Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203630383431.roa
File: 3134302e3233352e3132392e302f32342d3234203d3e203630383431.roa (raw, json)
Hash identifier: BqWU/eH1qZNZCmw961cLbhorqnyRnr7xexaa1yZW7os=
Subject key identifier: DB:F7:F8:2C:51:D1:0E:7B:9D:13:8D:1E:A3:E8:35:0E:20:22:64:3E
Certificate issuer: /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial: 24D08E2C777A8385A344198B03F6184A002BEB69
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203630383431.roa
Signing time: Sat 08 Mar 2025 14:29:57 +0000
ROA not before: Sat 08 Mar 2025 14:24:57 +0000
ROA not after: Sat 07 Mar 2026 14:29:57 +0000
asID: 60841
IP address blocks: 140.235.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d0:8e:2c:77:7a:83:85:a3:44:19:8b:03:f6:18:4a:00:2b:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Validity
Not Before: Mar 8 14:24:57 2025 GMT
Not After : Mar 7 14:29:57 2026 GMT
Subject: CN=DBF7F82C51D10E7B9D138D1EA3E8350E2022643E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:e2:1e:51:e3:ff:11:1c:d4:b1:08:c7:d1:
11:3f:fe:f2:f3:3c:30:ac:48:52:b5:9e:28:9d:e1:
5d:0d:85:52:a8:47:2a:2a:74:11:da:ba:1f:0f:4e:
f8:51:6f:ab:f4:bd:6c:24:a1:40:7e:41:8b:61:84:
36:27:a8:7b:a9:dd:76:c5:1d:1e:c9:80:7e:88:b4:
c8:a0:aa:1c:b2:5a:77:8a:a1:ae:54:03:84:50:a1:
f4:d7:80:24:69:b6:4e:10:d5:48:b0:32:60:31:a7:
e9:e8:7a:f1:d5:b7:e4:cc:78:b1:48:55:df:b2:90:
0f:a6:2e:7e:37:16:a6:f7:67:d5:14:89:86:52:72:
4b:89:92:dc:06:38:11:fe:31:59:de:90:ba:06:52:
db:ed:a1:4a:b4:d7:95:5e:ea:9c:fb:27:4f:dc:d5:
a2:60:f8:28:df:49:45:30:90:34:c7:f0:cd:bb:07:
2a:e2:ed:42:3f:b9:f5:f7:0c:e4:5f:5d:95:99:84:
5d:cd:fd:95:e6:1a:12:cc:8d:05:64:85:65:2b:f6:
43:0c:ca:e1:dc:db:06:b9:79:c9:20:10:a1:1e:e2:
bc:bc:23:9d:9c:74:58:aa:06:53:7b:71:02:b8:78:
b0:1f:41:4f:c4:b3:fc:f4:a9:13:97:be:23:7b:b2:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:F8:2C:51:D1:0E:7B:9D:13:8D:1E:A3:E8:35:0E:20:22:64:3E
X509v3 Authority Key Identifier:
keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203630383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a8:8e:ef:a0:8d:8f:52:b3:47:1a:2b:8f:45:76:82:da:ae:
57:96:38:0c:ad:35:fa:fc:13:00:e6:e1:1a:f1:d9:a5:cf:50:
58:1d:17:8f:3e:3f:2e:ad:c1:b5:92:44:59:cf:f1:34:72:68:
55:05:45:03:95:07:9e:c2:f3:93:85:cb:b4:23:3b:72:fd:eb:
5d:2c:75:7e:5b:29:8b:27:70:a8:aa:40:d3:79:82:1d:95:77:
bf:66:36:18:22:7b:d9:b1:01:42:6d:63:dc:f7:fc:59:d8:6c:
42:5a:a2:14:52:17:0e:09:5e:5a:2d:d5:d8:51:e7:6f:37:1e:
a6:11:d8:60:ec:0d:82:ef:4c:69:32:f0:f8:50:8d:83:68:9a:
fd:a6:b0:ee:b8:6c:dc:25:dc:ab:5d:40:dd:bd:c8:b5:8b:d9:
0c:89:53:21:55:78:02:66:e6:7a:9f:86:13:62:e9:43:41:60:
66:79:21:bb:91:fc:51:0c:93:1d:82:f2:5b:02:1a:4a:0b:f5:
10:40:b0:25:9a:ae:fb:89:7a:92:32:b2:43:8d:89:b6:69:94:
d7:3c:34:36:bf:4f:f0:a8:98:7e:3e:78:d5:b4:c4:ce:fd:74:
43:9b:d7:a5:7b:74:36:15:83:4e:e4:a4:38:c6:d1:d3:b1:43:
cc:26:80:eb
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUJNCOLHd6g4WjRBmLA/YYSgAr62kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjUwMzA4MTQyNDU3WhcNMjYwMzA3MTQyOTU3
WjAzMTEwLwYDVQQDEyhEQkY3RjgyQzUxRDEwRTdCOUQxMzhEMUVBM0U4MzUwRTIw
MjI2NDNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/iHlHj/xEc
1LEIx9ERP/7y8zwwrEhStZ4oneFdDYVSqEcqKnQR2rofD074UW+r9L1sJKFAfkGL
YYQ2J6h7qd12xR0eyYB+iLTIoKocslp3iqGuVAOEUKH014AkabZOENVIsDJgMafp
6Hrx1bfkzHixSFXfspAPpi5+Nxam92fVFImGUnJLiZLcBjgR/jFZ3pC6BlLb7aFK
tNeVXuqc+ydP3NWiYPgo30lFMJA0x/DNuwcq4u1CP7n19wzkX12VmYRdzf2V5hoS
zI0FZIVlK/ZDDMrh3NsGuXnJIBChHuK8vCOdnHRYqgZTe3ECuHiwH0FPxLP89KkT
l74je7KrIwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNv3+CxR0Q57nRONHqPoNQ4g
ImQ+MB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMxMzQzMDJlMzIzMzM1MmUzMTMyMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMwMzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuBMA0GCSqGSIb3DQEB
CwUAA4IBAQBsqI7voI2PUrNHGiuPRXaC2q5XljgMrTX6/BMA5uEa8dmlz1BYHReP
Pj8urcG1kkRZz/E0cmhVBUUDlQeewvOThcu0Izty/etdLHV+WymLJ3CoqkDTeYId
lXe/ZjYYInvZsQFCbWPc9/xZ2GxCWqIUUhcOCV5aLdXYUedvNx6mEdhg7A2C70xp
MvD4UI2DaJr9prDuuGzcJdyrXUDdvci1i9kMiVMhVXgCZuZ6n4YTYulDQWBmeSG7
kfxRDJMdgvJbAhpKC/UQQLAlmq77iXqSMrJDjYm2aZTXPDQ2v0/wqJh+PnjVtMTO
/XRDm9ele3Q2FYNO5KQ4xtHTsUPMJoDr
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:06 2025 by rpki-client