Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
File: 3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa (raw, json)
Hash identifier: LXEjdT/kSx3Qv4/J75ke2ho1IAL9+g6cTbz74yDomIg=
Subject key identifier: 83:78:B9:F5:E4:F5:5E:1B:11:E3:94:39:E5:D6:6F:89:35:A3:3C:4F
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 4107FF410772873FA13DE6401106DE36ABD46D40
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
Signing time: Thu 03 Oct 2024 19:51:55 +0000
ROA not before: Thu 03 Oct 2024 19:46:55 +0000
ROA not after: Thu 02 Oct 2025 19:51:55 +0000
asID: 59678
IP address blocks: 140.235.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:07:ff:41:07:72:87:3f:a1:3d:e6:40:11:06:de:36:ab:d4:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Oct 3 19:46:55 2024 GMT
Not After : Oct 2 19:51:55 2025 GMT
Subject: CN=8378B9F5E4F55E1B11E39439E5D66F8935A33C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:ed:21:52:ac:c0:83:be:ab:dd:62:8c:72:
b0:21:da:7d:91:0d:3f:10:b3:2c:d2:f6:b9:0c:67:
dd:8b:3b:77:17:e0:0e:00:c0:d5:66:19:f9:72:a0:
9b:2e:69:42:60:d5:9c:31:69:3f:92:17:5c:d5:dd:
be:90:ce:3e:0a:37:3c:de:7d:8b:76:44:b0:23:3c:
a6:e6:a6:aa:fc:29:47:ad:7d:a5:17:77:6f:00:dc:
92:b6:55:3d:db:9e:da:fc:ab:27:6a:64:9c:d1:27:
cf:09:62:2c:16:bc:79:c7:64:5c:c6:3c:1b:c4:07:
70:f2:8f:11:65:8f:bd:d2:e8:a4:ff:62:8f:f9:10:
ce:26:e0:a2:13:b7:c0:f5:66:d6:80:2a:2b:a8:90:
6d:71:f7:dd:c1:b6:fb:51:19:03:ad:d8:af:79:aa:
b8:2f:fb:a7:01:9c:e6:d8:e3:88:e8:aa:48:d7:c7:
d1:d0:b6:0b:cc:4d:af:14:6c:5b:d3:d1:db:a3:e4:
c2:81:bb:b1:d3:82:8d:0c:3a:96:9c:4f:e9:b7:63:
03:89:57:ff:5d:81:9c:43:ce:75:ab:3d:b2:ae:b9:
77:de:ff:88:c8:5d:4a:20:e9:28:4c:67:12:cc:14:
8e:b4:06:8c:7d:8e:05:b1:a5:73:d7:e0:fc:27:96:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:B9:F5:E4:F5:5E:1B:11:E3:94:39:E5:D6:6F:89:35:A3:3C:4F
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:06:de:9e:78:e9:93:8f:f2:95:9a:4c:0e:65:92:b7:07:66:
ef:dc:3b:7e:55:08:aa:f5:50:68:4d:c8:de:99:d7:cf:92:2c:
fc:3d:00:f9:b7:83:04:43:cd:05:93:6c:1c:7a:1d:89:62:a0:
7a:f4:bc:cb:33:e9:eb:52:e5:cc:4d:da:97:fe:d3:fd:d7:fe:
10:87:0c:91:28:19:ec:70:b3:79:26:67:3c:0e:87:27:b1:9f:
8a:c7:79:dc:13:e4:02:85:de:dc:21:72:39:3f:f9:18:67:0e:
ef:f2:f0:1c:fa:5e:e9:8f:c2:c7:58:c1:6b:ea:fc:78:4f:4c:
c7:d3:4b:1a:aa:d2:21:eb:15:5a:4b:c0:6f:7c:8a:2e:99:c0:
bf:12:34:fa:34:7a:6d:02:d4:5a:3c:0f:72:31:de:6f:4b:9c:
77:74:5f:97:0c:4c:40:47:40:ea:25:fb:b1:71:fd:65:68:7a:
d9:6c:5c:65:e1:65:a1:d0:db:1e:0d:d2:35:0f:ba:50:ca:c3:
8d:00:a3:d3:8f:e6:cc:4d:1e:9d:64:66:5b:99:ff:94:77:f8:
84:78:e7:be:51:0e:32:64:e7:44:0b:b9:c0:f5:29:e7:45:91:
ab:5c:52:2f:db:eb:4d:64:df:7d:65:2a:a7:3b:28:a8:c7:ec:
04:70:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:02 2025 by rpki-client