Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e20383334.roa
File: 3230382e39312e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lxKb1Br/7xPGhFerGBdpECvCjQkQ4sL9ZLcKikQXtWI=
Subject key identifier: BB:EC:FC:37:59:1D:78:B3:45:93:EA:27:13:55:93:D9:5A:B3:3B:A3
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 223FACFF8A0CA717165AF75D03C9209BDD25CAC3
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e20383334.roa
Signing time: Fri 16 Jun 2023 00:00:12 +0000
ROA not before: Thu 15 Jun 2023 23:55:12 +0000
ROA not after: Fri 14 Jun 2024 00:00:12 +0000
asID: 834
IP address blocks: 208.91.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:3f:ac:ff:8a:0c:a7:17:16:5a:f7:5d:03:c9:20:9b:dd:25:ca:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Jun 15 23:55:12 2023 GMT
Not After : Jun 14 00:00:12 2024 GMT
Subject: CN=BBECFC37591D78B34593EA27135593D95AB33BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:ea:65:9b:38:62:98:f6:15:09:e9:08:e0:
d7:a1:78:10:4d:b3:24:bd:ad:3e:a0:d3:2f:04:5e:
1e:56:5d:07:78:1b:c4:bf:9e:1a:52:11:a0:5b:04:
02:1e:37:02:13:ed:ab:80:92:fb:ee:37:a7:b2:6b:
dd:67:91:db:b3:da:01:f7:09:1e:52:84:d5:89:95:
9c:8c:cf:1b:c8:d7:6f:1d:52:ad:b5:37:37:4c:c9:
d3:d2:87:53:6f:cd:e8:b4:ee:06:c5:b4:a4:96:c4:
2c:2f:e8:85:e4:1d:d8:f3:d0:90:0b:7a:b5:8f:0a:
5c:ec:f3:43:aa:90:b9:5e:d4:2f:9c:fc:c8:43:5e:
e0:94:fe:8d:ba:d3:e9:eb:58:c3:30:ea:f5:bf:9e:
0b:b0:a7:fc:b8:8b:75:88:59:d4:2b:e2:1c:f4:5a:
72:13:07:03:3e:78:6b:d5:d8:2e:f3:92:ce:f5:5a:
41:e3:65:5b:71:33:3b:6c:a2:2e:33:33:17:a3:71:
fd:2c:94:94:f4:19:ef:97:5d:03:45:09:35:c7:ce:
44:d3:91:37:9e:56:fd:09:84:b9:29:a4:20:22:18:
14:18:61:37:d2:b0:ac:b4:86:4d:56:8d:c2:0e:c7:
dc:5d:6e:73:01:b9:5f:7a:f8:56:d1:80:5e:3d:56:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:FC:37:59:1D:78:B3:45:93:EA:27:13:55:93:D9:5A:B3:3B:A3
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1c:1d:98:28:48:cb:ad:4c:bc:ab:e2:25:1a:e0:58:26:b9:
da:7e:10:9b:53:cd:6d:0c:31:74:07:74:c2:8b:ef:1f:a5:e6:
94:2a:01:20:59:01:7e:6c:47:4f:ae:51:ad:dd:e2:58:ae:83:
21:99:30:6b:e8:c3:3d:2a:fa:46:b4:94:60:6e:1d:74:df:46:
8e:62:36:2d:3e:d3:61:c0:34:4a:01:62:ae:bc:f8:bd:71:15:
ff:6a:46:3c:a5:77:f1:3a:3b:69:2a:b2:7c:51:7f:00:19:fb:
6c:91:f7:17:f5:48:cf:cb:13:ca:cb:8d:fa:6e:90:f7:61:3b:
93:34:20:89:a9:5e:ad:6b:bc:15:6e:95:ba:61:93:f8:28:43:
a0:06:d5:b0:af:c5:85:39:53:ae:61:3f:a3:94:0d:e7:19:11:
89:47:55:cd:02:cf:b9:8e:aa:95:15:95:85:71:71:2e:38:c2:
1a:87:0a:6f:0c:04:2a:ae:44:c7:49:9b:eb:64:fa:84:be:25:
d4:13:48:3d:dd:3b:84:75:f3:dc:5d:cd:2c:1b:13:00:03:45:
b8:e4:74:cd:f6:19:95:e9:bc:d5:39:83:33:55:3d:52:7d:0e:
1e:16:ba:3a:a3:35:c6:28:b1:ed:8b:93:40:41:cd:19:57:15:
a8:65:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:34 2025 by rpki-client