Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
File: 3136372e3235332e34372e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier: zJNCozXxDICC5zpDIs4gyGhodkggMoa7iHzvSH/zC0Y=
Subject key identifier: BC:69:2A:49:F4:D5:1D:78:86:92:A1:69:F2:C4:6A:1C:42:23:81:D5
Certificate issuer: /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial: 3C66E42F89EF1803541EB5C4D7336CBF51EA60E7
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
Signing time: Fri 28 Mar 2025 00:17:19 +0000
ROA not before: Fri 28 Mar 2025 00:12:19 +0000
ROA not after: Fri 27 Mar 2026 00:17:19 +0000
asID: 50104
IP address blocks: 167.253.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:66:e4:2f:89:ef:18:03:54:1e:b5:c4:d7:33:6c:bf:51:ea:60:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Validity
Not Before: Mar 28 00:12:19 2025 GMT
Not After : Mar 27 00:17:19 2026 GMT
Subject: CN=BC692A49F4D51D788692A169F2C46A1C422381D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:8c:01:33:85:14:0a:ef:c2:31:67:f6:dd:
87:4f:4e:ab:a0:eb:0f:e7:50:6d:22:a2:80:be:53:
fa:92:7d:47:75:e8:84:ef:1f:bb:d4:be:57:e2:c3:
db:f1:a3:60:b8:20:98:d8:06:e6:ed:fd:a3:1c:ce:
77:1f:ea:62:2f:85:8b:64:b8:0c:74:04:fc:8b:0a:
9b:43:6d:df:83:9b:10:23:58:8f:e5:4c:00:f3:b5:
81:bf:ea:f0:9f:65:dc:7a:40:e3:f4:aa:98:3b:c9:
e9:3d:5d:9d:46:22:95:70:f7:ec:8f:64:0f:a3:d2:
78:03:8e:f0:01:a1:a6:59:65:64:c3:d1:89:6a:5f:
4a:45:31:d4:fd:73:e2:10:27:67:c7:a2:44:2b:fc:
11:59:0a:18:6f:0a:fc:44:a6:bc:5c:8f:f5:40:ff:
9a:1c:35:cd:a3:c5:24:07:c2:29:3f:ac:19:2b:58:
a6:e1:cf:ee:a6:4f:ee:b0:f8:c8:bb:d8:44:e4:f8:
e0:d6:8c:e1:d4:ff:6f:4e:a7:0b:0a:93:8f:ff:28:
40:02:ed:bc:66:51:29:ad:ef:60:17:81:74:02:9e:
df:4a:09:77:9a:18:3d:ea:bb:90:6d:99:84:bc:90:
25:1e:16:96:98:5c:ce:d7:59:b9:d2:fd:65:c1:52:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:69:2A:49:F4:D5:1D:78:86:92:A1:69:F2:C4:6A:1C:42:23:81:D5
X509v3 Authority Key Identifier:
keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.253.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5b:9c:3b:50:a6:90:57:30:15:93:7e:2c:fa:37:23:4b:e1:
7f:6a:48:74:c8:33:11:b2:ec:e2:81:2d:df:8d:05:25:2c:da:
87:cf:c3:53:c4:5f:99:31:37:ab:9b:74:44:2d:ca:f1:f3:72:
6e:44:ef:e7:75:49:b8:6c:50:14:74:3e:72:3a:cc:5d:10:19:
69:4e:2b:70:f8:0d:8c:7e:b1:8c:b8:3f:27:32:97:8d:c2:17:
58:fe:7c:44:5a:81:4e:33:e6:c7:0b:d5:73:bd:11:3f:3b:f5:
23:8a:ac:d0:10:bb:8c:6c:b2:62:f3:7d:75:a8:2a:17:41:e8:
c6:d2:87:ee:93:d1:28:f2:ae:03:e7:81:31:06:29:6a:31:29:
6f:2d:39:4f:14:03:83:48:f8:11:eb:c0:18:8f:25:08:cd:ac:
5f:3a:7e:08:fd:72:c6:c2:48:b3:3b:b7:8a:56:83:dc:b1:ed:
a2:5d:53:5b:c2:06:b7:0f:1c:c3:ef:fa:e0:3f:52:8c:be:22:
9a:d6:42:30:fa:ab:bd:34:11:98:97:21:4a:40:63:8f:fd:56:
3d:2c:e4:0e:20:30:21:d7:91:3e:54:41:a8:a2:3a:10:d1:e6:
5b:81:47:a4:76:b2:cf:f6:49:36:40:45:df:14:fa:1f:8f:0e:
89:a7:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:29 2025 by rpki-client