Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203231383539.roa
File: 3139392e39312e3130312e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: moieBRPaLFyvcrUOtuz2mT+02RYmoEi7mvfSaFmPY5E=
Subject key identifier: C0:B1:59:CA:D9:53:33:2B:4A:F2:9C:63:56:03:80:25:3D:EA:43:1A
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 78F2FB26B0EEEB87C098E303C631E530E9E8DFEE
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203231383539.roa
Signing time: Wed 26 Jun 2024 06:53:12 +0000
ROA not before: Wed 26 Jun 2024 06:48:12 +0000
ROA not after: Wed 25 Jun 2025 06:53:12 +0000
asID: 21859
IP address blocks: 199.91.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f2:fb:26:b0:ee:eb:87:c0:98:e3:03:c6:31:e5:30:e9:e8:df:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Jun 26 06:48:12 2024 GMT
Not After : Jun 25 06:53:12 2025 GMT
Subject: CN=C0B159CAD953332B4AF29C63560380253DEA431A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:b8:2d:43:d4:b1:af:dc:52:10:00:bd:f5:
ba:de:ae:e9:c7:64:19:7b:22:db:07:4f:92:c9:d3:
32:d5:e2:09:3d:4b:9d:f8:d9:71:2d:dd:6e:fd:98:
97:1b:e2:ff:3e:eb:12:7e:db:cd:30:ae:2a:86:81:
ce:8b:00:fd:7b:0a:0d:6e:b3:94:b1:c7:a1:69:ad:
b4:60:92:1e:cd:fd:f2:e2:bb:8e:a8:ed:76:d9:33:
65:8b:b9:5f:26:d3:1c:35:0f:dc:8a:0f:dd:4f:59:
33:66:8b:a8:64:44:95:82:40:1c:82:46:68:a9:b4:
78:b9:9a:a0:25:6d:6d:c4:8f:52:5e:1b:59:4c:08:
eb:5b:b3:a4:5e:06:5a:3c:36:7d:9d:54:94:07:e1:
1e:c4:97:e2:fb:af:61:89:84:4a:a8:20:3f:0a:bd:
20:e6:05:2b:12:8e:c7:5d:50:5c:71:5c:74:dc:52:
2a:57:94:6f:a9:5e:89:64:60:ba:ab:45:96:86:e6:
a2:09:38:6a:4a:6b:03:6d:8e:e9:2f:cb:4c:52:15:
ea:55:b9:35:4f:bd:6b:8f:0d:7f:cf:5d:93:ef:4e:
69:34:e4:42:96:39:34:6b:f6:f2:40:12:26:88:12:
3f:34:67:97:b6:c5:f0:9a:69:a2:92:b8:ef:e3:fc:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:59:CA:D9:53:33:2B:4A:F2:9C:63:56:03:80:25:3D:EA:43:1A
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.101.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e4:df:62:3a:33:17:b6:bf:04:bc:89:12:52:0d:9e:56:32:
37:72:0f:79:83:57:3b:f1:08:00:52:88:66:76:33:47:96:e6:
69:a9:36:53:89:76:d0:fe:77:ac:ae:6b:d5:98:e5:bf:03:db:
7b:07:d7:fb:d6:78:75:fa:e3:e3:e2:9d:05:5c:63:bd:07:0b:
a6:ee:b8:bd:f0:03:4c:af:c8:d1:ca:40:7c:9f:db:7b:48:12:
5d:38:87:9b:a0:37:f7:bd:14:07:ed:29:3d:19:aa:47:03:46:
d1:d5:a3:1d:b8:3f:9b:28:01:c3:75:f4:ad:cc:60:e3:c5:39:
b4:bd:7f:5a:42:77:65:ba:97:8c:f2:e4:ea:85:f7:30:ce:2f:
fd:df:10:3b:9e:b5:0b:10:40:db:b5:4f:1d:8b:dd:1f:50:19:
87:d0:21:c6:c6:28:10:71:37:49:0a:aa:4f:03:77:30:30:a1:
c4:61:a5:f4:8a:28:e7:47:cf:b4:c7:27:89:eb:d2:6d:2f:cc:
74:4e:59:06:b8:e2:5d:3c:c9:57:78:3e:49:e0:4f:b4:e0:02:
76:37:6e:8e:91:87:eb:24:e1:1e:66:09:ce:ca:e1:af:bf:2f:
e0:e9:f1:73:25:8b:7d:52:51:35:1f:a1:cf:08:99:0a:1a:ef:
3e:22:de:22
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUePL7JrDu64fAmOMDxjHlMOno3+4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjQwNjI2MDY0ODEyWhcNMjUwNjI1MDY1MzEy
WjAzMTEwLwYDVQQDEyhDMEIxNTlDQUQ5NTMzMzJCNEFGMjlDNjM1NjAzODAyNTNE
RUE0MzFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXm4LUPUsa/c
UhAAvfW63q7px2QZeyLbB0+SydMy1eIJPUud+NlxLd1u/ZiXG+L/PusSftvNMK4q
hoHOiwD9ewoNbrOUscehaa20YJIezf3y4ruOqO122TNli7lfJtMcNQ/cig/dT1kz
ZouoZESVgkAcgkZoqbR4uZqgJW1txI9SXhtZTAjrW7OkXgZaPDZ9nVSUB+EexJfi
+69hiYRKqCA/Cr0g5gUrEo7HXVBccVx03FIqV5RvqV6JZGC6q0WWhuaiCThqSmsD
bY7pL8tMUhXqVbk1T71rjw1/z12T705pNORCljk0a/byQBImiBI/NGeXtsXwmmmi
krjv4/zCIwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMCxWcrZUzMrSvKcY1YDgCU9
6kMaMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdbZTANBgkqhkiG9w0BAQsF
AAOCAQEAlOTfYjozF7a/BLyJElINnlYyN3IPeYNXO/EIAFKIZnYzR5bmaak2U4l2
0P53rK5r1ZjlvwPbewfX+9Z4dfrj4+KdBVxjvQcLpu64vfADTK/I0cpAfJ/be0gS
XTiHm6A3970UB+0pPRmqRwNG0dWjHbg/mygBw3X0rcxg48U5tL1/WkJ3ZbqXjPLk
6oX3MM4v/d8QO561CxBA27VPHYvdH1AZh9AhxsYoEHE3SQqqTwN3MDChxGGl9Ioo
50fPtMcnievSbS/MdE5ZBrjiXTzJV3g+SeBPtOACdjdujpGH6yThHmYJzsrhr78v
4OnxcyWLfVJRNR+hzwiZChrvPiLeIg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:35:41 2025 by rpki-client