Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
File: 3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: +uERO12lnDhLzKtdRv3OmJMwHIZVEI9Zq2PbnKSTG+8=
Subject key identifier: 39:BB:0C:33:D3:F7:86:5A:DD:43:CB:4F:48:2A:F6:6D:43:4A:86:06
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 59E1B0487D098626DEEE09C4218BE3C0098E835A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Sep 2024 12:49:00 +0000
ROA not before: Mon 30 Sep 2024 12:44:00 +0000
ROA not after: Mon 29 Sep 2025 12:49:00 +0000
asID: 212238
IP address blocks: 193.29.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e1:b0:48:7d:09:86:26:de:ee:09:c4:21:8b:e3:c0:09:8e:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Sep 30 12:44:00 2024 GMT
Not After : Sep 29 12:49:00 2025 GMT
Subject: CN=39BB0C33D3F7865ADD43CB4F482AF66D434A8606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:14:65:e3:5a:78:5f:eb:1b:5d:f0:23:2c:
14:19:e3:85:c9:92:81:6e:35:4b:bf:46:7c:99:ee:
37:f3:5e:84:a8:88:95:32:6b:cc:90:b3:20:bc:3c:
df:4f:92:fb:7e:42:df:4f:27:b8:ff:f3:3f:4f:dd:
75:e7:56:db:f9:18:b2:30:8e:73:cf:78:35:86:ce:
74:6f:bb:d4:07:32:eb:6b:52:98:9a:01:aa:31:15:
1f:b9:2e:57:c5:4f:94:97:2c:34:b7:d3:24:d2:c4:
0a:fc:8f:ae:ec:b4:11:88:1c:69:d0:ea:e9:42:d6:
86:04:bf:68:78:e5:e3:83:f0:fa:92:5e:dc:49:45:
be:df:a0:73:87:1b:2a:aa:80:9b:eb:ab:51:44:d1:
8b:00:ca:4d:b7:61:3e:55:37:b7:4c:db:fe:b1:0f:
1e:6f:92:2b:bf:d1:2b:31:33:2a:a0:4f:57:2a:ab:
3a:36:d8:7c:43:c4:45:67:25:bd:66:31:ad:e1:0a:
78:7c:a1:2c:87:4b:05:f1:6b:90:9b:79:f2:f3:d8:
99:35:24:cb:89:fa:c6:4c:a2:50:ec:db:7b:d9:75:
69:2a:e5:04:05:1e:ab:16:e4:31:57:fa:98:d8:2b:
ca:1f:d1:6d:49:34:64:4e:d9:cd:85:b7:e1:ab:7d:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:0C:33:D3:F7:86:5A:DD:43:CB:4F:48:2A:F6:6D:43:4A:86:06
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.251.0/24
Signature Algorithm: sha256WithRSAEncryption
29:22:ff:35:6f:9d:eb:6e:d6:b9:87:70:d2:1e:10:10:f9:37:
2b:26:48:9e:fa:e4:eb:96:cd:30:83:6a:2a:99:eb:16:a8:11:
cc:3d:9b:d1:f3:3f:a7:bb:2f:1f:e7:1d:80:bc:23:de:3a:ce:
31:66:12:60:a1:5d:97:7b:23:57:b2:85:21:0d:17:07:ba:8d:
71:64:e7:a0:a5:76:fd:86:85:ca:94:03:9f:56:61:7d:0d:f2:
0c:71:20:7d:a6:ee:73:85:b8:e9:fb:a6:b7:03:53:8e:fa:de:
06:2d:b5:86:2b:2a:7e:68:6c:96:70:88:a9:d4:ac:80:ed:92:
aa:dc:14:58:c4:28:a8:33:4c:6f:98:7e:e6:3c:0c:eb:8a:90:
83:bb:51:00:f6:a8:38:b9:53:74:d2:ec:56:2d:c0:41:aa:82:
1d:68:dc:10:d2:81:b7:11:f4:8c:d2:cb:81:6c:d1:1a:d4:3b:
25:52:1b:d5:79:23:f8:f6:ee:50:6d:0d:c9:93:d3:48:e7:a0:
bd:d0:db:ae:7f:4f:f5:79:33:1e:d2:47:1e:37:93:11:2e:4f:
77:92:80:58:de:cf:0a:e4:7e:ed:09:f3:9b:fe:c6:71:01:17:
3f:51:1a:a9:3f:f5:31:f8:ee:b2:55:54:55:ed:09:e6:58:69:
23:2a:c1:b4
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUWeGwSH0Jhibe7gnEIYvjwAmOg1owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwOTMwMTI0NDAwWhcNMjUwOTI5MTI0OTAw
WjAzMTEwLwYDVQQDEygzOUJCMEMzM0QzRjc4NjVBREQ0M0NCNEY0ODJBRjY2RDQz
NEE4NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDoUZeNaeF/r
G13wIywUGeOFyZKBbjVLv0Z8me43816EqIiVMmvMkLMgvDzfT5L7fkLfTye4//M/
T91151bb+RiyMI5zz3g1hs50b7vUBzLra1KYmgGqMRUfuS5XxU+Ulyw0t9Mk0sQK
/I+u7LQRiBxp0OrpQtaGBL9oeOXjg/D6kl7cSUW+36BzhxsqqoCb66tRRNGLAMpN
t2E+VTe3TNv+sQ8eb5Irv9ErMTMqoE9XKqs6Nth8Q8RFZyW9ZjGt4Qp4fKEsh0sF
8WuQm3ny89iZNSTLifrGTKJQ7Nt72XVpKuUEBR6rFuQxV/qY2CvKH9FtSTRkTtnN
hbfhq32IPwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDm7DDPT94Za3UPLT0gq9m1D
SoYGMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzIzOTJlMzIzNTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR37MA0GCSqGSIb3DQEB
CwUAA4IBAQApIv81b53rbta5h3DSHhAQ+TcrJkie+uTrls0wg2oqmesWqBHMPZvR
8z+nuy8f5x2AvCPeOs4xZhJgoV2XeyNXsoUhDRcHuo1xZOegpXb9hoXKlAOfVmF9
DfIMcSB9pu5zhbjp+6a3A1OO+t4GLbWGKyp+aGyWcIip1KyA7ZKq3BRYxCioM0xv
mH7mPAzripCDu1EA9qg4uVN00uxWLcBBqoIdaNwQ0oG3EfSM0suBbNEa1DslUhvV
eSP49u5QbQ3Jk9NI56C90Nuuf0/1eTMe0kceN5MRLk93koBY3s8K5H7tCfOb/sZx
ARc/URqpP/Ux+O6yVVRV7QnmWGkjKsG0
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:32 2025 by rpki-client