Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa
File: 3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa (raw, json)
Hash identifier: MPgn4bBZb8sT/2fmVwleiWAwUY3PK0LOvOvvlinfxWI=
Subject key identifier: 1E:78:E3:45:E4:DF:A6:0A:85:10:54:24:3A:C8:4C:41:4F:5F:31:C2
Certificate issuer: /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial: 09D744B534CD86ADEDE4D33E91DE309490E3152A
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa
Signing time: Tue 14 Jan 2025 06:55:11 +0000
ROA not before: Tue 14 Jan 2025 06:50:11 +0000
ROA not after: Tue 13 Jan 2026 06:55:11 +0000
asID: 46690
IP address blocks: 107.191.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d7:44:b5:34:cd:86:ad:ed:e4:d3:3e:91:de:30:94:90:e3:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Validity
Not Before: Jan 14 06:50:11 2025 GMT
Not After : Jan 13 06:55:11 2026 GMT
Subject: CN=1E78E345E4DFA60A851054243AC84C414F5F31C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:0d:08:f6:11:68:8d:5c:2a:7f:45:7b:51:
f4:f2:03:0e:ee:a6:d8:99:8d:6d:86:db:b9:d6:e9:
90:be:8c:52:36:f6:ca:5e:2d:c5:4d:5b:a9:01:ba:
f0:06:aa:34:eb:9c:10:30:1d:cc:57:ea:46:c5:85:
f5:b0:1b:c6:89:a6:9a:f5:84:5f:76:ec:bb:50:86:
04:47:5a:9c:60:c0:df:a2:80:4a:0d:26:82:d1:71:
6c:ad:78:cd:d4:66:d1:99:ef:c9:04:e8:3a:23:3e:
f0:6b:ed:72:6f:c0:d2:6a:cc:65:4d:d9:83:bd:a0:
86:7c:17:a7:6b:3b:90:54:a7:5c:ba:e6:aa:77:e2:
44:83:69:47:b5:0c:db:2f:a7:6a:88:b8:08:3b:70:
83:71:b2:a2:90:67:40:75:5d:70:ee:d4:67:2f:a4:
46:50:fb:1b:23:10:a7:48:f7:cd:92:f9:3f:d5:09:
14:c5:82:bc:5f:2f:cf:f3:c5:fd:73:d7:e1:fc:dc:
19:c9:8a:a4:83:62:fa:74:2f:6d:e2:5b:d1:ce:0a:
06:e6:ba:04:df:e3:f0:4a:50:38:a0:14:61:de:b1:
fa:e4:0a:96:c3:16:c6:44:9d:b6:38:77:1e:bb:49:
11:9e:3c:c6:47:1d:29:8e:fe:11:3d:fe:21:b3:2a:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:E3:45:E4:DF:A6:0A:85:10:54:24:3A:C8:4C:41:4F:5F:31:C2
X509v3 Authority Key Identifier:
keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.191.136.0/23
Signature Algorithm: sha256WithRSAEncryption
90:d8:5c:79:ba:29:62:b2:c3:ff:e9:d7:f1:f3:35:63:0c:64:
ea:30:12:a2:40:fa:9d:34:00:8b:25:06:fc:aa:f1:7e:44:42:
4a:00:54:26:96:3f:49:e6:35:06:f2:8f:d2:42:8d:96:16:8f:
1b:fb:0b:91:b4:9f:7f:48:2b:2a:e4:08:89:6e:a3:62:2b:92:
2d:65:e9:c7:b0:3b:53:0d:e1:62:8d:fc:36:2c:ba:2e:13:9d:
cf:71:9a:c3:66:bc:a3:a3:92:04:0a:4f:3a:da:91:41:dd:fc:
85:ea:f1:e8:ed:22:50:c8:d4:6f:84:98:ed:1e:b1:75:27:47:
c4:d5:f6:11:6f:56:23:39:0c:ec:3d:41:6b:51:56:b9:af:8a:
7c:bf:15:15:c6:4d:d3:a0:2c:e7:bb:b1:26:cc:94:4f:a0:cd:
c6:22:de:4f:f3:0c:f1:9c:97:eb:b2:67:d6:26:f5:8b:be:79:
3f:9d:4d:07:31:8f:c4:59:b7:d3:b2:44:55:9c:88:d0:f7:5f:
33:6a:17:cd:fa:34:95:d0:31:9b:62:ea:76:03:be:13:cf:b6:
8a:3d:7b:19:54:fd:35:c6:ec:dd:5a:98:6e:d8:cd:1b:be:12:
b1:c1:8d:57:6c:88:f5:7e:49:8b:da:4b:aa:5b:aa:c0:f4:39:
c0:f0:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:43 2025 by rpki-client