Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa
File: 3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa (raw, json)
Hash identifier: dspuNS7daoFbR+Q7nIr0CILm50Kqw7cvEDkR8RStiqs=
Subject key identifier: 40:9B:19:BD:7A:CF:41:82:16:AC:3B:0B:58:1C:B7:8C:58:B0:01:F7
Certificate issuer: /CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Certificate serial: 6D9018C8F724B426D2EB064548BA7B24644464F0
Authority key identifier: B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa
Signing time: Sun 01 Jan 2023 05:01:08 +0000
ROA not before: Sun 01 Jan 2023 04:56:08 +0000
ROA not after: Sun 31 Dec 2023 05:01:08 +0000
asID: 54110
IP address blocks: 199.182.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:90:18:c8:f7:24:b4:26:d2:eb:06:45:48:ba:7b:24:64:44:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Validity
Not Before: Jan 1 04:56:08 2023 GMT
Not After : Dec 31 05:01:08 2023 GMT
Subject: CN=409B19BD7ACF418216AC3B0B581CB78C58B001F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:fc:d1:23:e3:ea:46:b5:68:99:7d:0a:c3:
70:ef:98:7a:cf:56:af:d7:6a:76:1f:a9:1f:97:f4:
90:26:de:50:cb:69:04:7e:25:87:5f:2f:d5:22:60:
70:6b:86:6e:fe:c2:63:c2:b5:a9:74:ff:ee:60:e4:
c3:51:78:06:61:63:45:e0:02:78:66:5d:e8:3d:f9:
ea:47:47:76:8a:ee:14:3d:b1:18:39:83:b9:c2:36:
b3:95:38:c1:28:43:28:40:41:bc:61:77:3c:81:33:
74:5e:c1:79:df:3a:89:7d:02:0d:46:ea:5a:4d:e9:
7c:53:b9:da:21:2f:ae:2d:4e:d3:02:96:56:0d:69:
ef:51:0c:3e:01:84:9a:6f:1c:ae:50:16:c5:a7:b5:
b1:7d:b4:48:56:27:90:f2:d5:d7:7b:8f:2b:21:eb:
1b:e2:c6:35:b3:cb:70:20:54:82:4a:8d:8c:65:34:
c6:a1:6d:16:3b:1c:82:45:64:73:bf:78:58:25:3b:
9c:df:b5:c7:78:88:db:da:79:98:bf:70:02:82:cf:
43:ad:6b:99:06:6c:ed:db:2c:2f:a1:5a:1d:c4:4a:
a0:b5:76:3c:1c:81:2a:5c:94:ac:54:bc:ac:63:88:
38:cb:ba:52:99:9a:e0:52:a4:87:5e:10:b1:2d:74:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:19:BD:7A:CF:41:82:16:AC:3B:0B:58:1C:B7:8C:58:B0:01:F7
X509v3 Authority Key Identifier:
keyid:B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/B1B2E07C5C25C705C8553B96455EDC89DCACE85C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:cb:68:76:96:90:5c:85:be:ae:d5:6e:a0:58:60:a6:18:61:
8e:a3:86:7b:18:38:a7:9f:b0:1a:c0:2f:ea:40:85:4f:56:25:
15:19:7b:6e:fe:be:74:8a:7a:4f:50:4b:8d:10:70:72:dd:a9:
71:5b:b6:1e:0d:bc:47:5a:09:0d:02:3c:b6:be:23:12:58:36:
da:55:98:da:a9:df:5c:84:1b:02:5d:13:94:f4:d2:49:fd:49:
17:e4:8a:b2:a4:a4:5d:c7:88:62:b1:32:bc:4b:ef:4b:c9:f4:
9e:cc:53:f1:b4:22:af:a9:42:fb:8a:0f:a9:91:65:de:a7:25:
8c:4b:41:97:31:40:ba:98:23:ba:af:42:7e:f3:01:f0:10:63:
0f:84:19:00:70:75:da:b7:17:fe:14:91:05:67:92:10:3e:4c:
02:c0:77:1f:42:29:91:63:fb:98:54:aa:1a:87:ca:63:6b:1f:
0d:4c:8f:0c:ee:cf:de:1e:c3:37:b6:42:db:f3:ea:16:6d:f6:
0f:29:75:c7:26:b6:e6:9a:a0:86:07:e6:7a:6f:a3:d4:06:75:
55:37:ff:24:e6:59:59:58:65:df:80:59:58:e5:f2:9a:c5:27:
da:d2:7c:f7:0e:92:2b:e7:43:d0:89:6f:3c:bc:bd:ad:b9:b8:
0c:10:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org