Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e203439393831.roa
File: 3139392e39312e3130332e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: MNcAVg63uLWSjy8W6ArK0h3oKTv/jvLbT/g5gsBRuvM=
Subject key identifier: 5B:3D:27:F7:DF:7A:2F:BD:2D:E1:17:F5:01:A4:09:03:C1:EA:82:50
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 0DA781BEF437964B748876BDF2107CB801032F96
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e203439393831.roa
Signing time: Fri 27 Dec 2024 14:34:00 +0000
ROA not before: Fri 27 Dec 2024 14:29:00 +0000
ROA not after: Fri 26 Dec 2025 14:34:00 +0000
asID: 49981
IP address blocks: 199.91.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a7:81:be:f4:37:96:4b:74:88:76:bd:f2:10:7c:b8:01:03:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Dec 27 14:29:00 2024 GMT
Not After : Dec 26 14:34:00 2025 GMT
Subject: CN=5B3D27F7DF7A2FBD2DE117F501A40903C1EA8250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:9d:82:26:2d:56:54:41:73:c3:0e:2a:bb:
16:13:a6:39:67:13:fc:6a:17:8e:22:4d:b5:c5:01:
61:75:db:53:9d:57:11:ac:15:f9:42:7f:b5:e9:43:
79:13:4f:87:b7:e7:3a:65:7d:3e:76:0f:8c:d6:27:
e9:4d:08:e3:a1:e5:c1:0c:3e:ce:67:28:4a:95:6b:
9f:68:07:c8:d1:fb:a9:df:9f:72:71:42:ea:f4:82:
f1:78:23:23:24:a6:27:14:d1:33:30:4d:a7:74:f9:
5a:ff:e4:cf:f5:61:31:35:93:0f:2c:6f:08:c9:70:
6b:8b:13:fc:d7:c3:65:a8:f1:c7:8a:48:ff:4b:ac:
d1:95:fe:95:11:b5:75:9f:22:4a:cc:27:85:d9:ce:
54:53:b9:a6:8c:f3:bd:35:e1:f1:ee:96:1d:e6:bb:
ea:f9:27:8d:66:97:99:f4:49:0b:89:ff:ae:fb:8b:
e8:2c:c6:9a:01:cc:a4:8c:08:0d:0f:d3:2a:53:f8:
b4:10:6c:a7:39:67:07:a1:5d:4d:ab:c4:5b:6b:35:
57:d9:95:fb:ae:7f:aa:9d:4c:df:cb:b9:c7:b6:a5:
80:0f:58:a6:8b:a7:79:bf:46:c3:0a:dc:e1:32:d6:
03:bf:04:a0:07:94:a3:35:f6:08:f0:0a:cd:5d:56:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:27:F7:DF:7A:2F:BD:2D:E1:17:F5:01:A4:09:03:C1:EA:82:50
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.103.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e0:48:e8:87:9d:fe:b2:f9:9e:da:c9:ab:be:2c:8b:a7:23:
33:eb:45:b8:27:e5:4c:84:f3:c1:ce:f3:2e:0f:b9:8c:76:ba:
cf:69:e8:59:2c:c2:55:20:71:84:69:59:d6:c4:52:34:a4:41:
cf:af:0d:2d:c3:ad:15:74:63:25:af:1c:81:79:e6:32:ff:df:
de:dc:45:ff:54:fd:31:44:8f:45:cf:e3:d3:30:bf:6c:d9:58:
e1:b9:37:9b:42:b5:47:dc:ed:73:77:99:28:ae:dc:c7:51:8a:
b9:3e:ca:bf:1e:86:da:c3:59:90:27:47:a0:b9:1f:d4:c7:49:
02:19:43:74:71:1e:85:fe:ea:1b:79:9f:05:4b:af:3d:05:d3:
b9:c0:84:95:9a:6d:d4:9c:a2:91:a2:a9:bd:ce:4e:06:21:97:
ad:1a:51:16:de:5a:2f:96:04:94:e0:0b:e4:6e:d9:f3:f1:bb:
2a:44:ad:7c:91:25:78:9f:cc:4c:17:39:ee:2b:e9:9e:97:44:
26:4b:73:a0:40:16:bb:ae:6c:79:e9:cd:03:5b:0c:ee:e3:83:
3d:34:ab:02:6a:e6:eb:77:a8:7f:3c:93:b0:8e:e8:79:0a:e7:
60:b4:05:38:ec:1a:5f:79:46:c7:d3:a0:1f:32:78:98:28:60:
68:88:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:00 2025 by rpki-client