc:39:71:99:60:27:60:5c:30:bc:0d:
fd:f2:c1:76:8d:b2:4f:d5:e1:75:8b:b4:04:07:f7:
80:ee:61:3f:62:1c:b9:96:96:c2:68:e5:3a:9d:59:
5e:db:10:a6:1d:1e:5c:48:59:5e:90:7d:31:70:4d:
9f:74:b2:b3:01:14:db:89:48:6c:65:8c:f1:ae:c7:
89:44:45:e4:7c:35:d1:91:bb:bf:a2:3e:c6:7f:9c:
5a:98:83:48:23:3c:ec:3e:1a:e6:24:8e:76:70:b1:
9d:12:e0:8b:f4:9f:61:4a:9f:09:ba:30:79:bb:cc:
f6:5e:f7:28:e0:08:16:9c:81:4c:56:08:68:5c:65:
e4:df:04:50:f9:42:07:62:2f:11:06:10:56:85:d9:
93:ce:a4:14:85:26:62:58:cc:b8:7e:7e:4c:93:c7:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:01:5E:9E:39:BA:5F:08:77:64:2B:2D:6C:44:46:78:89:81:FD
X509v3 Authority Key Identifier:
keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
64:65:7b:66:54:71:b6:5d:9f:0b:1c:6d:72:6c:37:9e:b9:c5:
a6:53:7e:1e:c5:e1:84:7b:c6:4d:77:31:10:b6:88:31:b3:9f:
2c:18:c6:e6:3a:c8:c4:91:4d:da:c0:b0:95:f5:3c:2b:86:6d:
7b:dc:f0:12:e0:73:10:71:8b:0c:35:7d:c3:7c:55:0c:8a:cb:
2a:a3:52:05:a7:e4:c7:e1:79:c7:12:7e:53:12:f1:5b:4d:c0:
89:65:81:93:3f:2f:bb:0a:96:e8:88:78:f4:73:3d:f5:90:ed:
45:08:2a:30:d3:a6:77:0a:ad:d3:2e:7f:c8:12:fc:eb:57:9b:
e1:7e:3f:59:43:ae:c3:7d:15:93:09:95:90:62:68:1e:5c:4a:
a3:a5:33:f5:31:9c:f6:69:99:16:8c:fb:f8:f5:dc:6c:11:13:
1d:07:d6:b6:dc:44:f8:15:e2:2a:c0:49:9c:4a:2c:3b:1a:d9:
b6:d7:a0:e8:17:7f:84:0f:36:47:5e:7e:77:9a:4d:1f:b8:d6:
8c:ee:a5:72:e8:d6:c0:dc:aa:31:02:27:2a:f5:ac:86:7d:be:
12:f5:06:7f:32:73:d6:25:be:ba:ee:88:6b:64:91:75:c5:53:
9a:45:d9:8d:68:1c:68:9c:ed:c3:81:e7:ae:ea:f8:50:54:f6:
f1:60:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:21 2025 by rpki-client