Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203530323234.roa
File: 3134302e3233352e3132392e302f32342d3234203d3e203530323234.roa (raw, json)
Hash identifier: kSuv/9qXI6seocJMz7BpLEDqKmYVE7s1DL+d6CaZBFk=
Subject key identifier: 1A:01:29:DF:9C:F5:B1:1B:E3:4A:40:57:C3:49:A5:C9:82:6D:FE:6F
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 77E75E466CA1B88A8F9067FD2F803B2D1478AE85
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203530323234.roa
Signing time: Sat 08 Mar 2025 14:30:46 +0000
ROA not before: Sat 08 Mar 2025 14:25:46 +0000
ROA not after: Sat 07 Mar 2026 14:30:46 +0000
asID: 50224
IP address blocks: 140.235.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e7:5e:46:6c:a1:b8:8a:8f:90:67:fd:2f:80:3b:2d:14:78:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Mar 8 14:25:46 2025 GMT
Not After : Mar 7 14:30:46 2026 GMT
Subject: CN=1A0129DF9CF5B11BE34A4057C349A5C9826DFE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:71:f0:ab:1a:9a:08:9c:46:48:52:3e:6a:
44:e1:69:89:c3:b5:6d:04:f2:4c:a9:40:cf:83:34:
57:88:37:cf:bb:27:4f:81:38:88:c3:9b:ff:a6:fd:
69:07:8a:2e:0d:c0:99:4e:a2:7a:5b:da:e6:1c:15:
2a:23:86:4d:9f:ab:9f:f6:cb:eb:17:fe:0d:3b:a2:
7c:92:90:f0:28:5b:b2:fb:20:35:9d:c0:7f:2f:84:
92:8b:17:21:14:ff:79:b7:43:30:c8:af:93:d7:5d:
18:42:43:f2:57:50:92:22:78:6c:d7:d1:51:b7:dd:
c2:c1:be:35:92:2d:73:df:67:04:06:b9:88:c7:af:
06:d5:86:c7:76:ce:72:c7:cb:9d:b4:06:92:ef:af:
ad:78:9f:79:2d:66:44:9a:26:5a:2d:00:bd:4a:c0:
1b:73:55:69:ed:17:c1:16:cf:ff:b4:35:7b:1b:4e:
5b:33:57:8f:c0:37:39:d5:a0:c1:a6:8d:64:b4:12:
92:12:5d:a3:c2:73:55:fc:58:2a:06:30:39:c2:b9:
88:40:1f:54:6d:0e:d3:54:0b:4a:16:da:b2:9b:74:
39:f5:54:2a:4c:71:8a:bb:87:cf:f6:e6:53:93:bf:
3a:25:97:cb:2d:2f:fc:bf:62:e9:1e:05:48:1e:77:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:29:DF:9C:F5:B1:1B:E3:4A:40:57:C3:49:A5:C9:82:6D:FE:6F
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.129.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e6:00:7d:15:50:51:0b:43:be:2f:a3:fc:a5:50:f6:5a:c3:
8e:5d:72:7e:c8:b1:79:62:48:3c:02:83:c4:c9:85:ee:87:50:
d1:2c:f2:3c:dc:c4:8c:e5:bb:25:84:0c:c5:24:76:32:40:e7:
6e:3b:44:a6:2b:11:a9:af:5b:e7:31:dd:9e:b7:73:20:8e:9f:
14:8b:1f:5e:a8:14:88:e1:d4:34:2f:4f:5f:53:ac:7f:bb:31:
20:f4:93:65:ca:e7:92:0b:7b:11:83:da:0a:5c:db:3c:a9:db:
ba:97:37:97:c6:7d:0e:02:8d:88:5b:d2:f3:de:d6:89:f3:3d:
30:54:75:1e:89:0a:c6:c8:c4:2b:76:6d:d3:27:b1:88:4b:b3:
ba:4d:90:b5:2b:1f:c2:4c:ae:e1:41:f1:40:d0:6e:93:aa:b0:
c9:87:f1:8e:e4:98:34:c6:5d:2b:8d:85:56:de:ab:fe:2d:01:
c0:ac:8e:22:8c:c4:db:79:f8:72:b1:28:ac:d0:07:af:fa:5c:
e9:d7:5d:51:35:51:51:68:f3:dd:71:31:1a:57:ff:61:37:8e:
b6:df:0c:8e:56:d7:a9:14:10:42:f3:44:c7:a7:80:01:93:b0:
c6:e3:da:13:78:c6:78:77:67:cd:16:5b:5b:b1:f9:34:23:8f:
fc:89:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:17 2025 by rpki-client