Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20323035323230.roa
File: 3139392e36382e3231372e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier: PFUyOftu+pqmbPt2T8yGVT4N7MDmopLcbVrriLVLJoE=
Subject key identifier: 93:C4:5D:E9:2C:C4:A8:96:79:88:31:78:C3:A7:7F:86:E5:C2:68:80
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 285667F1330A3E0B315BBCE97F1D7EB38C034EE2
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20323035323230.roa
Signing time: Wed 08 Jan 2025 22:10:05 +0000
ROA not before: Wed 08 Jan 2025 22:05:05 +0000
ROA not after: Wed 07 Jan 2026 22:10:05 +0000
asID: 205220
IP address blocks: 199.68.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:56:67:f1:33:0a:3e:0b:31:5b:bc:e9:7f:1d:7e:b3:8c:03:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Jan 8 22:05:05 2025 GMT
Not After : Jan 7 22:10:05 2026 GMT
Subject: CN=93C45DE92CC4A89679883178C3A77F86E5C26880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:df:3f:30:8b:20:11:02:72:3b:b4:1d:c2:
01:e7:f1:b6:3a:d3:d1:ce:8c:0a:a6:e6:cc:59:bd:
74:4a:3e:dc:77:f9:9a:4f:cf:60:00:32:ac:53:80:
8c:dd:85:ca:58:81:6a:3c:44:35:a4:0b:8b:b5:56:
fd:9a:13:9f:62:28:2c:66:30:ba:8c:cc:a2:7a:06:
72:d6:fe:05:ae:9f:dc:48:68:fc:3b:92:98:4e:6d:
84:49:c0:4e:5e:ab:58:36:3e:67:14:18:23:ec:fd:
73:66:f6:6f:b5:f8:93:bd:48:81:5d:42:c4:e8:a2:
4f:d4:8b:6d:b7:0c:77:48:e9:e4:f6:61:77:8b:cb:
44:42:4d:74:e4:8c:57:31:0e:b4:cf:19:61:cf:7d:
94:5b:37:a4:22:f1:86:56:48:b7:59:5f:be:bd:3f:
f1:52:4c:de:3e:5e:49:e1:fd:17:bb:0b:c1:6a:71:
ad:ea:69:94:e4:b6:1b:3a:41:af:52:ab:ba:69:14:
f8:3a:d0:f5:8f:cd:3f:b7:35:51:a8:6b:91:6f:63:
72:62:9b:b6:c5:9f:ae:0b:73:67:10:8d:dc:ab:24:
d8:a4:b5:62:45:b9:d2:63:1b:4a:b9:fa:62:ee:ea:
61:87:2b:89:25:77:ac:d6:56:26:4b:1b:ff:69:d1:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:5D:E9:2C:C4:A8:96:79:88:31:78:C3:A7:7F:86:E5:C2:68:80
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20323035323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8c:02:dd:8c:ad:3a:66:b4:fa:7f:35:84:b3:c5:9c:00:42:
a6:b8:eb:43:15:e6:32:20:ec:e1:43:66:48:0b:62:78:70:72:
8f:d5:3f:9c:e3:99:10:43:e8:e3:f6:80:8e:8b:d6:cc:5d:53:
ad:73:88:aa:d7:ff:76:76:a6:9d:68:ee:ce:07:67:a4:c1:31:
c9:b7:3c:c7:1e:1f:07:65:cc:02:7c:2e:2c:8f:62:75:74:5d:
05:08:44:dd:39:bf:ed:9a:86:a8:29:21:34:dc:dc:11:d3:47:
0e:bd:b3:8e:c8:83:bf:59:ae:e9:7b:b4:32:82:b8:86:5b:93:
76:27:38:2b:d3:78:9c:0c:9a:fa:f2:8a:53:a8:c6:58:d6:92:
f5:dc:99:0f:2a:46:5c:bc:56:01:e7:78:fe:50:f2:90:f8:0c:
4d:44:27:36:3c:d4:13:9d:05:a2:4a:e0:e2:05:43:3e:cd:27:
a2:38:57:ac:39:0f:a9:00:71:4a:ed:f4:20:31:e8:a9:56:67:
30:f3:e5:6e:69:b2:c1:c5:17:97:37:97:0f:b0:c1:cb:76:23:
9d:c9:78:95:ca:4b:11:3f:d9:63:bc:66:78:c2:19:d0:fa:1f:
fd:4b:00:ab:e0:c3:c3:7d:5c:04:7c:be:cb:62:b4:6f:0c:d6:
bb:7c:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:48 2025 by rpki-client