Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20333936393832.roa
File: 3139392e39312e3130302e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: c3mVgT1YsQ50WArjAO1wPTWCuh3el6hgCRan92Komkc=
Subject key identifier: 14:80:B7:77:18:E2:82:55:54:D2:A6:68:AE:B9:E9:FC:2C:87:3C:BC
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 6ACD5123AB78ADD58D3E0FDE92464FE61CA2E8CE
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20333936393832.roa
Signing time: Tue 04 Mar 2025 15:39:57 +0000
ROA not before: Tue 04 Mar 2025 15:34:57 +0000
ROA not after: Tue 03 Mar 2026 15:39:57 +0000
asID: 396982
IP address blocks: 199.91.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cd:51:23:ab:78:ad:d5:8d:3e:0f:de:92:46:4f:e6:1c:a2:e8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Mar 4 15:34:57 2025 GMT
Not After : Mar 3 15:39:57 2026 GMT
Subject: CN=1480B77718E2825554D2A668AEB9E9FC2C873CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:9a:0f:c0:24:31:55:46:a8:2a:d8:98:90:
84:0c:f3:fc:e4:18:2e:e2:ab:09:d8:16:33:68:15:
c4:99:3c:33:7d:e1:1b:c7:02:b2:bb:0a:83:a7:44:
1a:99:70:44:41:0f:c1:d9:bc:af:22:78:28:cb:0f:
2d:ef:1f:d0:8d:d6:01:eb:7c:bc:0f:89:40:3d:dc:
22:ac:eb:c0:5a:ec:74:b9:99:7d:b2:82:d3:01:0c:
d8:bb:e6:a9:c3:dc:39:d0:e2:b5:27:6e:e9:15:bf:
4e:56:d7:ab:07:9d:1e:6d:e7:e9:d9:be:47:d7:6c:
40:aa:ba:4c:6d:b0:53:83:3b:64:b8:b0:35:5b:86:
60:14:bd:46:a1:85:aa:9e:69:51:fe:3f:af:99:d4:
f4:95:c0:ba:4d:49:4d:57:27:6d:1b:7a:d7:22:2f:
8e:fa:2f:4b:86:26:dc:52:53:48:5b:b2:f6:92:8d:
a6:6a:18:cc:83:73:03:2a:f6:69:98:e9:69:c0:ac:
8a:b5:7e:f7:74:99:f3:86:51:1e:a2:65:bd:9e:56:
b4:29:54:31:9b:bc:cc:8e:6b:a1:12:51:02:63:6e:
23:74:1a:cb:70:11:f1:14:2a:c1:d6:77:e5:af:08:
9f:63:bf:98:1b:7e:53:d0:e2:53:c9:7e:80:0e:7e:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:B7:77:18:E2:82:55:54:D2:A6:68:AE:B9:E9:FC:2C:87:3C:BC
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.100.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8c:c9:73:85:99:da:5c:55:18:37:eb:1b:ba:38:6e:0e:eb:
bc:42:41:67:91:c8:73:27:76:c6:a5:7d:1d:b0:d5:ae:83:39:
ad:06:20:a1:e5:50:52:a6:48:c7:ee:d4:ef:da:c8:e0:06:c1:
cd:24:6d:3b:01:50:d1:01:47:c4:3e:9c:d3:ad:27:0f:e5:e3:
a2:d5:ce:30:d6:6f:de:8d:66:17:c7:7e:4d:38:6d:f7:a5:da:
20:9e:50:3a:4c:78:5d:71:07:c7:9f:17:8d:03:5a:a5:0a:f9:
6a:ee:33:05:ee:7e:2d:8b:5e:f5:bf:5b:a9:da:ea:5f:d2:72:
87:89:6a:96:fc:3c:4b:43:ac:2b:2f:46:24:12:09:f7:15:a0:
03:39:c3:af:b3:ed:ad:ba:60:0c:4f:27:80:f1:ca:08:74:fb:
e7:6a:a8:ee:f6:94:19:6c:15:86:5e:26:ed:cb:4a:20:c5:a9:
ff:4d:cb:46:45:3a:73:74:6c:3d:72:c6:f9:5d:7c:f8:93:e6:
01:bb:f2:ff:f0:b8:7b:da:4a:9c:ff:78:77:72:a7:48:aa:b2:
00:52:2c:e6:11:40:d5:d6:32:a5:11:4b:13:4a:83:fe:44:1d:
20:17:67:9b:62:03:5e:f8:03:55:5c:52:11:5d:ae:fe:07:7e:
d0:ad:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:25 2025 by rpki-client