Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32342d3234203d3e203539363738.roa
File: 3134302e3233352e3132382e302f32342d3234203d3e203539363738.roa (raw, json)
Hash identifier: pKbaddLhHoXEAmTzEI/PdU2vVFCaCHvJN2oeV/JCEwk=
Subject key identifier: ED:07:90:8C:99:46:48:FF:9E:F3:FA:BE:D4:F5:46:36:B4:06:5A:B7
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 0F754780556D3CF448F84C427B87CE7A57DFA870
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32342d3234203d3e203539363738.roa
Signing time: Sat 08 Mar 2025 14:02:16 +0000
ROA not before: Sat 08 Mar 2025 13:57:16 +0000
ROA not after: Sat 07 Mar 2026 14:02:16 +0000
asID: 59678
IP address blocks: 140.235.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:75:47:80:55:6d:3c:f4:48:f8:4c:42:7b:87:ce:7a:57:df:a8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Mar 8 13:57:16 2025 GMT
Not After : Mar 7 14:02:16 2026 GMT
Subject: CN=ED07908C994648FF9EF3FABED4F54636B4065AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:2f:91:bd:33:14:e1:0f:74:f7:e0:dd:dc:
52:d3:09:f5:33:b7:69:8c:27:91:04:60:f8:0e:f9:
0f:69:71:88:9b:fb:99:ef:f3:78:65:99:ce:4c:fd:
d2:96:49:16:e2:01:c8:68:fa:97:6d:10:8b:f4:b1:
29:3f:13:7f:0d:b2:a4:0f:f2:2e:9e:0a:43:7b:bb:
61:8d:8c:30:65:b6:32:40:ff:21:a9:a4:9e:7a:d3:
cb:6d:a7:c4:61:f8:40:7b:ec:1f:b4:df:00:45:a9:
3e:c7:d5:9e:19:19:0a:70:3a:59:07:59:c7:b9:4b:
71:e8:ab:ee:c8:5d:7a:34:e6:5a:47:fd:aa:ee:f8:
80:42:ae:df:1b:84:4b:7a:38:8d:69:44:7f:53:0d:
16:8c:54:50:3a:08:64:54:ac:79:f1:39:db:b7:d4:
a8:da:84:3c:11:4a:e1:27:4f:cb:02:05:0c:7d:2d:
2a:8e:50:7b:66:50:95:55:2b:4f:c4:da:d7:55:6d:
e4:9e:9f:31:81:39:38:24:f8:b8:9e:ae:08:f4:78:
42:12:13:fc:7e:44:78:60:a6:c8:1e:20:e7:de:7e:
e1:d4:81:4b:f0:8a:84:d2:16:51:a2:bc:8f:70:08:
84:e1:64:e5:0e:5d:0e:77:ff:46:84:c3:0e:24:21:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:90:8C:99:46:48:FF:9E:F3:FA:BE:D4:F5:46:36:B4:06:5A:B7
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32342d3234203d3e203539363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.128.0/24
Signature Algorithm: sha256WithRSAEncryption
62:52:5d:c5:31:ad:7a:86:30:e9:65:4c:68:be:d6:c5:7f:0f:
f5:3a:11:a8:4b:99:1a:53:10:e9:ff:d1:f5:24:da:9e:03:99:
00:fd:15:59:aa:54:6d:98:95:bf:ef:57:6d:1b:04:87:f8:68:
ef:da:15:88:d6:bf:0f:ff:ab:ff:b3:25:42:e0:6a:1d:53:d0:
e6:c6:f0:b9:e8:5d:a4:d0:3b:a8:40:f4:7e:f5:eb:c6:92:96:
ce:73:7a:30:dc:1a:a9:01:5b:4e:e0:6d:83:46:d5:6a:52:6b:
e9:78:ed:77:45:ee:a4:da:86:da:cf:a9:5e:90:9b:f4:aa:5b:
a1:f4:f1:4f:44:03:57:71:5a:8a:11:e4:59:39:a0:6c:9a:b8:
c2:c4:20:27:0e:1a:13:9f:1b:5f:e1:25:df:84:1b:69:59:0e:
a4:39:e7:4d:58:47:52:a2:c2:84:77:bc:80:2e:db:c2:3c:f1:
66:91:22:7c:24:15:02:ea:b2:4f:63:56:2e:ff:1a:3a:d0:77:
69:35:cb:b4:80:bd:99:c1:75:ca:49:2a:51:8d:ad:aa:3b:ae:
b6:8f:fe:6a:21:e9:1d:ed:93:c3:fe:3f:c1:75:73:90:86:c3:
8f:74:38:34:8b:a0:6a:ce:88:dc:9a:d5:c0:8c:4c:77:16:b7:
3e:1d:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:55 2025 by rpki-client