![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
File: 3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa (raw, json)
Hash identifier: 19tINd67mRMwWnOrDZ9iiuo1cIYYDgJ1fRx6LJC6AYI=
Subject key identifier: 56:73:1D:BD:D9:46:D3:6D:C3:92:C7:D2:CA:12:D2:5E:C3:00:90:A2
Certificate issuer: /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial: 757F8653BCFC64F1D8F1B8AF9FBE4AB04B9ADBDB
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
Signing time: Mon 11 Jul 2022 10:35:30 +0000
ROA not before: Mon 11 Jul 2022 10:30:30 +0000
ROA not after: Mon 10 Jul 2023 10:35:30 +0000
asID: 208911
IP address blocks: 192.109.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7f:86:53:bc:fc:64:f1:d8:f1:b8:af:9f:be:4a:b0:4b:9a:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Validity
Not Before: Jul 11 10:30:30 2022 GMT
Not After : Jul 10 10:35:30 2023 GMT
Subject: CN=56731DBDD946D36DC392C7D2CA12D25EC30090A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:f2:ac:7b:bd:a7:0c:18:99:61:1f:18:d8:
1f:24:50:3b:d7:83:81:6f:87:e4:e1:e8:0f:92:08:
3a:04:27:38:9a:db:db:2a:ba:9a:48:3f:47:18:19:
cb:73:7b:a7:24:4b:06:07:0d:f9:00:d7:b2:2d:7c:
5b:8b:e6:7a:7e:f0:61:3c:f8:f7:4b:c5:f7:10:b6:
f0:2e:63:a8:e7:75:24:55:c5:9a:08:5e:7e:a0:04:
f7:f2:db:44:ec:43:eb:2f:88:ce:0c:27:de:43:0d:
ab:95:a7:f8:42:83:f1:6a:aa:34:ad:bc:1e:42:d5:
da:00:96:88:8c:7b:f1:bc:eb:d2:54:2a:ba:17:c0:
10:00:33:74:60:5b:f4:cd:0c:59:77:45:5e:f3:c1:
3c:7f:b0:6f:a0:f5:be:31:c0:e6:fe:ff:88:56:8a:
bd:7d:fd:35:76:1f:24:08:fa:03:65:4b:f6:20:f0:
58:02:0e:7e:b8:89:59:b4:ca:a4:06:6c:54:da:77:
06:f8:81:ed:75:87:45:eb:a4:39:59:71:e7:8b:f4:
68:f0:c5:07:3c:1f:99:4c:5e:61:84:de:6d:7a:58:
f9:a2:a4:3c:89:5a:51:39:ec:e2:1f:d9:fb:90:96:
e2:fe:d8:60:2c:5c:04:da:24:37:74:40:6e:a4:53:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:73:1D:BD:D9:46:D3:6D:C3:92:C7:D2:CA:12:D2:5E:C3:00:90:A2
X509v3 Authority Key Identifier:
keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.149.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1b:20:f1:87:90:07:ce:80:88:2a:da:57:2f:c1:b6:b5:f0:
6d:0f:c5:72:c9:dd:d7:fc:88:1e:14:ab:5f:e3:8d:8b:f9:f7:
ee:80:33:78:1b:d7:f3:a9:6b:02:8d:1f:41:d3:33:5d:86:80:
dc:c8:a7:f6:6b:12:25:e3:11:a4:c5:0a:b7:e1:0a:a1:2d:ab:
38:4a:7d:de:61:aa:06:0e:09:a2:62:62:ce:d5:c9:a3:de:4e:
9e:a3:56:f5:73:6f:29:a1:6e:b5:e7:00:ae:20:02:0a:d6:af:
b3:12:51:42:11:21:3b:4b:56:5a:0b:37:1b:6d:8b:82:b3:7c:
a1:e4:de:44:1c:4e:47:20:4c:9e:03:d3:29:23:a9:f0:6b:eb:
69:d7:bb:f9:95:6b:24:52:76:75:2a:c5:29:0b:8d:db:ac:2e:
ed:98:e1:a3:97:6f:c1:07:8b:82:34:b4:2d:4b:79:42:40:94:
8f:fc:93:32:04:f2:a3:b8:8a:36:4f:6f:db:d2:ed:97:f1:1f:
a6:9f:86:34:6c:8b:86:e2:58:6d:bd:03:f9:c4:c4:cd:9f:d1:
3c:d2:ec:3a:d3:2c:3e:8c:39:db:1c:cb:b0:8f:04:c2:02:59:
5b:a2:f8:08:01:96:e1:63:dd:9c:a1:a3:14:f5:5e:6c:30:ea:
1b:d0:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:26 2025 by rpki-client