Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
File: 3139382e33372e3131322e302f32302d3234203d3e203533333430.roa (raw, json)
Hash identifier: ZIGw32zc3bVdZidba5amymFZ2E+Lrf+4nESC8VVcLW0=
Subject key identifier: BF:72:E2:4A:3A:DA:91:71:CA:E3:95:BA:CE:7A:BA:0F:2D:AC:5A:CF
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 06A70D00760A9D813287099CB5AF889799D05864
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
Signing time: Wed 14 Aug 2024 14:29:59 +0000
ROA not before: Wed 14 Aug 2024 14:24:59 +0000
ROA not after: Wed 13 Aug 2025 14:29:59 +0000
asID: 53340
IP address blocks: 198.37.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a7:0d:00:76:0a:9d:81:32:87:09:9c:b5:af:88:97:99:d0:58:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Aug 14 14:24:59 2024 GMT
Not After : Aug 13 14:29:59 2025 GMT
Subject: CN=BF72E24A3ADA9171CAE395BACE7ABA0F2DAC5ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:52:2f:11:81:6e:8f:bd:4e:75:dd:61:c9:
11:6f:34:a4:7e:6a:86:45:8c:b7:09:99:17:6f:ad:
97:72:18:86:44:6f:7e:6e:ad:c7:ca:b3:3d:d8:30:
ea:0c:f5:00:ba:1e:17:71:21:7c:ac:61:28:58:da:
92:ae:af:e4:d5:c5:29:cb:4f:b1:1d:35:bd:4b:11:
ef:92:04:26:9d:44:5d:8a:e9:68:62:7e:a3:d7:7d:
f6:8c:46:3a:56:be:40:af:43:16:f8:b2:77:f9:aa:
79:19:d7:64:98:f8:72:38:27:a3:e5:35:b1:b4:05:
51:e2:ff:a7:27:b5:6c:34:01:21:b7:91:86:95:d9:
ac:b3:5d:0c:8d:bb:b4:03:e7:8c:6b:d3:46:11:f3:
83:ef:86:9b:17:27:98:5a:1f:8e:be:95:11:81:ed:
4a:d7:98:23:9c:55:49:89:25:03:fa:df:33:08:9d:
33:72:66:49:27:57:fa:60:ea:65:93:ad:02:73:1a:
1f:bf:5e:47:23:13:8d:0b:ce:ae:c8:ac:57:38:93:
f7:bd:2e:d2:0a:2b:f1:0a:90:6e:7a:2b:b5:3d:34:
db:e9:99:e5:16:57:ef:bf:fd:be:da:e0:c9:b3:c4:
7a:39:13:8f:59:e4:de:07:a0:76:d4:ed:7e:b1:bb:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:E2:4A:3A:DA:91:71:CA:E3:95:BA:CE:7A:BA:0F:2D:AC:5A:CF
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.37.112.0/20
Signature Algorithm: sha256WithRSAEncryption
97:36:8a:fb:dc:4e:12:30:30:6b:01:99:80:7e:c3:3f:69:74:
d4:d6:8b:92:11:6b:02:1f:23:3c:2d:88:ec:9b:92:bd:d0:51:
cc:ae:f9:8b:8f:76:0a:5e:b5:df:6a:c6:60:9c:68:3b:a6:8c:
0f:3f:1f:0a:99:e1:ec:4f:2c:5e:c5:7a:ce:ad:0f:e8:67:5e:
cf:e1:32:09:fb:05:a3:80:aa:4c:52:2f:72:e4:8a:0b:b9:53:
0d:65:8a:44:4b:0e:28:d7:16:a6:59:1e:81:6a:70:49:00:10:
4b:1d:13:95:ed:57:9c:9f:11:6e:5c:9f:96:cf:d6:00:1a:49:
5d:40:1c:c4:43:f2:81:8e:fc:ee:5a:9f:78:9d:72:5b:b4:2a:
b5:be:cf:16:0e:37:35:34:27:e6:67:f6:10:01:5d:67:9b:52:
68:63:68:94:47:e2:30:f0:e8:12:6e:ae:c0:b1:2c:c2:83:83:
bf:ad:5a:74:9b:7e:15:ca:09:ff:b2:ae:2b:5b:c7:6c:6e:db:
57:33:80:a5:93:68:29:9f:7b:3e:20:cb:ef:19:f2:c9:98:80:
28:8c:99:bb:73:f9:f6:b5:32:e9:56:0f:f4:58:f2:da:38:c0:
7e:13:51:33:15:91:65:d4:cc:5e:c1:e8:b2:46:4d:94:5d:57:
93:59:4b:f2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBqcNAHYKnYEyhwmcta+Il5nQWGQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwODE0MTQyNDU5WhcNMjUwODEzMTQyOTU5
WjAzMTEwLwYDVQQDEyhCRjcyRTI0QTNBREE5MTcxQ0FFMzk1QkFDRTdBQkEwRjJE
QUM1QUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllpSLxGBbo+9
TnXdYckRbzSkfmqGRYy3CZkXb62XchiGRG9+bq3HyrM92DDqDPUAuh4XcSF8rGEo
WNqSrq/k1cUpy0+xHTW9SxHvkgQmnURdiuloYn6j1332jEY6Vr5Ar0MW+LJ3+ap5
GddkmPhyOCej5TWxtAVR4v+nJ7VsNAEht5GGldmss10Mjbu0A+eMa9NGEfOD74ab
FyeYWh+OvpURge1K15gjnFVJiSUD+t8zCJ0zcmZJJ1f6YOplk60Ccxofv15HIxON
C86uyKxXOJP3vS7SCivxCpBueiu1PTTb6ZnlFlfvv/2+2uDJs8R6OROPWeTeB6B2
1O1+sbuE7QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFL9y4ko62pFxyuOVus56ug8t
rFrPMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzUzMzMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsF
AAOCAQEAlzaK+9xOEjAwawGZgH7DP2l01NaLkhFrAh8jPC2I7JuSvdBRzK75i492
Cl6132rGYJxoO6aMDz8fCpnh7E8sXsV6zq0P6Gdez+EyCfsFo4CqTFIvcuSKC7lT
DWWKREsOKNcWplkegWpwSQAQSx0Tle1XnJ8Rblyfls/WABpJXUAcxEPygY787lqf
eJ1yW7Qqtb7PFg43NTQn5mf2EAFdZ5tSaGNolEfiMPDoEm6uwLEswoODv61adJt+
FcoJ/7KuK1vHbG7bVzOApZNoKZ97PiDL7xnyyZiAKIyZu3P59rUy6VYP9Fjy2jjA
fhNRMxWRZdTMXsHoskZNlF1Xk1lL8g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:11 2025 by rpki-client