Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203439393939.roa
File: 3230382e39312e3139302e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: e84SvAs/r3YHa1iIHrSFuUu/iZDiwxy8cuLRi9l8+Tk=
Subject key identifier: 79:D9:71:5D:E7:75:84:40:B8:86:6D:7E:8A:C3:CB:D2:24:4B:60:D6
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 778AD92B6F040C6028F44AD9D7030ED58D8BB2D4
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203439393939.roa
Signing time: Thu 30 Mar 2023 16:41:34 +0000
ROA not before: Thu 30 Mar 2023 16:36:34 +0000
ROA not after: Thu 28 Mar 2024 16:41:34 +0000
asID: 49999
IP address blocks: 208.91.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8a:d9:2b:6f:04:0c:60:28:f4:4a:d9:d7:03:0e:d5:8d:8b:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Mar 30 16:36:34 2023 GMT
Not After : Mar 28 16:41:34 2024 GMT
Subject: CN=79D9715DE7758440B8866D7E8AC3CBD2244B60D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:ad:cb:9e:97:b3:14:97:bf:72:a0:a8:b2:
05:55:e9:7d:a4:a3:48:7c:af:92:a7:2a:c8:5d:b6:
ef:eb:6c:0d:69:4a:bb:b9:cc:ae:3b:46:21:58:bc:
9a:66:54:b0:56:5b:c9:b7:77:90:42:67:9a:0d:03:
87:0d:9d:b4:e7:60:20:d1:55:15:23:79:d5:4b:3d:
68:53:bc:c1:65:98:84:16:6a:63:27:7b:3b:c7:2a:
e3:27:70:ed:3b:aa:92:1c:bc:6d:74:58:bb:7b:a0:
34:5e:7a:86:c4:fd:1b:3a:43:92:20:1c:10:fb:77:
30:c4:52:d5:7f:03:19:1f:19:d7:04:91:b7:ad:4d:
f2:3b:65:82:9b:9a:f8:f3:fe:28:5f:0f:95:1e:7d:
c3:77:ca:90:02:8e:aa:22:5a:73:9f:36:71:a4:42:
30:b4:03:b9:e4:4f:fe:15:48:be:61:b3:03:3f:3c:
9f:20:c8:df:53:fe:5c:8b:43:bc:ec:0d:76:64:12:
f2:d0:e8:4c:3a:66:33:a6:4d:4c:de:e5:bb:33:00:
0d:d9:4d:4e:ce:8e:b5:c0:c6:00:16:b1:bc:21:ca:
56:51:14:d0:7e:aa:46:9a:77:80:a8:ba:71:09:4d:
19:b5:5c:db:57:48:21:9b:6b:0c:74:b0:9b:82:7a:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D9:71:5D:E7:75:84:40:B8:86:6D:7E:8A:C3:CB:D2:24:4B:60:D6
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.190.0/24
Signature Algorithm: sha256WithRSAEncryption
83:42:cd:3e:68:6a:02:39:3e:f5:76:9f:df:29:04:d9:3f:13:
be:92:8d:77:4c:07:a8:e5:c6:db:b2:86:3e:ac:d0:d3:b6:54:
10:86:5f:97:1f:2c:eb:ce:ae:cb:4b:a5:d5:c8:5f:03:2e:bd:
87:bb:92:04:25:9f:7b:1f:79:78:e4:82:7f:c7:aa:f8:02:64:
08:f2:9f:b0:6c:ea:26:ee:20:37:12:73:be:7b:d1:ff:df:91:
2d:d3:87:a4:f3:4f:16:1e:85:e8:87:d0:80:49:c4:9f:b4:92:
f3:58:1e:24:8a:44:bc:60:0c:34:8f:62:56:c0:d1:a4:e4:35:
a0:e4:7a:bb:17:13:c3:13:65:71:81:b7:d4:08:5d:ab:e1:45:
f0:ed:fd:a6:84:85:13:11:ea:ec:e7:85:6a:c1:65:99:3a:46:
95:f0:d3:fc:8f:a3:20:11:53:da:f3:68:44:d9:75:3d:ac:47:
8b:cf:b1:60:8a:8e:03:2c:f4:05:77:54:b9:13:33:30:93:b6:
94:e9:5a:1c:bb:20:0e:87:b9:92:e9:a9:90:49:15:3e:6d:4c:
b1:5d:cb:4c:98:24:d0:86:e5:70:55:bb:60:5c:8d:8a:cb:c3:
55:89:56:22:92:d0:29:4c:01:ce:1d:5a:ae:54:de:75:09:9f:
4d:43:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:28 2025 by rpki-client