Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa
File: 32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa (raw, json)
Hash identifier: j2TLL/ZKHSqye0MZkm8jr0FBt99F/dl4C4quX8bEqDU=
Subject key identifier: 08:BE:1E:4E:33:4E:AD:8D:11:0A:77:8A:F9:5C:42:3F:99:96:40:49
Certificate issuer: /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial: 17260BF2F2F06F406226079684268308A7871212
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa
Signing time: Wed 08 Jan 2025 14:43:20 +0000
ROA not before: Wed 08 Jan 2025 14:38:20 +0000
ROA not after: Wed 07 Jan 2026 14:43:20 +0000
asID: 200775
IP address blocks: 23.144.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:26:0b:f2:f2:f0:6f:40:62:26:07:96:84:26:83:08:a7:87:12:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Validity
Not Before: Jan 8 14:38:20 2025 GMT
Not After : Jan 7 14:43:20 2026 GMT
Subject: CN=08BE1E4E334EAD8D110A778AF95C423F99964049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:a1:69:38:a4:6d:1e:d9:d5:3f:b5:8f:ef:
6d:b7:40:03:91:6f:69:02:62:a4:37:28:97:4b:0b:
12:6a:5c:24:26:d6:1c:e2:3a:a8:c9:cd:58:d6:2c:
0a:9e:b2:ce:81:4b:a5:48:3d:0b:45:72:43:22:85:
bf:01:95:1c:53:b3:8e:ca:69:89:f2:53:2f:06:11:
f5:dc:f7:b5:51:61:98:40:1c:57:43:11:db:3f:5d:
ec:a3:01:1f:01:72:a8:74:65:43:cf:82:83:ab:7e:
dc:c7:4f:ca:84:70:b4:c0:f0:4b:18:82:c8:8a:19:
82:c6:bc:70:e4:37:f2:19:2a:a1:87:d7:0b:c2:98:
36:75:55:0c:32:bc:d9:46:1c:20:05:96:93:88:44:
36:34:dc:a8:ae:ad:a8:67:2a:b7:f8:0a:13:47:2c:
76:09:69:d4:f4:7b:6f:be:d0:11:5f:0a:ee:39:e4:
0e:9b:9c:6e:12:5a:29:17:ab:10:c8:69:88:0b:01:
50:45:9e:31:1c:ed:84:85:e1:e9:cb:98:ba:ec:b9:
03:eb:b9:8d:fc:e8:d6:87:af:a5:7b:38:6d:66:64:
52:5b:e7:a8:bf:cd:05:aa:b7:d6:e1:c8:72:73:c8:
1d:f0:4a:78:76:a4:ad:d6:6f:02:4b:3d:3a:04:22:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:1E:4E:33:4E:AD:8D:11:0A:77:8A:F9:5C:42:3F:99:96:40:49
X509v3 Authority Key Identifier:
keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.144.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d0:9c:ff:d5:08:3a:9e:3a:ec:ca:7e:84:f6:82:35:6b:ae:
4d:e5:10:15:95:45:08:c0:1d:8f:bd:f4:11:43:d9:21:8b:7d:
06:55:a3:27:52:08:f4:c0:65:8e:90:ad:dd:a5:44:5c:5d:03:
22:d2:31:d7:df:1b:a2:12:62:83:68:4b:da:bd:ab:75:08:0f:
aa:a8:83:3f:dd:67:67:21:ac:32:50:82:b5:24:75:89:10:98:
ef:63:6d:a3:65:10:55:af:92:c1:88:f7:25:4d:25:5d:1a:43:
a1:42:c4:c5:6a:24:4c:80:1d:ec:31:96:f5:7b:95:c7:07:c3:
1e:10:cd:c7:83:76:7e:3f:04:ea:cf:6c:11:fe:d9:58:3f:9c:
33:12:b8:0a:52:d8:60:0b:44:6e:b2:f0:8c:ec:04:1f:51:40:
17:03:16:31:47:63:05:49:ad:2a:7a:f3:a7:7e:97:16:7b:49:
44:1e:89:ac:ce:5f:fc:6a:7b:d3:7c:87:45:d5:0d:4b:23:2f:
e5:d1:61:5b:9e:5a:11:da:cb:08:53:8c:0c:9b:9e:5e:80:39:
5f:3b:dd:53:0d:0d:d2:fe:d9:8d:e6:2e:00:2a:24:2b:1d:33:
b8:9f:fc:7b:43:de:29:c1:31:e1:97:a5:b9:de:12:16:04:bd:
87:4e:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:35:56 2025 by rpki-client