Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa
File: 3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa (raw, json)
Hash identifier: oOaX+AxgeYEtAnC/Ytl0tABr8Pqb6sE/KlKBI8UjaqM=
Subject key identifier: 04:55:56:46:ED:4D:D0:23:84:DD:7F:26:78:17:83:98:25:DA:F4:0A
Certificate issuer: /CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Certificate serial: 74487D46B6A0B3276575ADB071E8CC0217EAE853
Authority key identifier: 47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa
Signing time: Tue 03 Jan 2023 20:26:57 +0000
ROA not before: Tue 03 Jan 2023 20:21:57 +0000
ROA not after: Tue 02 Jan 2024 20:26:57 +0000
asID: 54110
IP address blocks: 199.182.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:48:7d:46:b6:a0:b3:27:65:75:ad:b0:71:e8:cc:02:17:ea:e8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Validity
Not Before: Jan 3 20:21:57 2023 GMT
Not After : Jan 2 20:26:57 2024 GMT
Subject: CN=04555646ED4DD02384DD7F267817839825DAF40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:82:e9:0b:ed:e6:08:ee:18:d1:f8:5a:71:
77:69:de:25:bf:73:7d:0d:d0:a7:fe:3a:eb:84:17:
50:e1:2c:9d:65:dc:40:1f:5d:dd:e8:77:7a:0e:50:
f9:1c:1d:72:84:12:3a:60:8a:f7:ce:78:fd:b7:5b:
d8:84:c6:a3:ad:37:7d:37:28:36:4a:3d:bc:d7:41:
f3:e0:dc:46:a3:9a:56:82:a7:19:b1:5f:7e:50:04:
41:d7:0d:fd:ff:22:3a:b5:3c:e1:49:6a:d3:42:87:
f4:ce:96:b3:01:38:30:da:1a:fc:b7:f6:1e:1e:b7:
a8:8e:73:89:8d:8d:b8:d6:34:5d:2e:9b:51:93:21:
15:88:fc:7b:3a:77:72:72:1f:c8:5d:44:52:d4:9b:
0c:d7:7a:3f:22:0d:2c:71:15:28:10:ed:20:85:a6:
d1:b1:4d:f8:74:bd:b5:73:4d:c5:cf:82:bb:9f:90:
4c:1e:70:aa:8b:a2:ed:b7:d7:f5:15:3f:98:fa:87:
67:f0:69:0b:32:7a:5d:39:66:6e:6f:d0:b1:a3:02:
fa:2d:c9:8c:9e:0c:41:dd:20:e2:a8:53:c7:b4:61:
5c:d0:49:90:0d:d8:11:c7:de:16:e0:fd:37:8b:cc:
2e:03:27:cd:07:18:f8:de:89:b5:8b:dd:03:bd:50:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:56:46:ED:4D:D0:23:84:DD:7F:26:78:17:83:98:25:DA:F4:0A
X509v3 Authority Key Identifier:
keyid:47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/475558BF6CC83110141F0325D912A869EB234A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133332e302f32342d3234203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.133.0/24
Signature Algorithm: sha256WithRSAEncryption
91:de:6b:16:78:61:f7:cb:f4:74:b9:92:21:73:6c:a5:fd:66:
27:c2:10:0e:55:28:c1:d0:17:f0:ba:d5:fa:bd:49:cb:89:65:
6c:e2:3c:71:9c:93:28:42:2b:8e:25:16:86:36:40:9c:4c:3f:
68:f2:db:48:65:8c:58:e0:59:c5:a8:1b:61:62:7d:0a:c9:d1:
69:98:b2:c0:39:e7:07:63:56:25:a6:1e:e9:71:60:a8:88:42:
04:d2:eb:6e:5e:16:94:f3:b0:ad:10:84:a4:ed:91:55:a6:72:
85:5a:10:5d:59:70:3e:88:d1:a3:9c:7a:84:da:68:bf:9a:29:
35:2f:63:be:6f:2f:79:40:bb:f6:a2:1c:e8:34:3f:94:e8:23:
18:1d:31:d5:e0:da:f6:14:ec:55:84:9d:bd:f7:b8:be:2c:a9:
7a:eb:8b:1a:03:a9:ad:d7:3a:8a:81:6b:80:83:52:0e:5a:b4:
67:6c:d2:00:bf:c4:f0:a6:cf:37:5a:47:b7:e0:1f:c7:e6:eb:
a3:61:bd:e0:30:11:32:cb:75:60:e1:f5:c3:95:a6:01:5a:6c:
55:ab:0e:df:a5:06:a0:6b:b5:95:37:dc:6d:0c:48:08:89:f4:
6d:e1:50:6d:a0:1a:6a:67:b9:8b:f4:04:8f:23:b8:1e:bc:bc:
e6:0a:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org