Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139332e302f32342d3234203d3e20323132363639.roa
File: 3130342e3235342e3139332e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier: /l/SvC/WUjO3fc/WD0O1sjRG1S3Qzqd2cwPY4JAH8mQ=
Subject key identifier: 3F:D5:71:EF:91:2A:08:B7:80:5B:D6:3C:74:E4:BA:99:3C:37:75:1F
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 02D042B8812689DDDFE5215265A05912B6105793
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139332e302f32342d3234203d3e20323132363639.roa
Signing time: Mon 17 Feb 2025 10:28:26 +0000
ROA not before: Mon 17 Feb 2025 10:23:26 +0000
ROA not after: Mon 16 Feb 2026 10:28:26 +0000
asID: 212669
IP address blocks: 104.254.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d0:42:b8:81:26:89:dd:df:e5:21:52:65:a0:59:12:b6:10:57:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Feb 17 10:23:26 2025 GMT
Not After : Feb 16 10:28:26 2026 GMT
Subject: CN=3FD571EF912A08B7805BD63C74E4BA993C37751F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:a1:f7:72:09:78:10:b1:ed:b2:58:7e:3a:
10:bc:f8:ad:ca:43:7f:d2:8f:81:c7:f7:7f:b2:9e:
32:d3:17:29:24:c9:8b:ee:7a:c7:d8:80:d1:6b:58:
a5:cd:96:5c:25:2a:76:58:cb:d5:72:2b:de:f3:c5:
27:03:ad:4f:46:d7:08:13:0b:e2:06:b0:e8:b5:26:
ec:08:05:cc:b9:d6:cf:c8:33:54:f7:2e:8d:8d:23:
9e:ec:5b:e6:69:ae:36:31:12:76:c0:52:a5:30:38:
e5:88:62:2a:90:f5:2b:8d:e0:8c:7f:80:6a:7e:19:
66:b5:85:78:04:fe:b0:fc:84:1d:c1:b6:3d:c7:b8:
03:65:0b:91:aa:33:10:a1:6d:42:0a:80:0f:d5:1e:
77:d9:62:03:11:44:42:89:d6:44:94:6c:6d:30:d7:
ac:ec:87:d8:7e:dd:d9:d4:6c:be:9a:24:85:2d:75:
08:19:73:b5:e1:59:69:c9:90:40:b0:46:4f:81:d0:
2c:45:20:ce:c7:09:c3:1f:68:7e:bb:99:68:6c:fb:
1d:3c:3a:61:c9:d6:63:07:da:1d:32:d4:68:b7:c4:
fb:ce:2c:8c:e2:65:39:c4:2c:11:d4:5f:5f:00:cf:
2c:eb:98:2f:29:3d:44:b2:a6:3c:51:24:86:13:17:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:71:EF:91:2A:08:B7:80:5B:D6:3C:74:E4:BA:99:3C:37:75:1F
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139332e302f32342d3234203d3e20323132363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.193.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2c:b5:71:12:aa:47:da:d4:15:9a:ed:e9:0e:78:88:d7:a1:
65:ab:da:10:d4:8b:b5:65:28:35:a0:e3:a2:a3:ea:ab:8e:5e:
24:37:33:07:e5:bc:b0:55:12:9d:a1:de:62:c5:12:21:0a:f3:
80:75:81:10:6a:6b:70:91:22:f8:c7:ff:5c:68:da:ac:7e:78:
81:2c:43:5e:c8:39:7c:d0:bf:11:ea:eb:30:24:cd:30:b4:12:
17:74:6a:b1:2e:4c:c1:2a:8b:1b:02:c0:55:bc:52:93:cd:f9:
26:8c:d4:66:8b:1d:81:62:6c:6f:2a:5d:a5:e2:f6:6c:82:86:
f1:06:cf:f4:5f:72:cb:6c:85:24:4c:e4:b4:91:00:8c:81:94:
91:34:95:6b:98:06:ae:f2:0d:cb:c8:5b:42:5e:77:40:66:93:
e7:1b:f1:fc:92:8a:aa:1a:9f:0a:0d:83:83:91:ff:77:bd:27:
62:74:59:b6:91:d7:6d:80:bc:23:d0:2b:7b:52:83:c0:ec:b7:
cd:59:21:cb:69:c0:25:48:6c:c6:52:94:3d:77:48:5a:ec:ce:
6d:4d:d4:a3:78:45:e9:f5:36:df:3e:f7:ca:03:ad:5b:b8:01:
16:49:f6:50:72:e3:06:18:c4:a5:8a:76:73:75:88:15:9e:96:
7b:cc:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:19 2025 by rpki-client