Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203533333536.roa
File: 3230382e39312e3139302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: pzF0Sd/vsJ8zAFpUgZS93jprgNMEnp4Gm0ULra7Eyag=
Subject key identifier: ED:8F:D4:F7:87:96:E3:B1:A0:70:B5:AA:C2:D4:FB:8D:03:81:BA:44
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 3DBE0A1FB1C4360F194A77C214A418CE877ED067
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203533333536.roa
Signing time: Tue 29 Oct 2024 10:30:09 +0000
ROA not before: Tue 29 Oct 2024 10:25:09 +0000
ROA not after: Tue 28 Oct 2025 10:30:09 +0000
asID: 53356
IP address blocks: 208.91.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:be:0a:1f:b1:c4:36:0f:19:4a:77:c2:14:a4:18:ce:87:7e:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Oct 29 10:25:09 2024 GMT
Not After : Oct 28 10:30:09 2025 GMT
Subject: CN=ED8FD4F78796E3B1A070B5AAC2D4FB8D0381BA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:70:ef:18:2a:e2:03:da:99:90:d5:b3:01:56:
7c:c1:4c:f1:ce:c4:00:28:34:f0:b9:59:cc:7e:d9:
6e:e5:bc:a0:d5:2f:6a:8d:a2:90:30:2f:40:bc:a9:
18:f7:4e:b0:49:a3:38:47:1f:9d:5d:a6:42:ec:ed:
7f:f7:92:0c:24:ff:ed:ff:86:6c:76:b4:70:6b:23:
59:e9:20:69:96:5a:78:2c:24:0f:7f:ea:72:99:dd:
03:2e:92:fc:42:39:9c:ea:5d:84:40:ab:28:02:7c:
5f:d7:3f:ab:8d:e2:06:50:fc:25:48:fa:5b:2a:ea:
0c:56:e0:9c:43:33:06:e8:ee:2c:fb:62:e4:e7:7f:
aa:5b:4d:3a:16:cd:d5:68:7a:9e:19:be:96:db:07:
44:70:72:af:11:85:e6:08:97:c8:66:96:70:f7:55:
36:3e:8d:07:f6:c6:e3:9d:27:8e:56:5f:2e:f9:57:
fd:05:6a:98:ad:fe:c6:54:e3:5d:2a:70:49:68:1e:
2d:55:c1:68:a8:9c:cd:2e:2a:7a:fe:8a:0c:4d:c1:
e8:d9:37:6b:f0:5e:e1:2c:82:36:4b:28:28:e6:6b:
89:39:ec:b1:2a:6d:73:f9:4e:e0:72:26:2f:e0:9c:
e8:91:6c:ee:56:8b:a8:02:0f:d5:95:8c:31:a2:f4:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:D4:F7:87:96:E3:B1:A0:70:B5:AA:C2:D4:FB:8D:03:81:BA:44
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5e:db:ed:15:3d:75:e0:67:57:96:c7:20:89:74:0d:22:cc:
d4:2d:c9:d3:ff:da:9e:72:de:92:09:b8:be:cc:95:03:72:1e:
01:25:0f:e0:2c:c4:78:a7:9f:f8:d1:fb:23:e3:d1:a3:82:e6:
f4:78:e7:bb:21:a4:bf:da:2a:92:58:f6:a7:b9:02:74:68:95:
ed:b4:a3:b3:6b:6c:bf:05:7a:50:89:8b:88:b3:07:16:ff:6e:
d0:d6:81:92:b0:e2:8f:1a:1f:16:31:06:a2:bf:1e:2e:19:5a:
82:ef:eb:f9:ed:97:39:fc:d8:43:31:2b:f5:85:14:d4:6e:7a:
db:f8:a1:2c:72:5a:ae:3d:e9:bb:84:28:8f:83:90:b5:d6:4d:
6e:52:95:97:3e:26:3c:a2:f5:bb:28:df:7f:5d:bc:48:49:9b:
6c:30:ae:81:23:ee:92:39:04:42:00:6f:30:e6:b8:99:ea:3b:
7e:82:7b:81:d3:03:12:ae:df:53:18:f1:64:fa:ae:1d:21:f7:
bf:6c:d5:35:5b:5f:33:0d:7e:ca:6d:15:91:01:9b:26:dd:f1:
67:10:18:97:44:ca:af:bd:2f:b9:f1:6e:3b:e0:45:5e:92:fc:
db:c8:0e:02:6c:75:6d:0b:89:ca:05:12:2d:97:3b:d2:2f:b8:
9d:b1:c7:58
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPb4KH7HENg8ZSnfCFKQYzod+0GcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjQxMDI5MTAyNTA5WhcNMjUxMDI4MTAzMDA5
WjAzMTEwLwYDVQQDEyhFRDhGRDRGNzg3OTZFM0IxQTA3MEI1QUFDMkQ0RkI4RDAz
ODFCQTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHDvGCriA9qZ
kNWzAVZ8wUzxzsQAKDTwuVnMftlu5byg1S9qjaKQMC9AvKkY906wSaM4Rx+dXaZC
7O1/95IMJP/t/4ZsdrRwayNZ6SBpllp4LCQPf+pymd0DLpL8Qjmc6l2EQKsoAnxf
1z+rjeIGUPwlSPpbKuoMVuCcQzMG6O4s+2Lk53+qW006Fs3VaHqeGb6W2wdEcHKv
EYXmCJfIZpZw91U2Po0H9sbjnSeOVl8u+Vf9BWqYrf7GVONdKnBJaB4tVcFoqJzN
Lip6/ooMTcHo2Tdr8F7hLII2Sygo5muJOeyxKm1z+U7gciYv4JzokWzuVouoAg/V
lYwxovTXAQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFO2P1PeHluOxoHC1qsLU+40D
gbpEMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5
ODY2M2Q4MDcwMi8wLzMyMzAzODJlMzkzMTJlMzEzOTMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBbvjANBgkqhkiG9w0BAQsF
AAOCAQEAoF7b7RU9deBnV5bHIIl0DSLM1C3J0//annLekgm4vsyVA3IeASUP4CzE
eKef+NH7I+PRo4Lm9HjnuyGkv9oqklj2p7kCdGiV7bSjs2tsvwV6UImLiLMHFv9u
0NaBkrDijxofFjEGor8eLhlagu/r+e2XOfzYQzEr9YUU1G562/ihLHJarj3pu4Qo
j4OQtdZNblKVlz4mPKL1uyjff128SEmbbDCugSPukjkEQgBvMOa4meo7foJ7gdMD
Eq7fUxjxZPquHSH3v2zVNVtfMw1+ym0VkQGbJt3xZxAYl0TKr70vufFuO+BFXpL8
28gOAmx1bQuJygUSLZc70i+4nbHHWA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:33:47 2025 by rpki-client