Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa
File: 3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: KAmPsUsz1FV/eLm35H8UzrD4xJ94/OeUmT93okN9FwA=
Subject key identifier: 89:A9:9F:21:6F:78:45:74:30:B8:AF:C0:DB:0A:D9:61:6C:97:16:81
Certificate issuer: /CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Certificate serial: 3F248AD335B07DD9A8AECB91DBEA1507163FE766
Authority key identifier: B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa
Signing time: Sun 01 Jan 2023 05:01:04 +0000
ROA not before: Sun 01 Jan 2023 04:56:04 +0000
ROA not after: Sun 31 Dec 2023 05:01:04 +0000
asID: 9449
IP address blocks: 199.182.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:24:8a:d3:35:b0:7d:d9:a8:ae:cb:91:db:ea:15:07:16:3f:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Validity
Not Before: Jan 1 04:56:04 2023 GMT
Not After : Dec 31 05:01:04 2023 GMT
Subject: CN=89A99F216F78457430B8AFC0DB0AD9616C971681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:a4:11:90:e9:81:81:53:de:40:dd:f0:e7:
23:3f:35:82:c8:63:34:87:4b:12:23:83:a9:6e:b7:
b8:5f:a7:0f:c9:b1:88:fc:67:26:e9:30:64:53:64:
8a:4d:17:c4:e4:0c:fe:77:9f:20:ea:e5:4e:ae:8a:
e5:72:81:f7:5c:7e:8a:83:a0:e6:c1:03:5e:09:54:
ee:1f:18:2b:ae:c4:cb:a0:09:be:94:cf:18:03:34:
bf:29:b2:16:07:1e:58:f0:32:38:d9:71:64:a1:7f:
9b:08:81:7d:1f:be:7c:6f:fb:8e:64:4e:0f:fa:33:
64:ef:39:8b:5f:ff:00:8b:30:c1:9e:2f:62:cd:f6:
fb:af:a9:d8:1c:78:9b:41:3d:3c:bf:9c:8c:87:15:
e5:3a:35:6c:b2:fa:a3:e6:81:dc:0d:07:c0:28:67:
9e:a7:81:35:fc:31:b0:48:d2:05:1d:b0:ab:e8:49:
1e:f6:da:37:9f:30:10:36:f6:f0:6f:81:1d:5f:2c:
2e:d0:3c:59:4b:0a:87:09:df:c6:84:b0:21:19:62:
f2:71:d2:2f:99:5d:50:f7:8c:57:46:38:3d:ab:55:
8f:fe:09:4d:68:62:99:b9:cd:f0:45:bb:8a:23:27:
d6:04:c2:df:02:a6:e2:8c:40:f5:f0:35:c0:d2:fe:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:9F:21:6F:78:45:74:30:B8:AF:C0:DB:0A:D9:61:6C:97:16:81
X509v3 Authority Key Identifier:
keyid:B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/B1B2E07C5C25C705C8553B96455EDC89DCACE85C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133342e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.134.0/24
Signature Algorithm: sha256WithRSAEncryption
59:89:a2:0c:ce:b8:55:06:cd:00:ee:6f:91:57:26:6d:af:43:
2b:ad:80:b7:17:e9:44:74:8f:83:ad:a5:1c:52:15:31:d8:39:
b7:90:e5:3e:b3:16:54:d2:32:ed:59:a7:e8:04:15:e1:da:62:
9f:de:84:ed:77:d3:dc:d1:71:6b:05:16:58:cc:55:97:12:28:
7c:82:df:04:3e:34:81:8c:d6:1d:37:3d:9b:0c:58:92:b4:9a:
6c:75:b2:1b:af:39:bc:eb:87:c5:e2:ba:a5:74:87:a0:1d:76:
25:59:72:cf:da:0d:af:ff:f3:65:be:bb:6a:69:2d:2c:6c:5e:
ed:9a:fc:48:c1:6f:56:d8:80:c0:bb:70:fc:47:d2:d0:f6:e5:
74:5a:03:b0:e9:4b:0b:08:f2:7a:3a:c7:f7:c9:46:d6:39:a9:
dd:8a:37:96:d8:c6:cc:23:a9:b2:c1:60:48:0c:00:4d:1a:92:
48:e8:8a:44:58:40:3b:c2:bf:3b:12:62:1a:a0:a4:93:61:b8:
1d:80:6b:ab:67:fc:9f:32:c0:57:48:34:9b:8a:17:e0:93:d4:
e2:6f:c3:39:ea:a9:60:54:4e:1c:08:ef:66:73:42:2c:42:ef:
89:28:1f:d0:a5:13:68:98:85:ac:2b:93:df:2e:e6:7e:76:0f:
ff:ca:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org