Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
File: 3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa (raw, json)
Hash identifier: KuT+LHdoc3v0MF7YFydBKjwGMUsuOuhNWV6jNjp8DAk=
Subject key identifier: 13:1D:B9:87:8A:CE:15:83:46:3F:12:49:33:67:A4:BF:D2:20:97:93
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 3DB8C032FA4C339991AEBFA63553D89451AEDF20
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
Signing time: Fri 25 Oct 2024 10:49:02 +0000
ROA not before: Fri 25 Oct 2024 10:44:02 +0000
ROA not after: Fri 24 Oct 2025 10:49:02 +0000
asID: 132244
IP address blocks: 193.186.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b8:c0:32:fa:4c:33:99:91:ae:bf:a6:35:53:d8:94:51:ae:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Oct 25 10:44:02 2024 GMT
Not After : Oct 24 10:49:02 2025 GMT
Subject: CN=131DB9878ACE1583463F12493367A4BFD2209793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:4e:ab:4a:0a:9e:a2:a2:d5:9a:67:6d:e1:
51:31:24:a7:37:69:0e:34:18:9d:6b:48:52:8b:a1:
d7:cd:f9:5e:41:c7:37:46:92:80:ee:85:11:84:9d:
1f:44:b3:c0:ec:78:27:70:a7:cd:ba:7d:21:0d:7b:
4c:07:4d:6c:53:67:94:13:8b:a1:1a:66:80:65:75:
a9:2c:91:53:37:ed:7b:93:5e:6d:43:c5:42:bd:10:
28:d7:cf:7b:da:92:14:7b:c4:f6:bf:85:ca:2a:3c:
4c:17:3c:8f:d0:2f:d0:29:e6:f3:82:84:1a:db:55:
21:d7:ef:2d:e1:db:b3:f6:b8:a5:90:8e:83:c8:c0:
e3:a5:84:80:37:af:7a:ad:91:9e:91:da:50:d7:2f:
da:b7:de:db:69:e7:9b:eb:5a:f9:19:cf:e6:d2:65:
fb:39:1c:fd:ef:bf:f0:b9:cc:1f:26:1a:cc:60:88:
de:ee:03:6b:c5:32:8f:80:4f:c0:33:7d:bc:c9:74:
1d:a2:05:46:b8:f5:27:c3:34:22:11:a5:64:ee:da:
08:f4:35:10:7d:89:d8:c6:91:e1:63:cf:b7:e3:12:
e0:a8:79:a2:2a:c2:10:3a:44:d7:d5:c3:ab:49:f8:
f7:d1:66:41:57:6b:94:e8:7c:51:31:65:e9:a1:35:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:B9:87:8A:CE:15:83:46:3F:12:49:33:67:A4:BF:D2:20:97:93
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:91:33:a7:77:53:3f:56:70:90:0e:90:81:1d:13:46:f1:d0:
f3:13:35:50:54:3c:ae:f4:b7:b1:87:c8:1e:ba:b0:86:5c:f3:
e8:57:f8:9e:74:73:3e:cb:bf:8f:59:d0:64:3c:2b:69:4b:8b:
c8:53:2f:fd:be:8f:b3:13:2b:2e:56:9b:f5:c7:bf:f4:fe:db:
f2:d6:b6:c8:4c:f6:ec:f6:97:8a:41:8b:1c:6a:b0:03:4a:5f:
6e:64:a3:87:ce:0a:c8:06:ed:a8:2d:77:a8:73:ad:e6:52:ff:
44:44:3c:6a:c0:ee:33:c1:7e:c9:72:25:e8:7e:80:2b:97:48:
bf:74:9e:be:15:03:6b:2b:9e:0d:9a:ab:59:00:1d:4f:d3:97:
cb:ef:49:45:77:59:af:56:7e:3d:15:01:bd:28:55:00:c7:6d:
9a:ff:b3:f2:a3:80:ac:b8:78:77:17:83:8b:de:97:f0:ab:79:
18:36:fb:3e:9a:a3:26:d0:7c:24:6c:14:d7:a6:95:05:24:97:
99:67:24:72:da:88:79:80:cd:4c:83:ff:b7:75:8c:8e:39:42:
6d:07:7c:aa:28:5a:df:3d:5e:27:dd:6c:42:df:b7:ec:06:6f:
5a:dc:5d:71:b9:a0:39:a8:cd:0e:09:15:af:3f:bc:95:5c:3b:
48:ac:95:60
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUPbjAMvpMM5mRrr+mNVPYlFGu3yAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQxMDI1MTA0NDAyWhcNMjUxMDI0MTA0OTAy
WjAzMTEwLwYDVQQDEygxMzFEQjk4NzhBQ0UxNTgzNDYzRjEyNDkzMzY3QTRCRkQy
MjA5NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqixOq0oKnqKi
1ZpnbeFRMSSnN2kONBida0hSi6HXzfleQcc3RpKA7oURhJ0fRLPA7HgncKfNun0h
DXtMB01sU2eUE4uhGmaAZXWpLJFTN+17k15tQ8VCvRAo18972pIUe8T2v4XKKjxM
FzyP0C/QKebzgoQa21Uh1+8t4duz9rilkI6DyMDjpYSAN696rZGekdpQ1y/at97b
aeeb61r5Gc/m0mX7ORz977/wucwfJhrMYIje7gNrxTKPgE/AM328yXQdogVGuPUn
wzQiEaVk7toI9DUQfYnYxpHhY8+34xLgqHmiKsIQOkTX1cOrSfj30WZBV2uU6HxR
MWXpoTVXXwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBMduYeKzhWDRj8SSTNnpL/S
IJeTMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzODM2MmUzMjM1MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzIzMjM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBuv0wDQYJKoZIhvcN
AQELBQADggEBAJuRM6d3Uz9WcJAOkIEdE0bx0PMTNVBUPK70t7GHyB66sIZc8+hX
+J50cz7Lv49Z0GQ8K2lLi8hTL/2+j7MTKy5Wm/XHv/T+2/LWtshM9uz2l4pBixxq
sANKX25ko4fOCsgG7agtd6hzreZS/0REPGrA7jPBfslyJeh+gCuXSL90nr4VA2sr
ng2aq1kAHU/Tl8vvSUV3Wa9Wfj0VAb0oVQDHbZr/s/KjgKy4eHcXg4vel/CreRg2
+z6aoybQfCRsFNemlQUkl5lnJHLaiHmAzUyD/7d1jI45Qm0HfKooWt89XifdbELf
t+wGb1rcXXG5oDmozQ4JFa8/vJVcO0islWA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:15 2025 by rpki-client