Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa
File: 3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa (raw, json)
Hash identifier: k8YAmXwgseR1MDBhKjpmkyLe8YOjg0KewZvcEb1d7jE=
Subject key identifier: D1:C2:33:7C:DB:E6:25:07:12:20:68:5A:F0:0C:FC:20:7B:FF:DC:14
Certificate issuer: /CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Certificate serial: 16B391AEDFC8AEC96CA9166F038CE1E7C8170D93
Authority key identifier: B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa
Signing time: Sun 01 Jan 2023 05:01:16 +0000
ROA not before: Sun 01 Jan 2023 04:56:16 +0000
ROA not after: Sun 31 Dec 2023 05:01:16 +0000
asID: 54110
IP address blocks: 199.182.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b3:91:ae:df:c8:ae:c9:6c:a9:16:6f:03:8c:e1:e7:c8:17:0d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Validity
Not Before: Jan 1 04:56:16 2023 GMT
Not After : Dec 31 05:01:16 2023 GMT
Subject: CN=D1C2337CDBE625071220685AF00CFC207BFFDC14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:14:e8:27:22:22:36:42:e2:73:0d:13:05:
12:93:1c:60:3f:81:3a:17:ad:c7:49:e6:c3:96:38:
8d:50:33:f7:59:dc:cf:a7:da:d4:fc:a0:9f:18:47:
df:ce:52:35:0e:4f:f2:c4:ed:4b:b9:94:49:b6:0c:
e6:db:ed:ca:00:38:df:29:64:a1:e5:85:da:5c:db:
ea:4d:b2:58:d0:bd:ac:a0:6c:8b:7b:bc:32:b5:3b:
5b:f8:fa:09:03:c2:7d:6a:f3:ee:30:0a:f3:90:27:
1c:d6:e1:6a:99:a5:b6:6c:00:c4:19:16:ab:d3:7d:
66:c9:94:9f:62:e4:72:33:1c:0a:df:07:76:bf:81:
24:6f:05:8a:1d:60:9f:b0:20:1e:1c:ed:5a:9b:70:
10:6e:2f:d2:23:20:3b:9d:9e:e4:f1:dc:46:50:45:
4b:3d:55:98:d1:6a:cc:bb:d2:b8:21:6a:c0:9a:b9:
c1:b5:54:c3:46:09:8c:37:77:af:9e:7b:78:de:1f:
cb:75:65:6b:16:95:a9:6f:e1:a5:74:b2:0a:22:03:
b7:bb:b7:7a:35:5f:1d:5f:e3:cc:07:5c:96:c2:0d:
43:16:09:de:37:35:c8:73:54:46:73:1b:db:48:dc:
f2:95:52:71:f5:ab:c4:f7:6f:23:b1:bd:63:eb:29:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:33:7C:DB:E6:25:07:12:20:68:5A:F0:0C:FC:20:7B:FF:DC:14
X509v3 Authority Key Identifier:
keyid:B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/B1B2E07C5C25C705C8553B96455EDC89DCACE85C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.133.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e8:a0:af:0b:25:3e:d0:eb:c0:be:1c:a4:89:92:e6:33:7b:
f6:2d:4a:2e:94:27:01:9c:62:70:dc:0a:62:6a:cf:f3:b3:b1:
e6:f3:67:ed:85:63:ed:c5:37:3b:72:8c:19:69:f0:90:a8:83:
bc:ab:c4:48:e4:6a:88:b1:46:c9:42:37:82:82:21:17:46:80:
82:70:f2:42:8f:8f:cf:f2:90:a0:5e:b5:9e:a0:9b:1a:3d:24:
64:2c:1d:5e:57:f1:5b:9f:6d:1e:5d:51:bd:8d:5f:04:05:86:
77:1a:e7:ca:4f:2f:96:c3:6c:9c:3b:95:39:1d:8e:74:f8:19:
ae:b0:9e:5d:96:ab:8e:2a:83:f8:72:71:0c:d5:7d:07:bc:08:
9e:e3:de:80:11:0f:b6:36:78:26:2e:00:01:74:84:f5:8e:1f:
97:d2:94:38:0b:b8:1c:b0:a5:4e:6a:97:09:b1:d2:3f:1d:31:
1e:a9:57:bf:c1:3a:ff:3c:84:bb:d2:ed:5e:d6:c3:33:23:db:
d5:c5:3c:3b:e1:46:e9:35:d6:4b:15:89:aa:67:63:86:ab:c1:
91:e3:99:38:95:b8:14:ee:a4:29:c5:ca:4a:07:e4:27:d9:18:
9d:a7:57:2e:ff:38:bd:d0:b2:d5:79:ea:df:a0:6a:7b:e6:0e:
ea:eb:0d:97
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFrORrt/IrslsqRZvA4zh58gXDZMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkyNzdkMGE5YjQwMjMxMmFlMzc4YmVlNzg4MDg3YjJh
MjA5MWM0YTJhMzI5NjBjZmMwHhcNMjMwMTAxMDQ1NjE2WhcNMjMxMjMxMDUwMTE2
WjAzMTEwLwYDVQQDEyhEMUMyMzM3Q0RCRTYyNTA3MTIyMDY4NUFGMDBDRkMyMDdC
RkZEQzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5wU6CciIjZC
4nMNEwUSkxxgP4E6F63HSebDljiNUDP3WdzPp9rU/KCfGEffzlI1Dk/yxO1LuZRJ
tgzm2+3KADjfKWSh5YXaXNvqTbJY0L2soGyLe7wytTtb+PoJA8J9avPuMArzkCcc
1uFqmaW2bADEGRar031myZSfYuRyMxwK3wd2v4EkbwWKHWCfsCAeHO1am3AQbi/S
IyA7nZ7k8dxGUEVLPVWY0WrMu9K4IWrAmrnBtVTDRgmMN3evnnt43h/LdWVrFpWp
b+GldLIKIgO3u7d6NV8dX+PMB1yWwg1DFgneNzXIc1RGcxvbSNzylVJx9avE928j
sb1j6ymfHQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNHCM3zb5iUHEiBoWvAM/CB7
/9wUMB8GA1UdIwQYMBaAFLGy4HxcJccFyFU7lkVe3IncrOhcMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NmJhM2JkZDQzZDNjLzAv
QjFCMkUwN0M1QzI1QzcwNUM4NTUzQjk2NDU1RURDODlEQ0FDRTg1Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1hZmQ4LTcwZGQ5N2JkMDIzMi82OTI3
N2QwYTliNDAyMzEyYWUzNzhiZWU3ODgwODdiMmEyMDkxYzRhMmEzMjk2MGNmYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTZi
YTNiZGQ0M2QzYy8wLzMxMzkzOTJlMzEzODMyMmUzMTMzMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM0MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7aFMA0GCSqGSIb3DQEB
CwUAA4IBAQCq6KCvCyU+0OvAvhykiZLmM3v2LUoulCcBnGJw3Apias/zs7Hm82ft
hWPtxTc7cowZafCQqIO8q8RI5GqIsUbJQjeCgiEXRoCCcPJCj4/P8pCgXrWeoJsa
PSRkLB1eV/Fbn20eXVG9jV8EBYZ3GufKTy+Ww2ycO5U5HY50+BmusJ5dlquOKoP4
cnEM1X0HvAie496AEQ+2NngmLgABdIT1jh+X0pQ4C7gcsKVOapcJsdI/HTEeqVe/
wTr/PIS70u1e1sMzI9vVxTw74UbpNdZLFYmqZ2OGq8GR45k4lbgU7qQpxcpKB+Qn
2Ridp1cu/zi90LLVeerfoGp75g7q6w2X
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org