Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa
File: 3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa (raw, json)
Hash identifier: HwWW9XDuc++PHf6E+OwYr3xqS8t3s5z8W8NcJtGjzCs=
Subject key identifier: C0:0D:9D:2A:F4:06:D3:CB:C7:F0:36:6D:AD:BA:3D:38:A6:83:9D:D0
Certificate issuer: /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial: 21701C7F785AF42985D448D2FBC884B5C155C0CC
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa
Signing time: Thu 06 Oct 2022 17:13:05 +0000
ROA not before: Thu 06 Oct 2022 17:08:05 +0000
ROA not after: Thu 05 Oct 2023 17:13:05 +0000
asID: 211588
IP address blocks: 192.109.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:70:1c:7f:78:5a:f4:29:85:d4:48:d2:fb:c8:84:b5:c1:55:c0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Validity
Not Before: Oct 6 17:08:05 2022 GMT
Not After : Oct 5 17:13:05 2023 GMT
Subject: CN=C00D9D2AF406D3CBC7F0366DADBA3D38A6839DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:df:6c:4d:51:34:0e:38:18:26:70:23:ff:
d8:2d:01:a4:de:da:9d:5d:ad:2d:d7:cb:a2:98:33:
44:43:d2:00:88:16:2a:1e:33:f7:6a:f6:2c:fd:9f:
c1:7d:37:42:c6:97:2c:52:24:4a:43:f2:5d:ae:4e:
cf:77:6e:0f:92:4b:06:4d:03:0d:a4:43:59:c9:5e:
fd:49:a3:50:a1:a8:ab:bc:aa:93:33:6f:4f:08:73:
a7:7f:bd:cf:9b:6e:a3:58:87:8d:21:f8:76:96:d7:
ed:21:0f:82:02:05:36:f7:0f:1e:0b:a0:85:46:ae:
cc:c6:1a:20:bc:59:04:55:0c:5f:32:d3:ad:69:b1:
f4:d8:5a:e3:be:17:8b:c8:cf:47:6e:2f:28:7c:e8:
63:a6:d2:ba:b6:cd:bb:63:84:5c:46:21:52:a2:e9:
08:5b:6a:91:80:d3:88:7b:ac:0f:7a:7c:1b:66:b6:
d4:4d:41:0c:9f:a7:82:9c:45:a1:d8:d7:8b:1d:56:
b3:96:5b:44:fa:3f:3f:c1:3f:ad:e0:ea:42:8a:29:
52:0b:b6:62:92:6f:13:ce:ca:2a:7f:39:ef:f9:c4:
50:08:39:03:87:f9:ec:d5:ee:d5:d9:90:9d:a8:86:
37:6d:b3:7c:f2:d8:27:30:8e:03:f4:57:46:eb:de:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:9D:2A:F4:06:D3:CB:C7:F0:36:6D:AD:BA:3D:38:A6:83:9D:D0
X509v3 Authority Key Identifier:
keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.149.0/24
Signature Algorithm: sha256WithRSAEncryption
83:66:a2:e4:eb:98:e2:d0:bb:ca:2f:12:76:de:66:d7:a6:3e:
7a:eb:fd:b8:49:36:0d:c1:15:50:cf:95:d0:5f:d3:ea:86:ca:
09:04:ca:79:33:2d:c1:2d:13:b3:62:be:46:b7:a9:aa:74:b2:
d5:ef:a6:40:49:fa:95:e0:4e:3a:0a:c3:b7:1a:79:7c:26:ca:
80:8b:0e:cd:70:bf:78:05:f5:4f:fe:da:35:55:90:8e:27:3f:
4f:7c:90:b1:e3:c6:17:b1:70:7b:de:bb:c9:c7:8d:51:70:31:
ab:e0:2f:66:86:f2:49:4d:cd:1d:ac:f6:5c:89:c6:fa:ac:b6:
06:8e:0b:52:3f:3c:7a:b6:20:76:c6:0a:b9:c3:45:4e:c0:8b:
25:cd:01:06:86:2f:49:87:c6:11:df:be:7c:da:d5:0d:76:eb:
d3:4a:39:de:03:47:db:cd:c3:54:09:b8:da:e0:52:5f:ab:cc:
75:24:4b:b7:1c:1f:82:14:02:ce:11:c0:f5:96:46:8e:a8:22:
d3:6b:45:db:45:31:de:92:9d:3b:1f:c4:05:fc:f5:75:82:cc:
a4:d6:bd:61:6e:ec:de:a5:d9:22:57:0a:6c:e5:2c:68:30:fb:
58:a5:ab:16:40:f9:3e:9c:ea:2d:03:75:af:0c:48:78:a6:d5:
65:4c:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org