Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3230352e3139362e39382e302f32342d3234203d3e20333939393730.roa
File: 3230352e3139362e39382e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier: G9DC+TAJfO1wQoDp12lCFS5VTulWEFIkw2R0w79QOnc=
Subject key identifier: 55:76:89:9F:55:E6:21:53:78:6C:35:EF:B8:C5:81:86:10:46:E8:8A
Certificate issuer: /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial: 33B5049A6453C63A5F2EE9B9E1B48E6BCB0B7328
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3230352e3139362e39382e302f32342d3234203d3e20333939393730.roa
Signing time: Fri 02 Aug 2024 20:09:58 +0000
ROA not before: Fri 02 Aug 2024 20:04:58 +0000
ROA not after: Fri 01 Aug 2025 20:09:58 +0000
asID: 399970
IP address blocks: 205.196.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b5:04:9a:64:53:c6:3a:5f:2e:e9:b9:e1:b4:8e:6b:cb:0b:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Validity
Not Before: Aug 2 20:04:58 2024 GMT
Not After : Aug 1 20:09:58 2025 GMT
Subject: CN=5576899F55E62153786C35EFB8C581861046E88A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:03:4d:74:07:11:da:5f:c5:3c:82:a3:a6:
bc:8c:c3:80:ff:44:0f:fe:4e:c5:cc:12:40:1e:3e:
4e:28:00:99:fb:92:60:59:b9:f3:49:ce:00:8d:2e:
23:2f:46:6d:cf:c6:27:9f:1c:da:0b:66:cf:d9:8f:
46:0e:c1:4d:4c:59:ec:aa:2c:04:12:5d:0c:ed:30:
5c:08:62:90:2f:cf:17:bc:70:46:27:9d:83:7e:ab:
7f:a9:cf:c7:15:1e:fa:16:47:71:7e:85:c2:02:b4:
46:a6:83:94:df:18:4c:0e:20:21:3d:ee:fb:d2:ed:
1b:ae:e2:05:15:57:56:40:90:eb:15:71:1a:67:60:
dd:24:61:b0:fa:68:82:ce:88:63:56:7c:04:81:15:
59:72:2e:c4:a5:05:57:55:ca:cb:1e:97:f7:36:04:
b3:08:f8:7e:c7:25:71:dc:6e:a3:a7:45:6b:71:31:
49:19:d4:52:72:5f:e6:4f:2d:06:b3:93:7f:df:f2:
fb:ca:d4:95:d6:5a:8d:5a:fb:ab:b4:17:03:a2:6b:
66:ca:ec:b4:c1:37:ba:e1:07:d8:2b:02:d9:ca:7e:
bc:4f:fa:6e:97:22:94:db:c4:a9:ff:17:79:73:a9:
eb:7f:2d:f7:54:9c:3c:76:33:11:ab:3b:cc:a0:60:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:76:89:9F:55:E6:21:53:78:6C:35:EF:B8:C5:81:86:10:46:E8:8A
X509v3 Authority Key Identifier:
keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/3230352e3139362e39382e302f32342d3234203d3e20333939393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.196.98.0/24
Signature Algorithm: sha256WithRSAEncryption
13:46:81:f3:8d:01:71:95:e0:53:a9:60:c2:2a:e0:c6:d2:f4:
64:08:57:27:0b:43:f8:01:7b:1e:3a:3b:2e:87:47:16:9a:d8:
e1:08:6f:ac:db:f9:28:e2:52:c6:bb:26:59:0c:ec:3e:bb:d3:
00:c2:fb:95:ad:7f:d7:a2:68:a8:3d:12:61:7d:c5:f5:f4:7d:
3b:2d:de:74:34:9e:e1:d2:8c:bc:54:4d:d5:2f:06:73:c7:e9:
64:f1:c9:a9:c9:2f:df:46:cc:9e:b7:47:38:e9:75:71:b5:ea:
ef:4a:11:29:21:67:05:c4:2c:f5:a5:de:7f:b8:43:07:fe:4b:
67:63:98:6a:13:5f:d6:94:1e:23:aa:bb:32:ed:e4:1b:0a:6e:
e5:4d:9d:a3:4e:37:f8:4b:8d:3b:61:2a:e9:3f:cf:40:4f:ef:
bb:ae:b5:0d:82:02:4b:5f:c3:ad:63:5e:0e:09:2b:a6:bf:52:
a7:b8:03:45:81:b2:c7:94:a9:74:c0:11:3d:87:96:b0:20:a1:
26:73:c8:18:42:f6:22:0f:45:99:08:a5:b5:94:5e:5d:13:7a:
a1:8b:d8:92:de:f3:ef:69:4f:8a:23:d7:4d:e5:58:69:5a:44:
5f:96:64:90:11:64:eb:c7:15:42:b6:ad:e2:4c:c0:33:6b:3e:
37:a4:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:17 2024 by rpki-client on console-fra.rpki-client.org