Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa
File: 3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa (raw, json)
Hash identifier: L87AJoZHw5hdvVGEVXIxh+iVo6FPiLinvkQgnEnkUG4=
Subject key identifier: 93:42:F4:7D:C4:93:53:81:6D:38:CB:87:DE:A1:AF:5C:A3:B0:4C:4B
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 520E59A56E8E28538D5DD3ECE25A5B91A9ECBC66
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa
Signing time: Wed 08 Jan 2025 21:04:05 +0000
ROA not before: Wed 08 Jan 2025 20:59:05 +0000
ROA not after: Wed 07 Jan 2026 21:04:05 +0000
asID: 263702
IP address blocks: 208.91.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0e:59:a5:6e:8e:28:53:8d:5d:d3:ec:e2:5a:5b:91:a9:ec:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Jan 8 20:59:05 2025 GMT
Not After : Jan 7 21:04:05 2026 GMT
Subject: CN=9342F47DC49353816D38CB87DEA1AF5CA3B04C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:57:a3:0e:8e:c2:6f:0b:d6:15:b3:30:7f:
33:74:8a:ee:98:cb:73:4b:95:66:31:19:0e:6f:b3:
b1:7f:0a:6f:5b:d4:7b:8f:17:f6:ae:c7:78:51:97:
31:17:01:9b:35:4b:61:f1:5e:a8:a4:8f:e8:cb:41:
bd:55:fe:19:ff:5f:4b:5f:0d:b5:b4:a0:a1:ef:38:
d7:03:a4:7e:20:18:ee:08:22:a4:3d:e4:15:73:47:
3f:bc:95:a0:25:c0:a9:ea:c3:d3:c2:0f:e3:52:f0:
7b:86:38:20:51:18:5e:fc:e8:1c:12:9f:a1:94:fd:
b2:06:77:24:8e:62:9d:28:98:94:46:56:e6:60:ce:
16:91:1e:5a:17:30:06:0b:4f:ec:b9:64:be:1e:c3:
e1:0c:23:7a:4b:6f:b9:64:21:e8:97:10:7c:85:e3:
e4:f6:d1:8e:41:32:42:81:16:2e:e6:34:7c:6c:68:
7b:b9:f8:08:78:09:f9:08:d7:1a:7c:ed:bd:91:c8:
01:7f:33:d0:8f:aa:c5:26:3c:5e:6c:21:74:29:5b:
79:81:c0:ce:2a:d2:6b:1e:88:91:df:c4:68:99:e5:
4a:9b:ca:dc:06:64:32:6c:d6:23:97:6e:3a:48:76:
6f:6b:9f:e1:09:c3:eb:77:c7:20:4e:73:c5:b4:04:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:F4:7D:C4:93:53:81:6D:38:CB:87:DE:A1:AF:5C:A3:B0:4C:4B
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e20323633373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9b:63:10:b9:98:f8:2f:ce:67:ba:0f:f6:59:72:b8:b8:2b:
ae:7f:b3:ed:94:a0:32:b3:0e:b0:ad:d5:2f:34:f9:95:73:f4:
ac:88:47:99:22:4b:f2:1e:01:bc:76:5f:85:ce:4b:85:12:f4:
da:89:47:59:9e:2f:76:85:f6:c2:37:ac:02:85:c1:6c:83:1f:
a8:c9:13:83:8a:72:29:93:a9:23:33:1f:1f:7b:61:b2:fa:f9:
4a:44:79:f0:8d:83:3d:52:32:73:81:fb:00:9a:55:21:45:a6:
5c:f4:c8:29:d5:c9:35:b2:6d:98:32:b5:10:3b:7c:43:ea:a2:
a3:19:17:5c:22:e9:2f:fe:d4:94:0a:ab:18:d3:bc:d6:ee:65:
bf:4d:43:00:cc:b5:53:c3:22:c5:ae:40:55:e3:2b:28:b1:3d:
5e:58:96:26:7e:7c:66:ae:b1:41:05:8f:b8:db:cf:55:aa:23:
ab:f7:4e:8a:4c:57:6b:11:92:69:6e:43:df:0f:61:09:bd:25:
39:19:a4:8a:bf:0f:9c:d5:70:aa:d3:1d:48:4c:f7:5e:42:b3:
ec:2c:45:60:a0:3b:ef:d0:24:d1:4e:89:c8:22:b2:66:f1:f3:
a1:34:6b:08:8e:6e:98:6b:50:53:4e:78:e7:91:33:bc:86:48:
0a:33:68:19
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUg5ZpW6OKFONXdPs4lpbkansvGYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjUwMTA4MjA1OTA1WhcNMjYwMTA3MjEwNDA1
WjAzMTEwLwYDVQQDEyg5MzQyRjQ3REM0OTM1MzgxNkQzOENCODdERUExQUY1Q0Ez
QjA0QzRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+xXow6Owm8L
1hWzMH8zdIrumMtzS5VmMRkOb7OxfwpvW9R7jxf2rsd4UZcxFwGbNUth8V6opI/o
y0G9Vf4Z/19LXw21tKCh7zjXA6R+IBjuCCKkPeQVc0c/vJWgJcCp6sPTwg/jUvB7
hjggURhe/OgcEp+hlP2yBnckjmKdKJiURlbmYM4WkR5aFzAGC0/suWS+HsPhDCN6
S2+5ZCHolxB8hePk9tGOQTJCgRYu5jR8bGh7ufgIeAn5CNcafO29kcgBfzPQj6rF
JjxebCF0KVt5gcDOKtJrHoiR38RomeVKm8rcBmQybNYjl246SHZva5/hCcPrd8cg
TnPFtARvCQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJNC9H3Ek1OBbTjLh96hr1yj
sExLMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5
ODY2M2Q4MDcwMi8wLzMyMzAzODJlMzkzMTJlMzEzODM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNjMzMzczMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fu8MA0GCSqGSIb3DQEB
CwUAA4IBAQCPm2MQuZj4L85nug/2WXK4uCuuf7PtlKAysw6wrdUvNPmVc/SsiEeZ
IkvyHgG8dl+FzkuFEvTaiUdZni92hfbCN6wChcFsgx+oyRODinIpk6kjMx8fe2Gy
+vlKRHnwjYM9UjJzgfsAmlUhRaZc9Mgp1ck1sm2YMrUQO3xD6qKjGRdcIukv/tSU
CqsY07zW7mW/TUMAzLVTwyLFrkBV4ysosT1eWJYmfnxmrrFBBY+4289VqiOr906K
TFdrEZJpbkPfD2EJvSU5GaSKvw+c1XCq0x1ITPdeQrPsLEVgoDvv0CTRTonIIrJm
8fOhNGsIjm6Ya1BTTnjnkTO8hkgKM2gZ
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:15 2025 by rpki-client