Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203232343231.roa
File: 3139392e39312e3130302e302f32342d3234203d3e203232343231.roa (raw, json)
Hash identifier: rWOujTtUdEAWHIuJW1F2AI+2y2+0Wo9ZFhqzSHRt0IQ=
Subject key identifier: D9:2C:8A:22:FF:EB:00:A0:7B:8C:6B:67:DB:B9:A7:D0:F7:33:CC:50
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 1B4445C8C008E1CDA13672EE135EBDF71443703E
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203232343231.roa
Signing time: Mon 03 Mar 2025 23:25:09 +0000
ROA not before: Mon 03 Mar 2025 23:20:09 +0000
ROA not after: Mon 02 Mar 2026 23:25:09 +0000
asID: 22421
IP address blocks: 199.91.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:44:45:c8:c0:08:e1:cd:a1:36:72:ee:13:5e:bd:f7:14:43:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Mar 3 23:20:09 2025 GMT
Not After : Mar 2 23:25:09 2026 GMT
Subject: CN=D92C8A22FFEB00A07B8C6B67DBB9A7D0F733CC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:2e:99:67:d5:02:f0:76:e3:e7:10:5a:5b:
0f:1f:ea:8d:ac:06:30:da:39:1d:00:c1:51:8c:e4:
42:2d:b4:63:12:a9:09:b7:83:a6:9b:43:42:e7:df:
d9:8f:68:67:90:09:ee:91:52:5d:cc:df:02:0d:6a:
9e:62:42:b5:0b:58:1b:56:2a:2c:7f:1e:ad:61:64:
c7:d6:d5:8d:34:84:f5:a3:4b:c5:b9:63:e8:c9:b2:
b2:9e:a2:fc:90:1b:1a:0f:19:25:db:9a:64:a5:8f:
73:ac:29:48:3b:2f:6b:5d:26:60:d5:51:e4:93:77:
86:74:dc:7d:08:11:06:a3:4b:5b:5c:49:81:ba:10:
4f:3c:30:ab:b1:b3:16:6f:be:18:2e:46:02:54:19:
e7:f4:aa:ef:e2:88:ed:d5:ba:4a:71:af:6b:3b:55:
c5:51:fd:60:13:62:54:70:69:e7:df:28:ee:48:1d:
51:5c:5a:18:db:98:91:d2:0c:8c:bb:d6:7c:3a:83:
96:c2:65:c2:8e:46:83:32:80:cc:07:eb:f2:99:dd:
98:80:40:03:5c:3b:a9:ee:d8:30:58:a3:54:13:20:
df:9c:66:b0:4b:af:ef:1f:d6:cb:6a:08:74:51:d4:
33:96:dd:00:56:0a:97:ef:44:4c:94:8f:d6:79:d4:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:8A:22:FF:EB:00:A0:7B:8C:6B:67:DB:B9:A7:D0:F7:33:CC:50
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203232343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3a:9b:d4:b6:b2:df:19:88:1b:7b:92:d0:95:d6:e1:2b:43:
1e:fb:6b:7d:81:85:ad:27:dd:5e:a0:05:21:a6:56:f8:83:44:
7a:1b:67:0b:e5:c8:20:dc:df:c1:45:b3:4a:77:d2:7f:a3:d3:
25:d9:6e:f4:35:10:f8:3b:0f:5f:8a:c6:96:d2:56:db:ed:87:
17:38:0c:25:e2:9a:ac:c5:40:cb:96:a8:b0:b5:3b:60:1b:a4:
19:5b:01:79:d2:32:6e:c5:2a:61:db:e2:fe:fe:ef:5e:3b:7f:
e7:4c:c9:e8:6f:dc:ee:a9:42:d9:df:b0:20:fd:96:03:41:bd:
b4:c5:83:81:69:4a:56:f3:c9:51:f9:61:fb:8b:2c:b9:54:b7:
00:3f:be:e5:07:c6:0a:8f:a0:84:73:0f:61:16:21:dd:b2:58:
96:2e:96:fe:60:53:4a:4c:0e:42:a4:02:3f:14:28:ff:be:e3:
ad:38:69:5c:1a:75:ab:1a:48:0f:29:fc:20:c7:09:bf:f8:37:
1d:31:69:ba:63:7b:01:d2:99:aa:02:7b:d1:1d:75:ef:8b:11:
4d:0b:b7:8f:04:d7:d1:09:c8:d5:2e:50:26:75:0f:c8:52:85:
73:39:b7:f8:f0:87:1e:97:0a:a2:7a:95:ae:89:7f:80:9c:9a:
46:6d:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:24 2025 by rpki-client