Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323132323139.roa
File: 3230382e39312e3138392e302f32342d3234203d3e20323132323139.roa (raw, json)
Hash identifier: mX7Wr2laMg9vAxxYIzao4wz8Oq9ToKeKMqHsisZ3cKQ=
Subject key identifier: 57:71:5F:E6:DF:97:98:D0:61:2C:2B:56:7E:D5:5A:36:57:35:E9:E0
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 6F15E2EA71E399D5427168CAB3D569CCA0A6EEAC
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323132323139.roa
Signing time: Wed 05 Apr 2023 17:23:24 +0000
ROA not before: Wed 05 Apr 2023 17:18:24 +0000
ROA not after: Wed 03 Apr 2024 17:23:24 +0000
asID: 212219
IP address blocks: 208.91.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:15:e2:ea:71:e3:99:d5:42:71:68:ca:b3:d5:69:cc:a0:a6:ee:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Apr 5 17:18:24 2023 GMT
Not After : Apr 3 17:23:24 2024 GMT
Subject: CN=57715FE6DF9798D0612C2B567ED55A365735E9E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:f0:5f:da:93:f1:61:40:96:28:24:79:8e:
e2:05:f6:c7:b8:b9:05:6b:8e:08:f1:08:e4:69:3f:
ad:d0:15:f3:e9:cb:ea:fb:62:45:09:f3:92:76:a0:
1c:87:48:22:dc:56:d2:de:a3:6e:32:d6:f8:60:3e:
6d:c6:e3:28:02:ff:56:00:28:80:1e:d5:e5:47:05:
37:32:c5:76:c2:ea:98:2b:06:ed:bf:3f:41:7e:26:
8c:cb:06:73:d2:07:cc:58:87:0e:ce:6f:0f:df:ff:
fc:39:98:78:dc:d0:31:09:2e:20:59:ba:75:a8:22:
64:6e:f8:dd:62:b8:f6:00:6c:90:1a:90:f9:fb:f9:
25:5e:7f:08:47:1c:5b:97:7d:1d:b8:c4:c7:43:45:
3a:64:3e:34:91:dd:bb:13:f7:51:39:b7:7f:7c:9e:
02:01:41:f4:ea:60:eb:b3:e3:7c:73:7b:7c:71:24:
cf:7a:b3:d7:28:a8:6e:97:cd:51:2f:49:89:32:27:
12:0e:47:ba:2d:06:0f:1f:37:82:36:d6:04:f1:d7:
29:2d:98:5f:fb:9e:05:10:1c:8b:99:d5:e7:3b:61:
e6:29:80:50:3d:1c:da:66:80:a7:7b:a7:c8:5d:57:
24:f2:16:72:67:a4:f3:5a:54:71:71:d7:9e:94:fb:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:5F:E6:DF:97:98:D0:61:2C:2B:56:7E:D5:5A:36:57:35:E9:E0
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323132323139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:23:98:07:d7:c2:f3:3a:bf:29:8d:e6:38:e8:a8:6f:b8:
65:65:7e:2b:51:46:3c:92:52:23:ac:69:71:c0:d8:c9:6e:1d:
ee:e0:5a:26:b2:9d:ed:66:c4:16:93:f5:65:af:ed:79:db:a7:
43:44:3a:53:14:97:2e:73:7d:e9:c7:a4:1b:61:5d:99:47:74:
cc:39:ef:53:d2:01:36:e5:e4:f4:1d:5e:d8:92:f3:ad:20:ca:
1b:39:25:3c:9b:88:00:99:e6:8b:7c:39:e4:f8:e5:1f:60:02:
5f:94:d8:4c:df:24:29:d1:5d:5c:0e:94:e3:2f:fd:de:35:7c:
b5:bb:de:81:f2:ef:21:6e:55:a7:4c:be:fd:a3:43:2f:7a:d8:
c1:0a:22:b0:48:c8:18:98:92:4b:4a:d0:db:c1:46:f0:f4:b9:
bb:54:e5:6b:e4:d9:d2:a8:47:e2:ac:b8:64:88:c4:d3:3f:14:
50:85:52:8a:17:7a:6c:52:37:51:af:fd:e2:ef:cd:19:82:47:
43:80:4a:d3:6f:30:b1:6a:6a:2b:d1:e5:7d:b4:1f:bb:3f:a3:
d3:0a:3a:3a:cc:1e:96:96:9a:36:62:25:b1:85:be:eb:1d:1f:
17:ab:68:2f:0c:60:0a:53:82:47:16:42:dd:91:67:83:a0:ce:
96:bc:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:23 2025 by rpki-client