Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa
File: 3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: 95Lr+N0fBozitwTIWNo0YllYDnrV+3/D/pu4I///FCw=
Subject key identifier: 25:2E:FD:3C:C3:17:26:80:59:5A:16:76:EE:9A:99:99:08:A7:2B:03
Certificate issuer: /CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Certificate serial: 2E20CDEE8B818D2BCD47784612E9CF5CEF7218D4
Authority key identifier: B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa
Signing time: Sun 01 Jan 2023 05:00:58 +0000
ROA not before: Sun 01 Jan 2023 04:55:58 +0000
ROA not after: Sun 31 Dec 2023 05:00:58 +0000
asID: 9449
IP address blocks: 199.182.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:20:cd:ee:8b:81:8d:2b:cd:47:78:46:12:e9:cf:5c:ef:72:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Validity
Not Before: Jan 1 04:55:58 2023 GMT
Not After : Dec 31 05:00:58 2023 GMT
Subject: CN=252EFD3CC3172680595A1676EE9A999908A72B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:dc:9d:09:82:d6:db:43:35:ac:6f:d9:ca:
3f:7a:b1:92:c3:66:d7:aa:ec:b4:1d:b3:81:5a:c1:
c2:76:cd:29:60:62:2f:31:75:5b:b7:fe:8b:dd:1d:
2a:d5:3e:86:1a:3a:6e:27:06:a3:04:eb:99:75:39:
ea:95:27:84:2d:42:c6:ec:cf:11:ab:95:99:dc:db:
50:f2:f3:a6:51:58:e9:ac:5c:25:14:9f:9c:ea:e8:
34:05:63:eb:0e:ab:8c:8c:9f:93:ef:d3:38:ca:09:
d8:13:9a:a5:34:ae:b2:f9:81:6b:ad:2a:db:b0:ee:
b9:f2:d2:08:a4:ca:36:28:65:9c:d2:07:ed:0a:2a:
4c:7e:0f:d8:4d:0a:e1:16:4a:f0:39:80:06:da:dc:
39:40:72:c6:12:aa:23:5d:b9:4f:02:e0:45:00:d6:
8e:93:c7:4f:af:9f:e8:a9:c6:2f:1a:85:90:91:6a:
50:2c:5a:a4:45:62:99:53:b3:ac:b3:68:10:6f:82:
fc:d1:9e:32:3f:15:04:82:b2:e5:90:d2:df:b2:33:
d0:49:29:4f:90:3f:64:1f:74:32:4f:ac:f0:2a:2e:
64:a1:76:05:bb:14:9f:8a:a8:15:62:28:19:99:fa:
c8:2a:d9:09:d3:db:b3:7a:89:03:f7:4b:5e:06:0f:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:FD:3C:C3:17:26:80:59:5A:16:76:EE:9A:99:99:08:A7:2B:03
X509v3 Authority Key Identifier:
keyid:B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/B1B2E07C5C25C705C8553B96455EDC89DCACE85C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/24
Signature Algorithm: sha256WithRSAEncryption
21:36:f0:1b:bd:8d:6e:cf:b8:d1:7d:a3:ac:d2:90:d4:c5:e0:
10:7f:47:7c:e1:53:63:6f:f1:22:b3:c9:6c:89:74:2e:bc:ae:
09:3a:a1:11:b0:b1:00:f0:ca:f4:f3:32:40:5a:c9:3a:d1:64:
84:74:a5:40:f0:0e:43:db:a5:c6:ac:58:ec:71:95:77:2d:44:
7a:b4:a4:bc:bf:72:4f:f5:0e:6d:2c:2c:16:26:0c:0d:58:e6:
77:4a:8d:72:65:81:af:e1:69:c2:c7:53:c9:05:95:45:88:62:
f5:1c:ad:2d:de:0c:c3:85:bb:cb:7c:22:a1:45:74:be:44:9a:
50:08:15:08:bc:a9:b6:9f:06:8a:fa:43:68:76:4f:6b:41:1e:
63:b3:29:f7:ce:f8:5c:27:f7:1b:19:47:a6:a0:a4:4a:91:b9:
73:2c:a4:15:a9:06:3e:0c:6e:19:69:ee:f1:d0:f1:41:e6:19:
d4:de:8e:d6:33:d1:1c:25:0b:6e:12:36:50:14:6d:8c:4f:ad:
7b:fd:8d:2f:ea:33:c1:02:bb:74:f1:4b:b8:01:6a:6b:5b:87:
f3:cd:25:b8:3c:d4:1c:17:a3:8d:c9:08:81:17:cf:82:e4:97:
57:b2:c5:11:f5:6d:f9:b6:b1:d1:41:34:8b:5f:de:6c:8e:21:
5b:00:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org