Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
File: 3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: YRExcxAHex3wgnw5eYiryAMOBet0jTokiaVWSNYeyoA=
Subject key identifier: C9:E8:43:DA:32:39:99:7A:70:BB:C5:B7:40:FF:BB:F0:40:33:8C:5F
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 276B72ECC3B6D98C1C7EEEB8901E26B3CB4BE239
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
Signing time: Wed 11 Dec 2024 16:28:23 +0000
ROA not before: Wed 11 Dec 2024 16:23:23 +0000
ROA not after: Wed 10 Dec 2025 16:28:23 +0000
asID: 397423
IP address blocks: 193.227.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6b:72:ec:c3:b6:d9:8c:1c:7e:ee:b8:90:1e:26:b3:cb:4b:e2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Dec 11 16:23:23 2024 GMT
Not After : Dec 10 16:28:23 2025 GMT
Subject: CN=C9E843DA3239997A70BBC5B740FFBBF040338C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:93:90:a5:87:5a:a7:75:46:14:81:96:0f:
38:23:e5:93:b7:c8:aa:0b:59:ea:8c:c8:6e:1e:54:
e2:c9:5f:ae:38:e0:ce:f7:8a:6e:1e:f0:4b:d2:0b:
91:e0:d4:7a:f8:c8:47:4e:06:2f:be:83:65:5d:38:
59:5e:2a:d7:0a:ab:1e:4c:6a:24:5d:84:1d:3c:43:
f9:fd:01:84:5f:15:31:4c:8c:00:01:81:f2:90:b9:
c1:84:3b:a6:24:10:5b:60:3a:30:e2:bf:1a:4d:ee:
8f:14:db:0f:1f:40:f5:d1:ec:66:f0:82:03:22:47:
25:c0:f4:0a:77:c1:d7:84:82:25:18:81:8f:28:53:
dd:99:35:e8:73:0f:3f:9d:80:f2:89:5e:28:5b:3a:
5b:fb:68:73:18:0a:2a:95:00:67:64:68:9b:dd:1a:
9f:42:54:5d:c2:11:92:56:25:6f:51:89:81:8a:9b:
89:4e:ce:bb:31:05:b0:b3:e6:c4:2d:41:3e:30:9d:
8f:5a:82:af:10:ba:0b:74:1a:c8:ef:35:21:57:64:
15:c6:4e:e1:20:59:d9:c5:fa:d3:23:0b:80:8d:e5:
71:d6:59:55:7d:6f:81:45:e9:ce:81:9c:2d:ef:89:
7a:18:9b:26:d8:7c:e7:33:38:7d:59:74:1f:9a:5a:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:43:DA:32:39:99:7A:70:BB:C5:B7:40:FF:BB:F0:40:33:8C:5F
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:21:71:d4:19:23:d4:e8:e3:9e:32:11:60:6d:e5:ec:4b:c3:
bc:72:7f:9f:cf:ee:b3:da:a7:f4:b5:e8:8f:c7:b5:15:74:f5:
0a:7d:bf:15:cc:08:2f:55:d6:12:a5:35:1d:40:57:42:9d:f9:
82:41:3c:ed:d0:fb:1c:23:4b:3a:ab:8f:22:15:5a:bd:c2:6c:
f6:8c:2b:9c:72:9b:31:3c:b4:43:09:b9:02:8c:e8:fb:d4:97:
7d:67:5e:6d:1e:dd:72:b3:30:a3:81:4c:a1:1e:d2:9b:1a:50:
2d:88:76:aa:0c:e3:7b:87:1a:44:9e:e4:33:02:71:17:8c:0f:
6f:0e:15:3b:bf:59:a0:07:d3:e2:35:76:0f:1a:77:b2:e7:29:
ff:38:28:30:a0:79:aa:09:a8:ea:b7:8d:a3:c7:0b:bd:a0:71:
d1:65:c1:2a:b9:1c:2d:aa:c9:78:49:27:3b:bf:5a:17:3a:07:
a4:75:c3:63:c6:c9:85:79:24:ff:03:46:8b:5b:62:ea:96:52:
46:86:2d:86:aa:67:2f:17:92:86:5a:68:85:02:c4:c7:7e:28:
0b:9d:2d:68:96:b8:b5:13:21:05:99:d4:9d:75:3a:f0:97:68:
af:c0:59:2d:9e:df:38:77:15:c9:6b:7c:e4:fa:8d:f7:fa:eb:
b0:94:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:24 2025 by rpki-client