Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
File: 3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: iL+odmyHODmPmenR1KZqO5Q6xEDZz2QRDLSEBBneFoo=
Subject key identifier: 60:00:AC:15:4E:0B:BE:C5:8C:D0:51:51:84:06:95:35:E4:47:52:73
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 4FB7397C6AE4C3DE72720F71AFA4C50060FEAF9C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
Signing time: Tue 21 May 2024 08:14:36 +0000
ROA not before: Tue 21 May 2024 08:09:36 +0000
ROA not after: Tue 20 May 2025 08:14:36 +0000
asID: 9009
IP address blocks: 192.109.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b7:39:7c:6a:e4:c3:de:72:72:0f:71:af:a4:c5:00:60:fe:af:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: May 21 08:09:36 2024 GMT
Not After : May 20 08:14:36 2025 GMT
Subject: CN=6000AC154E0BBEC58CD0515184069535E4475273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:a4:0e:af:88:2a:9d:d2:04:ae:64:4a:d8:
29:de:2b:0d:0d:dc:57:ea:26:8c:24:de:51:bc:b9:
2e:f6:8c:21:48:9b:d6:2e:9d:55:81:44:c2:ba:a1:
6f:ba:8a:ba:93:72:64:b3:b3:81:fa:d7:5f:4d:96:
0f:35:fb:8f:13:49:d6:49:4d:86:fe:e8:ab:19:61:
92:1f:6c:e8:43:e4:eb:a6:dd:c0:85:74:c1:b6:60:
9a:e5:98:f7:8a:a0:7d:0d:b4:4e:26:49:ce:9b:d3:
09:76:51:58:76:67:4b:b7:04:ad:24:e3:5b:08:27:
63:5b:4e:fc:88:c4:f0:6a:eb:f7:8f:2b:e9:ae:f5:
2b:f4:48:c5:ae:8b:9f:46:f2:06:b3:60:4c:77:ab:
43:86:24:6a:5f:3c:c8:9d:11:8f:8b:96:fc:60:64:
4d:14:61:02:ff:70:46:58:7e:ae:c7:10:4b:05:e1:
93:44:c4:ef:1b:eb:98:a9:b0:16:2f:0e:26:39:71:
83:23:c6:c6:15:4f:bf:b0:12:86:12:03:75:b5:90:
3a:e3:7f:8c:e7:75:89:c7:40:e1:a6:97:43:9c:1f:
11:9c:9e:39:19:1d:99:86:fd:42:00:83:27:41:02:
d9:41:80:2f:8f:d9:e8:bb:5a:82:df:01:90:9d:d9:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:AC:15:4E:0B:BE:C5:8C:D0:51:51:84:06:95:35:E4:47:52:73
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e0:f6:5e:a7:db:7f:82:c1:5f:41:e6:af:b3:3e:a0:f6:5e:
f4:6f:7c:98:1c:c6:88:ca:df:7b:62:63:24:dd:8d:eb:87:ac:
ac:3d:b1:16:b7:6c:bb:94:ba:49:e2:61:61:79:86:ad:31:52:
46:ea:77:98:f5:cc:fc:ae:8c:cf:0d:88:9b:55:17:cc:6c:53:
74:bd:75:61:6a:e4:5b:58:a5:b6:c8:69:bc:28:ff:bf:fd:05:
61:48:09:cb:4b:29:9e:f3:72:80:63:60:d8:10:a4:0d:40:06:
bc:27:cb:03:2b:c2:60:72:b9:24:69:dc:24:e1:29:c0:f7:ed:
52:31:4d:a2:e3:81:72:21:39:e4:68:ff:b4:15:83:8a:cf:2e:
20:5e:91:cb:46:05:44:1b:a0:66:64:1b:8d:22:27:ae:ca:bb:
6a:ce:bd:e5:ad:2e:04:e8:5d:37:9a:b1:8e:09:50:e8:60:4e:
65:eb:24:5c:cd:d8:79:33:0a:e9:3d:3f:6a:5e:ba:54:70:bc:
a7:f5:e2:98:c2:ef:6d:c9:ec:63:93:dd:0e:fc:f6:c5:b9:71:
a2:b6:3f:08:20:31:0d:e8:a1:46:af:be:37:4b:a7:20:7f:c6:
77:cd:a3:27:0b:2b:90:3e:9d:67:21:45:a4:7a:e9:95:ad:bb:
f6:44:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:28:22 2025 by rpki-client